This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File:                     mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier:          ACgABwVe2LNMKev6ObyElYu+LmnhHBbth1K+at4N1Rc=
Subject key identifier:   5E:DA:FF:8A:49:FC:88:49:E4:5E:69:4B:84:7B:F4:E1:F4:7D:D4:3E
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer:       /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial:       019C43220B8C8D79686A804E67F3B6CA45DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number:          10FE
Signing time:             Mon 09 Feb 2026 16:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:30 +0000
Files and hashes:         1: eQZKGZ2aBM0yBF905-r8c86PiNY.roa (hash: Ih70b8QzHB6XF9meZM8P6Y7eTavMkPPydbwU5tJHSkQ=)
                          2: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: 2vmN5trQuuJLSOBIVxMeOLzqn/vyVp9njrQpgaUxbYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:0b:8c:8d:79:68:6a:80:4e:67:f3:b6:ca:45:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
        Validity
            Not Before: Feb  9 16:00:30 2026 GMT
            Not After : Feb 10 16:00:30 2026 GMT
        Subject: CN=5edaff8a49fc8849e45e694b847bf4e1f47dd43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:d8:28:9c:3b:68:c1:dd:62:e4:6b:e3:3d:
                    b8:86:17:7c:3b:a4:06:bd:27:0a:9a:ab:39:60:2b:
                    7f:9e:73:70:16:0c:d6:7f:b0:89:b7:c5:78:44:4f:
                    1b:cd:c5:7b:7f:82:b7:78:32:b9:e8:21:8f:77:75:
                    82:1c:ac:ba:0b:04:50:b1:54:8b:dd:1c:97:f3:5a:
                    db:b5:7b:90:22:04:ad:a0:13:97:ff:5e:73:ca:15:
                    8a:4b:7e:1b:26:db:21:c8:e1:39:19:17:ff:b3:bd:
                    51:10:e0:53:d4:57:11:11:b2:7d:6f:b4:5f:73:48:
                    17:a9:6b:2a:6c:c5:7d:2b:e1:c8:0a:40:37:c7:49:
                    b3:15:a2:cf:63:36:14:c6:70:e9:0c:39:77:44:20:
                    67:f9:a8:f4:19:3b:41:37:d6:12:a0:b7:61:e6:6e:
                    83:56:d8:ae:e8:99:90:68:d1:d7:9e:ed:3b:f8:83:
                    29:38:44:05:ec:58:b3:be:bd:b1:0a:ef:35:44:8c:
                    ca:03:36:4e:83:3b:5d:91:c6:04:c3:47:28:8d:fc:
                    2d:1c:ae:ba:bb:e1:bc:cd:17:88:22:76:82:44:47:
                    dd:2e:3f:9a:5c:9f:a4:e4:4e:5b:b2:66:9c:63:ce:
                    43:29:30:07:46:2a:62:3d:8a:f8:9b:8e:11:a8:02:
                    8a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:FF:8A:49:FC:88:49:E4:5E:69:4B:84:7B:F4:E1:F4:7D:D4:3E
            X509v3 Authority Key Identifier:
                keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:2b:7f:79:4f:15:d3:3f:b8:ad:35:6d:44:03:19:cf:24:
         f5:b3:1d:94:46:eb:71:f3:36:36:81:5d:d3:aa:46:26:2f:be:
         73:2c:4a:fd:6d:c2:24:ad:c5:72:14:de:29:dd:e6:e6:1a:6d:
         c3:8f:0c:b9:e0:f5:6b:c1:ba:da:32:fc:6a:8d:0a:09:87:d6:
         88:e2:3c:0d:61:5f:19:d3:80:9b:5a:7d:f3:43:d5:e3:b7:ee:
         07:e1:52:20:a3:b8:4a:54:10:27:d7:5b:63:17:8e:d7:f8:1c:
         0f:01:2f:16:05:7a:0d:cf:da:85:89:b4:f6:5c:3d:db:18:ce:
         62:85:97:24:c6:47:06:20:1a:33:39:8a:9d:b9:2d:d0:a7:a5:
         f8:c8:f5:39:73:c5:96:51:50:71:9c:ba:ef:a5:aa:6e:d8:e2:
         f2:85:97:0a:7d:f0:4d:e7:dd:68:87:fe:2a:a3:c3:5f:c1:92:
         ed:49:18:32:b1:29:82:f4:34:a1:5b:d9:6e:8c:4c:73:2a:42:
         56:03:a6:ba:a9:59:9b:68:d8:e9:f0:0a:28:84:21:d3:7f:a0:
         5c:c4:9f:97:52:25:14:94:da:0a:b8:16:56:36:66:59:17:4f:
         7d:dd:6c:d2:19:36:1f:48:8f:d2:12:e3:33:6a:b4:4a:31:06:
         e1:b0:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:02 2026 by rpki-client