This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File:                     _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier:          ivg3SEUAbhV1vyZU50nMt6+dpNQ8zZU6JJfHeqxxK0M=
Subject key identifier:   B8:B5:54:2F:50:5B:1D:1A:63:01:14:EB:4F:D9:38:F8:5A:DC:37:52
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer:       /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial:       019C42EBA48CFF4D42125614EB4C2E218774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number:          0F63
Signing time:             Mon 09 Feb 2026 15:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:05 +0000
Files and hashes:         1: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: EMSbny1eLXQ8kG6+/KX/jS0bni60Xh8/p6RQ5GNvJdE=)
                          2: aZfqaIa_bktc0XTanoEHKkOjRso.roa (hash: mjs8YYHIWn4rHP7Qb2KDD/bwrim/6L1hngAF7LoemgM=)
                          3: p-AfH-TKOfnhGj7blmBf1Eou-vY.roa (hash: zP2xRRGKuJXHvcRgKn99qh8Cqni6s2W90yR9ji222a8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a4:8c:ff:4d:42:12:56:14:eb:4c:2e:21:87:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
        Validity
            Not Before: Feb  9 15:01:05 2026 GMT
            Not After : Feb 10 15:01:05 2026 GMT
        Subject: CN=b8b5542f505b1d1a630114eb4fd938f85adc3752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:37:3e:00:18:e5:ee:ce:f3:41:50:eb:72:
                    79:99:6c:68:65:b9:9b:e6:a3:ab:b5:c6:0c:57:72:
                    94:c1:8e:d6:2e:42:69:14:46:58:9e:47:55:ad:39:
                    57:62:ed:32:96:c0:9f:e1:74:a9:bf:67:fa:db:1b:
                    fb:94:89:c9:0b:a5:af:70:9f:71:25:37:5e:68:c4:
                    61:af:19:d9:bb:ac:d8:eb:f0:ea:20:2b:80:4f:4b:
                    cd:2a:ec:93:e2:d9:30:5d:98:8b:81:de:0c:fb:86:
                    a3:a7:43:37:7b:9f:a7:04:cb:2b:5e:32:79:10:b4:
                    80:85:78:b4:c9:1e:5b:3f:cc:8d:2c:ae:a9:2e:ff:
                    66:08:05:2c:d3:16:35:66:2f:cd:14:90:46:13:e9:
                    1e:03:05:ca:13:db:2e:28:01:27:1d:e1:91:7b:88:
                    d0:d4:bb:2d:ef:f8:8b:1f:b8:bb:38:3a:cd:38:e8:
                    dc:13:25:6b:c8:3f:6d:e7:d0:fa:1b:d8:a5:de:40:
                    f5:b9:66:0d:dc:64:eb:16:d2:0f:b7:d8:f6:ab:72:
                    98:f1:37:0c:0c:d5:c4:d1:6d:16:9e:d9:22:6b:f9:
                    52:3b:d5:92:cd:c8:59:16:1b:fd:87:13:87:91:5c:
                    b1:0b:97:52:4d:78:0f:65:5e:d1:e5:c0:6f:12:ea:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B5:54:2F:50:5B:1D:1A:63:01:14:EB:4F:D9:38:F8:5A:DC:37:52
            X509v3 Authority Key Identifier:
                keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:9a:6d:05:15:23:e0:db:38:2e:b8:f3:48:14:b5:d6:45:
         99:ac:bf:88:b7:5e:0c:a1:41:a2:21:47:5b:b4:08:24:2a:71:
         dd:31:c1:2d:dd:1e:8c:4c:ed:ad:77:92:d1:22:a5:0a:cc:0c:
         2f:cb:cc:7c:99:99:79:c3:49:6e:54:ea:f9:4b:27:04:41:b3:
         76:fd:60:9a:f5:64:02:b7:b3:38:15:c1:f5:17:95:d7:57:86:
         9b:02:ba:e3:86:0b:b0:e4:70:fc:83:c5:66:ad:f9:54:b3:0f:
         14:e0:aa:79:dd:57:84:0f:13:47:61:df:a1:5f:42:03:99:2b:
         8f:8b:49:0b:94:9f:7d:92:b8:6c:5a:41:d7:66:50:12:89:62:
         0a:8a:c5:25:d6:b1:3a:4a:26:6b:e2:d0:35:d6:a9:6d:63:d4:
         17:3d:bd:86:e7:4c:3e:c9:fd:a2:8c:8f:ff:dd:d9:96:4a:ab:
         e4:6e:d7:05:9f:cc:a9:15:25:64:34:79:19:ea:63:d8:e5:6c:
         84:a1:2f:cb:a1:d2:1b:18:a1:4c:85:e3:6d:8a:97:a8:0a:d2:
         a7:52:98:42:06:28:02:c2:03:0a:94:e8:dc:fa:2f:90:9b:9e:
         80:b9:6b:0c:61:78:b9:1b:6c:15:d2:b9:51:03:1d:67:e5:b2:
         cf:1e:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:31 2026 by rpki-client