This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File:                     R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier:          6iP0RFE5LbGsqPQk7Kbn+QIV3a0cD1A6ylib1AO6VMk=
Subject key identifier:   E3:C8:53:01:46:0B:F6:61:D2:97:CF:AD:F5:63:85:E9:86:8A:A4:31
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer:       /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial:       019C41A216DA6848011835B1F930C6F4096E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number:          070F
Signing time:             Mon 09 Feb 2026 09:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:07 +0000
Files and hashes:         1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
                          2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: aNyuruEQPKmNTaV1sALlG4VfpdCKHV5cYLtkwLeRaZw=)
                          3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:16:da:68:48:01:18:35:b1:f9:30:c6:f4:09:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
        Validity
            Not Before: Feb  9 09:01:07 2026 GMT
            Not After : Feb 10 09:01:07 2026 GMT
        Subject: CN=e3c85301460bf661d297cfadf56385e9868aa431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:a9:61:2a:76:a1:16:d1:8a:b5:05:f2:4a:
                    66:5e:e1:8d:06:00:1d:a0:e6:94:fc:48:a4:be:af:
                    6e:59:89:66:ad:9d:d2:45:f0:17:a0:5b:92:d1:74:
                    dd:81:16:cb:06:40:be:e0:7c:22:55:ad:88:11:fd:
                    b3:8d:c8:48:c6:26:df:53:b0:6e:58:78:6f:e4:1b:
                    fa:dc:64:68:4c:61:1a:83:7c:84:f9:1b:a2:e0:a1:
                    d4:6d:5c:40:9f:4d:76:ff:b7:06:24:da:2d:50:28:
                    42:d2:95:b1:d6:16:ba:db:f6:31:4b:d8:02:44:93:
                    cb:d7:f0:cf:a5:7d:00:bf:ea:38:e8:62:b2:8d:79:
                    50:af:5f:0a:62:54:65:4e:13:b0:86:ca:07:02:56:
                    06:66:c8:d9:d1:c4:e7:9f:94:5d:83:6e:4f:f3:a4:
                    c9:20:d4:e4:0e:c2:f1:b0:72:26:0a:99:5c:8a:c8:
                    fd:0d:d4:16:a6:f7:6c:06:9e:71:65:6c:11:12:bf:
                    93:0b:23:1c:e4:48:c9:5c:b9:17:f0:c2:8d:fc:37:
                    5b:6e:36:6b:e4:56:5e:31:0b:ee:ea:59:b1:30:d0:
                    df:07:c6:7e:dd:c1:cc:c9:1c:3c:9b:b3:45:7e:70:
                    f5:26:b9:4e:ae:2b:4e:db:d3:9f:ee:cb:e4:6c:05:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:53:01:46:0B:F6:61:D2:97:CF:AD:F5:63:85:E9:86:8A:A4:31
            X509v3 Authority Key Identifier:
                keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:00:ff:4a:8c:b7:d0:80:f1:c6:ce:50:75:c6:51:7a:e7:a3:
         79:0e:1c:86:fd:76:00:53:e8:80:83:3a:6d:64:12:28:bc:f9:
         53:11:d6:7f:a9:2a:5c:60:cd:ce:a1:52:58:7b:e5:67:de:9f:
         11:a8:3b:a1:ea:1c:89:12:af:d8:1f:b4:e2:33:29:fd:68:c2:
         dd:60:d1:86:c2:64:29:2a:32:ca:72:14:06:78:c2:a8:d4:d5:
         a2:45:07:74:a8:1b:c1:5a:3b:c8:1f:be:ef:87:26:c2:f0:d2:
         d4:0f:77:15:b1:b5:11:70:8e:05:88:dd:02:09:7d:ce:87:3b:
         6a:98:95:f7:97:3a:75:d8:db:b1:d3:6a:4f:7d:d6:0e:70:4f:
         94:7d:8a:99:2b:11:14:4e:35:9d:d3:32:79:01:da:84:65:77:
         de:e1:8d:81:bc:96:34:00:3d:ca:7f:47:84:17:89:b8:97:12:
         29:ee:94:9a:17:ac:f4:5c:3a:07:9f:62:4e:62:66:eb:1e:6f:
         91:df:38:88:37:44:d1:f0:6a:2e:89:fb:51:91:4c:38:e8:79:
         93:71:8a:fa:30:0e:58:5c:f4:90:83:26:69:cb:50:9f:80:d9:
         16:df:34:ac:5d:a2:8e:ed:a4:2f:20:f7:40:ca:cc:8b:c7:1d:
         a3:2a:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:45 2026 by rpki-client