This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File:                     8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier:          zn2ptXVqnGf1T5Ngg08S0vv95ye/ZNVQoIXJE21/Jog=
Subject key identifier:   05:0F:E7:1E:AE:16:34:94:9D:E6:B1:34:BA:0F:3C:CC:0F:3F:99:3D
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer:       /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial:       019C43FE16D7BF2A6D58CF35C29B7AF6B09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 20:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:51 +0000
Files and hashes:         1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: jwiHAxJUU/RbIrErsu4sgQjqkLZuhZSIwqBFHgiax9Y=)
                          2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:16:d7:bf:2a:6d:58:cf:35:c2:9b:7a:f6:b0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
        Validity
            Not Before: Feb  9 20:00:51 2026 GMT
            Not After : Feb 10 20:00:51 2026 GMT
        Subject: CN=050fe71eae1634949de6b134ba0f3ccc0f3f993d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:a1:b9:db:66:a6:c7:59:f4:9d:93:db:8b:
                    cf:22:4a:3e:4f:6d:be:c7:7c:92:55:8f:85:8e:c8:
                    59:f2:94:45:57:b6:59:bc:84:24:fb:2e:30:9f:e3:
                    f5:0b:62:52:2a:e9:85:c9:6b:b4:cf:4f:26:ba:0c:
                    69:a9:57:05:91:d7:13:56:27:1f:07:e1:d2:ec:67:
                    61:7f:41:ac:15:96:c1:ca:57:f9:7b:af:2a:87:eb:
                    7e:bb:48:79:39:a5:b8:1f:0b:b0:b4:65:5c:9d:c3:
                    02:0a:aa:fd:81:c9:3b:98:5d:f5:c4:e0:3d:85:d4:
                    b8:ff:4a:eb:1a:ab:f7:a8:04:2e:e6:7a:dd:dc:c3:
                    a8:c6:aa:78:6a:66:51:21:54:56:f4:9e:13:2e:f3:
                    9a:bf:c0:76:66:f7:ac:e1:31:a7:b2:bc:72:d4:4d:
                    81:87:95:bc:22:c9:00:31:5e:ca:93:df:fd:18:68:
                    45:a7:4a:7f:a9:01:12:95:78:44:34:7f:04:32:f6:
                    96:51:da:15:f8:d4:23:be:60:04:46:09:f5:96:17:
                    45:20:f3:e1:5a:56:5e:c5:21:ac:e3:bf:cc:3d:51:
                    3f:c5:36:22:96:c3:8e:a6:a5:ab:21:fb:01:39:4c:
                    86:d9:d7:7a:e5:24:7e:12:cb:67:a1:05:42:b2:20:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:E7:1E:AE:16:34:94:9D:E6:B1:34:BA:0F:3C:CC:0F:3F:99:3D
            X509v3 Authority Key Identifier:
                keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:b3:b6:13:e7:77:c0:81:b8:d6:40:4b:06:de:22:de:ce:
         fa:8c:71:fe:69:93:57:62:5f:34:58:3a:21:12:82:bd:1c:61:
         2b:f5:ed:38:5f:f2:ff:ff:73:a5:0e:c9:4c:bf:72:88:89:10:
         75:76:46:c4:82:29:bd:a7:79:d1:17:0c:8e:f1:29:9b:64:6c:
         27:a1:01:72:7a:06:10:d6:c6:47:61:00:57:9a:d1:82:ca:d4:
         bc:10:eb:25:2c:2f:fe:28:b2:04:fd:6c:40:72:68:ae:0d:33:
         b8:77:eb:2a:60:2e:9d:64:16:89:2c:5f:e5:9b:ac:7b:38:50:
         e8:76:47:e9:b3:d0:bd:f4:5f:81:9e:73:66:fb:52:03:3d:60:
         11:b1:39:3e:9a:35:bf:f1:f5:cf:bb:2e:e0:c2:ab:1d:5c:18:
         c0:28:ba:42:fb:80:d2:43:77:17:9b:65:fb:ea:08:a2:2a:3b:
         a9:f8:72:ea:f3:ae:e1:04:1c:09:80:12:cf:95:6b:92:9c:06:
         93:43:aa:61:93:c8:7b:36:bf:e0:a3:eb:bc:21:86:10:7a:af:
         fc:28:ea:a1:41:31:76:46:b2:f6:4e:bc:91:ae:a9:f7:29:58:
         b5:32:50:1f:47:a8:0c:11:40:13:09:17:30:46:d2:5a:fa:3a:
         f2:63:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:54 2026 by rpki-client