This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          +8nIA52X9YGLv3jq54kv5kUObZbyDlwU6gnddmcMUKg=
Subject key identifier:   23:CC:13:FB:0E:71:7A:74:ED:7E:D0:8D:E7:BF:3A:08:EC:6D:F1:82
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       019C4434E413C4452B232EB7F395F277973B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          0531
Signing time:             Mon 09 Feb 2026 21:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:42 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: 09VfB9FK2IFwU5/unPbUVQq1Mwi8ECqPlmbD1c5m7tA=)
                          2: PuYckfTPaEQN4beiQXX7upuOr3I.roa (hash: sBCyR1KSqyGnMo+n9mb4woR1xziuhqzF6ro+c/USxkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:e4:13:c4:45:2b:23:2e:b7:f3:95:f2:77:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Feb  9 21:00:42 2026 GMT
            Not After : Feb 10 21:00:42 2026 GMT
        Subject: CN=23cc13fb0e717a74ed7ed08de7bf3a08ec6df182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:da:a7:bd:7f:2b:79:9c:61:91:3c:1a:a6:
                    77:80:83:a3:5f:60:a9:e0:d8:a6:4b:50:19:6f:ab:
                    24:22:3c:bd:5c:15:c6:be:f8:72:4c:f0:56:c0:96:
                    df:9f:ad:00:84:c8:4e:ae:17:15:5b:2c:a4:c1:7f:
                    c9:ec:8a:56:73:45:7d:ed:47:bf:d2:7f:e8:e0:95:
                    e5:e8:e4:66:36:7a:d5:61:3a:96:78:e7:8c:ed:86:
                    1b:b9:72:3c:7b:0a:02:b2:bb:f6:b0:5b:25:f2:be:
                    a9:c6:1e:cc:31:51:58:ff:98:1d:6e:8b:49:14:a7:
                    bb:49:a4:64:2a:9c:e6:6b:8d:fb:33:75:bf:ea:37:
                    0e:d3:5d:b1:fa:d7:8d:52:3d:fc:1a:e2:37:e9:51:
                    96:3e:ee:8f:a9:7c:a2:58:b0:40:6f:9d:d3:1a:a4:
                    4b:68:bf:af:e9:ee:25:79:29:d0:cb:47:c7:5f:cf:
                    c3:a9:fa:6e:8b:e5:fe:c6:4d:0b:17:11:b5:4d:c6:
                    0a:5e:17:fc:b7:87:5b:a2:09:98:cc:3a:d4:22:e6:
                    8b:59:14:a0:c7:76:46:38:e2:42:8c:8e:96:4a:fa:
                    0a:82:a7:e5:44:ef:5b:65:6a:29:01:20:37:86:83:
                    c9:d1:1c:7c:db:91:96:f0:3f:d3:ad:e2:ed:61:12:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CC:13:FB:0E:71:7A:74:ED:7E:D0:8D:E7:BF:3A:08:EC:6D:F1:82
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:d4:99:c3:37:7c:29:b7:ec:fd:33:b5:39:0f:21:99:5e:
         e0:14:51:63:1c:cd:6d:a4:07:5e:28:21:af:e3:1a:14:fb:fe:
         fe:33:7e:3e:e4:5c:76:94:0b:f8:a5:f8:79:69:db:7d:ed:48:
         e0:33:43:46:a2:33:58:bf:fe:fd:e7:03:f8:4b:af:94:95:f8:
         d0:37:a6:6b:49:82:1d:d8:9c:d5:42:7e:e0:85:91:6d:d3:92:
         70:e6:df:b4:5e:49:92:f3:dd:ad:53:ab:63:c9:ba:23:fb:b0:
         4c:2b:34:68:49:57:73:c2:70:23:82:9e:5d:8e:84:d9:4e:4a:
         aa:1e:a4:9f:ab:a1:fd:83:15:1c:51:98:51:53:98:d5:e9:93:
         86:81:7b:da:f2:d9:3d:0f:b2:e5:d8:15:16:59:be:eb:aa:e6:
         53:04:29:d7:55:f7:0f:1f:c2:d6:fa:65:5e:cd:3a:fc:65:8a:
         20:93:64:06:45:28:a4:9e:10:3e:bc:6e:10:d3:8e:6e:25:2a:
         38:57:a4:9b:fe:f7:08:b6:ef:f8:7e:35:79:55:1e:0e:28:9d:
         ad:a2:bc:f4:ef:d7:9f:29:2b:74:91:c7:e5:70:08:0d:e8:d3:
         54:86:c5:b9:a2:21:d5:3d:4e:be:86:25:7d:32:69:05:4c:a4:
         74:eb:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:47 2026 by rpki-client