This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File:                     RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier:          yppLBtKSzu1xdXEsoWD4ReNXQNorM9lx5oKNjYx+n5A=
Subject key identifier:   5D:D7:BE:BC:23:6D:90:58:E2:69:90:16:67:D7:11:23:A3:14:F0:04
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer:       /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial:       019C43C717B6052A13DB65CB76FB1DA21F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number:          066D
Signing time:             Mon 09 Feb 2026 19:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:47 +0000
Files and hashes:         1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: NDkCoT4/HKRIOmxaIeCTbjBFGpiX0lF6w8Pfra9+nDI=)
                          2: oCt8auGQpXUjEabo0a0mrHcE8mA.roa (hash: TaTgQOOqbIQbFt9MChM73ZfXSDx+bRyOV5FHdrddGfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:17:b6:05:2a:13:db:65:cb:76:fb:1d:a2:1f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
        Validity
            Not Before: Feb  9 19:00:47 2026 GMT
            Not After : Feb 10 19:00:47 2026 GMT
        Subject: CN=5dd7bebc236d9058e269901667d71123a314f004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:d3:e5:c1:5e:0b:f9:fd:ec:d2:1e:8c:2c:
                    e0:23:eb:35:85:43:b2:8a:d4:44:96:96:10:e4:49:
                    15:d0:f6:5e:b3:7b:cc:56:48:4f:90:19:ac:31:07:
                    83:2c:c7:c3:bc:b6:cd:ea:e2:8f:2b:1c:a6:80:3d:
                    a2:a9:5a:19:21:c8:21:02:ea:0d:a3:4c:86:5a:b9:
                    9a:e8:f3:db:71:f0:ba:aa:5f:d1:81:79:c4:a7:81:
                    5a:50:90:75:06:a7:5f:6a:ca:69:d3:3b:6a:2c:86:
                    c3:4e:ce:4c:18:f2:49:4e:31:28:5f:69:db:04:89:
                    28:fa:5a:16:e4:a0:0b:53:e2:f9:d5:a5:ff:4b:57:
                    aa:a9:09:b1:8c:b6:bc:ef:16:d8:65:a0:d7:d5:37:
                    c1:a5:71:6c:e7:ac:9d:ba:92:bb:d7:05:6e:d8:21:
                    55:be:f3:92:e8:6d:de:4f:b8:93:46:3e:fc:89:8a:
                    d7:01:04:d3:e4:09:33:aa:c4:94:35:42:b5:99:d0:
                    b4:c1:b0:e2:d3:b3:d9:db:60:d8:5d:a5:2e:72:bf:
                    7c:68:e2:6f:7d:c0:5d:14:1d:de:46:ab:ba:10:63:
                    b2:ed:88:02:05:9f:2f:b1:59:f5:23:73:b4:ec:70:
                    63:01:3d:14:a8:5e:7c:1d:c2:5b:98:d4:a1:da:eb:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:BE:BC:23:6D:90:58:E2:69:90:16:67:D7:11:23:A3:14:F0:04
            X509v3 Authority Key Identifier:
                keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a7:6d:e9:1a:e9:2f:44:58:c5:54:4f:02:72:1d:4a:90:2e:
         5f:17:39:a3:db:53:53:ab:a4:6a:44:e4:08:5f:c8:a6:be:9b:
         4e:3e:80:ba:d7:c6:13:d7:1b:8b:ea:87:f6:1e:64:d4:a7:1a:
         99:30:c2:02:71:69:a9:d9:80:ff:0f:0a:81:26:f6:c5:09:f3:
         cf:e4:e7:c9:ef:10:3f:ab:6e:13:f3:1e:2f:31:24:84:11:e3:
         6b:0f:be:e0:1f:73:99:49:11:bf:74:ba:09:b0:f4:1b:06:22:
         21:08:46:7a:80:fa:6d:e1:7c:86:73:61:ee:ab:92:54:44:3a:
         86:5c:04:d9:c8:ce:4e:44:49:51:3c:5d:43:1e:4f:da:8c:68:
         76:d1:45:02:b5:c1:00:26:ee:47:8b:55:40:15:68:98:f8:ff:
         cb:39:61:ab:a5:67:5d:e0:27:ff:90:41:2c:90:a8:7b:8e:5e:
         c9:81:18:ce:0a:40:71:ed:db:56:a2:6a:a6:af:b4:51:15:89:
         b8:c5:0b:9c:ba:13:fe:c5:06:47:a1:81:87:90:98:b7:fc:55:
         7d:8a:af:15:ac:8b:4b:96:83:c3:e6:ea:bd:2c:5a:e4:c8:ba:
         47:41:f9:f8:0b:36:99:83:44:5e:e6:aa:ae:c5:c9:35:14:f0:
         ab:08:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:52 2026 by rpki-client