This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File:                     CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier:          Wb/IrqzRzzEv6RFToRx6Xsb4Rb3pRh9H/f8Q1umvBRY=
Subject key identifier:   34:14:9C:C2:FB:46:A4:D0:A5:94:9D:44:65:1C:22:8F:AD:B6:EC:D0
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer:       /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial:       019C43FDA99E6D51CFDF63E37A333DA9AE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number:          10FB
Signing time:             Mon 09 Feb 2026 20:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:23 +0000
Files and hashes:         1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: B0gVuctCdTKRL6BNqzh13K+V5qN7PDIGIGfx2sueXHg=)
                          2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:a9:9e:6d:51:cf:df:63:e3:7a:33:3d:a9:ae:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
        Validity
            Not Before: Feb  9 20:00:23 2026 GMT
            Not After : Feb 10 20:00:23 2026 GMT
        Subject: CN=34149cc2fb46a4d0a5949d44651c228fadb6ecd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:a7:48:e4:55:b4:c2:3a:ef:5b:ca:b8:79:
                    da:7a:5d:3a:a3:3c:d1:45:17:29:eb:9c:43:ff:ab:
                    66:ef:78:38:0f:2c:b2:20:2d:db:23:c2:18:1c:1e:
                    3a:90:84:3f:33:5d:3b:c1:aa:f6:70:1a:de:1a:c6:
                    b0:81:51:cc:f7:5d:42:1e:b6:87:f2:bd:46:14:ca:
                    3b:9c:24:59:82:85:8c:1f:de:17:8a:54:19:e3:9d:
                    d4:2a:6d:a4:9b:d2:c4:5b:97:56:6d:62:53:7c:e5:
                    93:16:75:b6:18:b6:b9:1e:3e:33:46:52:9a:31:a3:
                    52:43:64:fa:b8:15:5d:83:be:28:b4:53:fb:b0:f0:
                    46:74:bf:15:2e:82:22:82:5b:d5:9f:ee:3d:95:c7:
                    a6:34:90:87:8e:fa:f8:5e:f7:55:03:76:26:d7:29:
                    70:a0:e3:a8:f8:94:85:16:93:fa:dd:75:dc:40:ed:
                    6f:3e:40:94:9a:64:ae:70:ed:f8:6c:a5:f7:33:58:
                    2f:3f:01:fa:a2:f9:6c:21:19:6d:c2:4c:c0:08:8f:
                    d4:ed:63:b1:39:d4:58:ff:33:8a:53:f6:11:f6:64:
                    94:4c:b5:bc:2c:19:80:e0:4f:7d:21:17:57:ce:19:
                    af:bc:b5:90:9c:a6:cc:bb:ad:1c:c6:70:bb:62:7d:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:14:9C:C2:FB:46:A4:D0:A5:94:9D:44:65:1C:22:8F:AD:B6:EC:D0
            X509v3 Authority Key Identifier:
                keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:89:85:52:95:75:34:fe:d6:b7:50:fa:74:ae:75:08:7b:
         e3:3d:db:3e:fa:93:f5:1e:61:ab:00:83:fd:8e:cd:a3:a9:9e:
         82:33:28:fd:8b:cf:8f:e3:a2:78:98:84:c0:6e:38:c1:a5:e9:
         80:1d:19:1c:b5:4d:bc:2c:01:05:97:0e:76:d3:9e:47:2c:f1:
         fd:6c:c1:9c:0a:0c:84:44:ce:9b:5e:49:a5:eb:8c:b7:ef:f6:
         20:88:4e:df:07:83:df:53:79:61:12:4a:0d:d7:bc:02:3e:1c:
         89:3e:ee:2b:80:03:25:66:30:3c:c4:af:09:cb:ee:28:ed:70:
         9b:c3:2f:4e:3f:bc:ce:f7:74:f1:9b:10:58:ed:d9:db:ef:46:
         fc:e9:ef:3f:c5:6c:78:4c:78:a3:41:17:8d:25:39:65:b4:9f:
         40:ae:ec:52:ac:4c:95:f7:32:0a:71:d1:c1:6c:61:f8:bc:2a:
         8c:ee:5e:bf:a7:34:3d:43:da:4b:0a:4e:aa:7d:ae:2d:52:66:
         0a:dd:02:9d:77:04:b2:3d:a5:13:f9:5c:54:6b:a0:be:f9:4b:
         dc:0a:2d:cf:fa:31:c2:9b:8e:07:2a:5a:02:2f:84:6d:41:29:
         43:9b:e2:38:8c:1d:f4:b5:a0:15:8b:18:c5:be:bb:29:af:bb:
         9d:4c:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:39 2026 by rpki-client