This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File:                     8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier:          HWIq4glNB0+/PwAo1yrjfW65hXIdyxk5w9IOaJqVd7c=
Subject key identifier:   B7:0D:DC:C4:72:57:F0:EC:7B:1B:96:54:E8:04:19:1C:03:DA:B4:DE
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer:       /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial:       019C1F15CD5CE1BC0E11C80DDE45525CF34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number:          04DF
Signing time:             Mon 02 Feb 2026 16:00:48 +0000
Manifest this update:     Mon 02 Feb 2026 16:00:48 +0000
Manifest next update:     Tue 03 Feb 2026 16:00:48 +0000
Files and hashes:         1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: kN6Q2yeFg6B+Ty+ZejRMEu4zeScMM+rgWPRM1tewXs8=)
                          2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=)
                          3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=)
                          4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:15:cd:5c:e1:bc:0e:11:c8:0d:de:45:52:5c:f3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
        Validity
            Not Before: Feb  2 16:00:48 2026 GMT
            Not After : Feb  3 16:00:48 2026 GMT
        Subject: CN=b70ddcc47257f0ec7b1b9654e804191c03dab4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:13:3a:39:61:ec:35:53:6b:42:e9:77:78:
                    3d:0c:2e:68:ce:dc:29:3c:8a:83:73:9e:8d:28:63:
                    41:d8:d6:4b:46:82:77:3d:ca:bb:c6:73:15:c0:ca:
                    05:7e:a2:29:8f:b3:d6:4d:a7:cb:90:81:9b:b9:cb:
                    55:db:61:2d:80:1d:fd:fe:2c:9a:31:fb:b0:75:47:
                    09:96:4b:03:0c:a5:42:ac:4e:ab:c2:b2:8c:e2:25:
                    1e:15:b4:98:f9:c1:af:bb:73:5f:9a:03:fc:e9:b8:
                    df:7e:0c:64:8e:8b:76:8f:1a:3f:38:eb:b1:09:f8:
                    c0:21:18:55:03:17:05:10:2f:c1:67:c8:54:16:34:
                    c5:72:0e:df:f5:58:ed:0b:86:f8:5a:29:a3:b2:6a:
                    7f:d5:19:e0:6c:11:f4:f2:a5:1d:6f:2c:40:9e:67:
                    53:5b:12:5c:3e:6b:b2:36:d2:8c:85:77:5d:fd:72:
                    1b:2d:87:83:58:f9:bb:8d:3d:e2:85:c6:6b:5d:32:
                    7f:d2:02:ad:12:14:e1:ce:33:87:0a:9f:f1:03:cb:
                    8d:6c:01:00:e8:aa:59:b4:23:77:f3:a4:0e:b2:f5:
                    f9:99:2b:2e:08:16:af:00:38:3e:0d:bc:33:6e:3a:
                    db:ab:af:3a:f3:c9:26:38:8c:60:bf:70:cd:9f:0b:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:DC:C4:72:57:F0:EC:7B:1B:96:54:E8:04:19:1C:03:DA:B4:DE
            X509v3 Authority Key Identifier:
                keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:25:20:07:ca:cb:d9:59:e5:be:57:c9:78:56:35:65:89:3d:
         18:bc:1a:ff:08:40:bd:cd:e7:03:f2:f3:1c:72:41:c5:f2:d9:
         81:f5:1f:bf:8d:2a:97:af:5b:51:f6:f5:e6:26:f3:2f:cf:69:
         3c:b4:ef:f7:56:bc:ce:9e:4d:c6:6e:44:b9:bf:8a:84:8f:e5:
         47:b8:40:04:48:ca:d7:bd:68:00:35:4b:da:a8:16:68:6f:c4:
         d5:9f:70:aa:b2:7e:13:ef:f7:82:2d:72:fe:1d:94:f0:fa:0d:
         e9:29:25:66:c2:11:4d:7d:95:20:93:77:22:91:be:38:c9:c1:
         13:53:98:9a:c6:fd:81:36:0d:2f:42:c1:80:24:17:6b:8f:07:
         30:4f:37:3c:1a:7d:99:75:4b:6e:ed:da:cb:87:ab:24:1b:ca:
         92:28:3c:d1:c2:c2:72:a5:c6:e1:3f:a4:4a:08:6b:c3:b5:68:
         75:8a:f1:0f:b1:a0:32:67:a3:5b:1e:05:3e:d6:80:26:aa:f8:
         d6:e3:2a:6b:32:e5:f6:0e:2b:72:cc:ad:2c:4b:93:15:7f:d6:
         dc:97:77:73:4b:02:9c:5f:e3:c3:31:99:b9:16:b5:8e:b8:15:
         66:38:b3:51:dd:a3:5b:ab:3c:eb:af:95:5f:53:a8:c6:95:b8:
         07:d6:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:55:01 2026 by rpki-client