This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File:                     49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier:          gN5Qn0S2mBH/nvIryxvOZeHuRF7REuIigwRXM6yODRw=
Subject key identifier:   0E:F7:EC:0D:F0:A8:A3:B6:13:AE:E8:5C:D7:82:19:8A:B8:A2:F7:25
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer:       /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial:       019C4322779367261EBCA2EDCE50ED87E0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number:          10E3
Signing time:             Mon 09 Feb 2026 16:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:58 +0000
Files and hashes:         1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: ZDXSs6q8pTbztw6NIukVqkVgR1i34CPGYWvPNVt6h6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:77:93:67:26:1e:bc:a2:ed:ce:50:ed:87:e0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
        Validity
            Not Before: Feb  9 16:00:58 2026 GMT
            Not After : Feb 10 16:00:58 2026 GMT
        Subject: CN=0ef7ec0df0a8a3b613aee85cd782198ab8a2f725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:a0:2c:48:57:3b:1d:8d:3a:ce:e4:59:4a:
                    b6:b4:dc:8c:05:72:bd:58:c6:82:a5:85:da:17:80:
                    b9:fd:81:21:89:82:0b:05:4a:47:1c:b7:ff:ef:ba:
                    f1:6d:07:d3:ff:4d:05:2a:4b:34:9e:a8:70:c3:a6:
                    bf:27:ca:27:18:bd:04:c3:38:5d:57:9f:43:a2:83:
                    56:5d:21:45:eb:79:1b:7e:b6:91:de:8b:3f:71:8e:
                    73:81:a9:24:d5:c0:e3:9f:6f:ba:f3:52:ac:ed:36:
                    06:21:24:38:dd:a4:aa:5b:11:e2:be:c9:77:d8:b8:
                    dc:2b:b5:1b:cb:ba:2a:37:11:7e:eb:d3:85:78:a1:
                    0f:15:4e:6c:55:9b:01:d2:08:13:d0:84:ac:29:26:
                    0d:bb:d2:f1:27:e4:60:cb:eb:5b:8b:ae:84:e8:7e:
                    86:a0:11:e5:36:bb:be:f3:7e:d0:78:a6:dd:e8:6e:
                    b0:a0:7d:95:0a:ed:36:76:7c:86:94:bd:38:46:f8:
                    06:95:38:6a:a0:5c:c5:e7:89:4a:6b:06:3d:80:9d:
                    60:79:43:6e:46:b8:ac:9d:e2:4f:fd:78:e1:a7:3d:
                    37:d7:dc:b4:e1:80:4c:ef:28:6b:01:7f:3c:2d:2c:
                    57:07:eb:bd:40:e1:c7:96:d3:8b:7f:a7:be:57:ec:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F7:EC:0D:F0:A8:A3:B6:13:AE:E8:5C:D7:82:19:8A:B8:A2:F7:25
            X509v3 Authority Key Identifier:
                keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:3a:af:d4:57:8b:7a:22:79:af:88:aa:e5:ac:6e:01:a5:
         97:fb:61:d4:26:cc:35:d7:be:c2:c3:dc:74:02:d9:9a:63:c8:
         e7:dc:07:5e:65:e3:28:98:b1:b8:fd:b7:34:84:ba:1c:3c:c4:
         b2:ca:51:af:47:36:95:32:7d:a3:10:fe:a0:6e:cc:00:33:04:
         1b:14:29:bc:65:8e:c9:f5:d2:b9:16:5f:65:f1:73:4a:09:76:
         cd:be:85:3b:ce:88:36:77:2b:34:90:a0:e0:ad:67:27:21:af:
         71:bc:3d:61:0a:df:b9:02:53:5e:33:b3:a2:03:20:cc:84:5c:
         0b:91:4c:79:4f:a7:45:08:82:84:1a:42:d0:5d:cd:94:11:21:
         39:2d:92:e5:ae:4c:b2:18:53:67:d6:09:cd:4b:98:e3:74:93:
         eb:19:2d:9e:d4:90:8c:05:54:d8:a4:69:d3:ee:c6:a7:41:53:
         5c:d5:1e:02:be:07:9c:f4:c4:e3:5b:6e:23:52:25:c0:c1:3e:
         1a:a5:fe:ca:70:c2:a2:67:88:d3:b4:b0:66:b2:fc:75:b3:bd:
         90:cf:f3:a6:e2:43:c3:7e:0b:74:67:75:0d:a4:96:ec:4e:c4:
         ce:8a:01:69:41:8f:8d:32:0c:3d:a7:e7:b4:67:fd:8a:2e:65:
         2a:63:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:21 2026 by rpki-client