This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File:                     muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier:          xxZiz6OmKGO2soxJjZYDNLoeK1eF0Cvfdv15zu+b9UY=
Subject key identifier:   8E:94:A7:5F:3E:09:4B:1D:98:00:90:EA:B4:99:D7:B0:F0:37:2F:A6
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer:       /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial:       019C43FDDCF703804F964A7D5F9CD34A4777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number:          0C33
Signing time:             Mon 09 Feb 2026 20:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:36 +0000
Files and hashes:         1: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (hash: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo=)
                          2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: yfTztdJb31psq8fek4ep/Q1Tuyg55cWlqIKwIix1HVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:dc:f7:03:80:4f:96:4a:7d:5f:9c:d3:4a:47:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
        Validity
            Not Before: Feb  9 20:00:36 2026 GMT
            Not After : Feb 10 20:00:36 2026 GMT
        Subject: CN=8e94a75f3e094b1d980090eab499d7b0f0372fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:ac:a4:5d:40:b7:ce:f0:6f:c2:e9:c0:29:
                    48:56:fb:bb:20:1c:c5:e4:6f:2d:71:2e:6b:e2:bf:
                    4a:9a:09:10:0a:79:32:a3:94:d9:28:c3:d3:7f:02:
                    01:53:10:2a:ed:58:c7:ee:2e:66:40:95:62:04:98:
                    a2:1b:7b:36:0c:c4:ba:8f:06:e1:ea:90:b3:f8:5d:
                    e3:b3:77:f1:30:08:40:50:a7:f6:50:72:b5:ff:b0:
                    67:2c:4c:a5:08:f9:04:1e:c6:5e:f0:a5:58:6f:f7:
                    ce:49:1d:fd:c7:10:51:b4:33:9a:b9:04:ca:5c:16:
                    30:45:1a:75:8b:a5:dd:99:df:9f:74:53:16:19:a4:
                    c4:43:34:06:fb:cf:f5:a5:9d:e8:90:a5:4d:b9:97:
                    b7:03:42:5c:43:d5:32:24:a2:26:54:bc:e2:d7:40:
                    13:fc:00:39:52:9b:6b:0a:c5:2c:c9:81:b5:39:74:
                    27:69:65:9e:bb:7f:67:b0:cb:8e:9f:36:00:ac:b1:
                    26:ec:3d:03:77:b9:4d:24:13:18:84:df:0b:f9:c8:
                    c8:c2:d4:74:7b:58:8d:f4:68:5f:e3:8d:46:ef:42:
                    c5:c6:c7:12:1d:5a:e0:3d:f1:9e:e1:26:9b:fe:7e:
                    1e:13:4d:e8:21:76:33:c7:f5:c7:ae:3d:7a:d3:48:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:94:A7:5F:3E:09:4B:1D:98:00:90:EA:B4:99:D7:B0:F0:37:2F:A6
            X509v3 Authority Key Identifier:
                keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:41:25:9c:b3:25:ad:3a:0c:c3:b2:5b:fc:f1:5c:f5:d2:
         19:ea:de:53:eb:54:bf:de:4e:f2:c8:30:0d:e7:1f:ef:95:3c:
         9f:06:01:e6:3d:26:64:82:e1:34:0b:e6:4b:3b:79:b3:a5:42:
         c4:09:06:70:8b:f0:24:a8:ec:d3:0e:ed:d6:93:2c:c9:83:db:
         ce:ea:6a:45:73:8d:0e:29:4b:5a:a2:97:94:ec:d1:5e:6b:bf:
         f8:49:da:b1:4c:af:1b:e0:17:a4:84:ca:1f:89:8a:5f:b5:37:
         cb:cc:22:f8:9d:f9:0c:d5:e0:73:5a:fd:50:44:44:29:fd:d4:
         2c:10:17:33:d3:35:67:ac:b1:a7:8a:f0:f9:14:7c:d7:f4:0d:
         27:75:5e:4e:c6:ff:dc:51:07:81:ea:01:5c:e1:e0:28:fb:3d:
         a5:56:12:33:33:e1:6e:38:15:59:c8:2a:c1:27:a1:bf:52:2b:
         49:bd:1f:18:e9:ae:5d:04:34:28:c2:6a:77:44:21:a4:ed:27:
         68:6d:dd:5b:c7:c9:fa:63:d8:8f:dd:45:11:a2:c8:c1:b4:f8:
         49:31:39:e8:01:5a:07:a9:d3:de:f0:84:0d:79:3f:8f:6f:e5:
         01:a3:4b:57:aa:08:c2:36:db:2d:45:ef:80:2a:c1:27:5b:94:
         b9:83:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:00:04 2026 by rpki-client