This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File:                     MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier:          h+HTGz53WD6wkzFW1z6k4w2cGEfd3YyYU04eft1HYwM=
Subject key identifier:   9E:E3:DD:0E:3F:32:E8:3A:77:A8:A0:20:03:5A:65:09:FB:EB:79:82
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer:       /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial:       019C42B43F8226A54C375D0DFF3A3E3788B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number:          0F22
Signing time:             Mon 09 Feb 2026 14:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:34 +0000
Files and hashes:         1: ENxwjXTdbKTvs3cxszl-xyNLpXc.roa (hash: 47BjcSHsUkq+j3LunSdpEHT6VVnEgYALqU6b9V3eCd4=)
                          2: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: wOIZ7tO8zpmYjKjUrgQVIXCynWoJJFWyIF7FzuOuEMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3f:82:26:a5:4c:37:5d:0d:ff:3a:3e:37:88:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
        Validity
            Not Before: Feb  9 14:00:34 2026 GMT
            Not After : Feb 10 14:00:34 2026 GMT
        Subject: CN=9ee3dd0e3f32e83a77a8a020035a6509fbeb7982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:5f:0b:85:0c:de:80:9f:28:2d:8d:9d:f9:
                    e3:bb:c4:53:2b:9b:38:3d:07:15:88:f1:2c:1b:73:
                    d4:6d:0f:04:d5:1b:6e:94:66:3e:bd:90:d1:23:71:
                    90:97:68:97:ac:79:8d:fe:4a:bb:1f:52:24:9b:e2:
                    2a:f0:b5:99:fc:d9:bd:3f:ec:73:94:09:40:77:42:
                    5c:21:88:bb:a2:d5:44:5b:52:76:86:65:96:be:53:
                    3b:0a:d7:8d:84:d6:0a:0c:17:d3:2e:f9:75:53:75:
                    9b:a4:ba:af:2e:b6:9b:6c:3f:93:17:a7:ba:6a:15:
                    80:66:dd:f8:86:32:86:7c:56:57:01:9c:62:b3:42:
                    e4:93:7e:0a:58:ae:51:e8:48:a7:c7:1e:c6:19:30:
                    b7:81:c7:f8:f6:02:1c:c3:16:e0:fb:89:86:87:9c:
                    7f:2b:00:4a:7b:a0:58:0c:88:9b:63:ab:e8:92:21:
                    4d:5b:30:ef:b5:98:50:8d:de:ca:3b:01:ae:aa:41:
                    67:3b:04:2c:e2:b2:69:ed:ad:8f:7b:a5:12:7e:d0:
                    a1:20:8f:d4:aa:0b:9e:8e:3f:ef:1d:cb:af:42:0d:
                    32:78:a7:85:d6:11:14:fc:fd:7c:c0:61:dc:4e:b8:
                    86:e4:c3:90:b5:61:cc:3c:c6:87:a1:ed:fa:d4:f9:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:DD:0E:3F:32:E8:3A:77:A8:A0:20:03:5A:65:09:FB:EB:79:82
            X509v3 Authority Key Identifier:
                keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:18:0d:25:21:3a:a6:bb:6b:74:70:c2:ac:75:f9:74:6b:99:
         2e:d2:cd:37:74:9e:d3:a1:04:57:5f:3f:a4:f9:37:8a:94:d9:
         75:9f:ff:b7:14:74:6d:8c:66:36:f6:9c:9a:21:3a:ab:c5:ba:
         7d:ad:96:28:9e:b8:9b:ad:1f:5f:8e:1d:7c:5b:0d:c3:e7:d0:
         c1:e8:75:ed:71:d1:b1:1d:fa:f4:57:20:81:b7:c8:57:1c:ad:
         4a:e7:6c:af:4e:0d:40:13:92:d2:32:df:a1:9d:ff:0c:e9:10:
         8d:7b:d0:97:0c:73:4c:f9:ad:23:dc:d4:f2:02:29:ab:b0:a1:
         49:d3:33:31:3c:57:90:d3:72:d1:b2:60:85:39:d4:b5:02:ab:
         b5:18:69:00:cf:8c:9a:95:f6:f8:5e:e8:1d:89:09:a7:d8:54:
         98:7a:c9:63:18:27:15:8b:c1:48:d4:28:a7:ee:02:08:e1:02:
         ca:a0:62:f0:9a:b1:14:b6:a3:d4:44:3b:c3:df:24:81:15:9e:
         48:9f:78:0b:a6:6a:c3:be:c3:01:8b:ca:50:7f:6f:ec:e6:d7:
         ed:9a:6f:35:d5:2e:a3:f0:10:11:95:16:c8:bc:36:1a:46:45:
         ed:b0:39:f6:76:18:13:84:8b:12:d4:93:8c:04:4d:0d:50:36:
         18:41:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:16 2026 by rpki-client