This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File:                     RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier:          4ydU7SXnjIzQwznG1bszL9bLG/1KzBsJuLTNN0szEFo=
Subject key identifier:   73:61:9E:6D:A7:E2:33:CE:04:85:90:F5:55:AE:14:0E:85:DA:D3:A0
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer:       /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial:       019C42B3F9AAF20E6569940E6B7650380411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number:          0CA0
Signing time:             Mon 09 Feb 2026 14:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:16 +0000
Files and hashes:         1: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: 5kiWcuyBA+P5xkAsmLbdCiCplSGiaTkDTnbTh3PkfCo=)
                          2: sKVP7_JMXgsXmjjxFeQ2pbiZSww.roa (hash: Wqcj3vAf/zWfuQq+F6Z9N/hZLBl0tmkL1ZSY3Yzwl0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f9:aa:f2:0e:65:69:94:0e:6b:76:50:38:04:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
        Validity
            Not Before: Feb  9 14:00:16 2026 GMT
            Not After : Feb 10 14:00:16 2026 GMT
        Subject: CN=73619e6da7e233ce048590f555ae140e85dad3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:6b:43:15:a3:a7:fd:67:b7:7a:b7:6c:b8:
                    ba:90:b7:c2:8c:09:15:ea:79:21:bd:fc:78:3e:b4:
                    63:80:07:e3:b5:69:a8:c9:11:bd:a5:1e:22:aa:24:
                    cd:77:df:b3:cf:04:fa:4e:4a:24:95:91:39:eb:4a:
                    30:a9:58:c8:5d:ef:0a:76:0d:a6:36:5f:36:ce:97:
                    a6:64:3c:1b:ad:66:3b:00:f4:a9:a7:92:79:c3:82:
                    c7:85:44:d8:86:42:61:85:9a:e9:80:70:21:9c:12:
                    6a:11:3c:b7:1c:2c:7c:16:03:c5:61:33:87:1b:53:
                    53:f5:d2:99:a1:fd:1a:0f:44:f4:9f:6f:42:68:37:
                    a0:aa:f7:9a:06:5d:7a:5a:63:46:63:73:e3:b8:fe:
                    da:d1:da:9e:fa:53:3a:d1:48:7e:8d:b0:cd:b1:c5:
                    e1:ad:1b:28:9e:4e:10:c4:cd:b5:b3:c4:54:64:e8:
                    b2:cd:bd:bd:e2:5b:18:f8:4b:0a:13:58:12:a2:04:
                    f8:b7:13:4f:b0:15:84:61:45:8e:a8:e8:c4:4a:b8:
                    23:63:e5:5b:9a:f9:bd:fe:e3:ad:6d:71:01:d7:39:
                    ff:8d:8d:81:d5:8a:f1:4f:75:e6:c3:81:8b:67:80:
                    9a:27:5b:e8:ab:ad:58:7e:68:c9:5f:15:42:81:be:
                    4d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:9E:6D:A7:E2:33:CE:04:85:90:F5:55:AE:14:0E:85:DA:D3:A0
            X509v3 Authority Key Identifier:
                keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:ec:f9:a9:f9:0f:11:ae:1a:73:f6:23:04:21:e8:6f:79:
         73:91:2b:54:4b:2b:79:78:3d:d9:be:1b:41:c5:2c:ba:5c:4d:
         49:f4:59:49:a8:50:64:41:37:47:bc:47:29:8e:d8:99:b1:4a:
         12:45:d7:d9:cd:b6:5a:09:d2:85:bc:cd:89:7f:48:56:84:df:
         eb:27:ef:6f:71:fa:83:dc:d9:04:50:32:c1:9a:05:88:7a:95:
         da:d4:c2:7c:ff:e5:cd:d6:92:b5:72:aa:02:db:01:64:09:bf:
         ec:75:c9:2d:f6:05:82:42:22:61:b1:86:27:78:29:2d:55:5e:
         e8:bb:79:fe:04:91:e4:85:ec:36:95:ad:7f:c6:af:cc:c3:46:
         e8:43:46:b5:13:31:87:7a:70:64:37:62:64:de:59:a3:1d:85:
         0a:a3:05:91:dd:38:8d:07:62:2e:40:33:fa:a3:84:7f:ad:af:
         b1:69:b8:2f:5f:38:24:1b:16:bc:ec:0f:3c:7c:95:a8:46:66:
         5b:4a:ca:aa:52:56:d9:ee:95:e8:15:3b:41:2a:14:80:c4:e3:
         ae:10:e1:c8:c9:5c:3b:3d:9d:35:ea:ed:54:d7:5d:73:f3:d6:
         28:92:23:88:8d:1e:72:a6:2f:d3:2d:9d:aa:5b:0e:a8:9f:a1:
         b6:05:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:43 2026 by rpki-client