This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          aUOhB+pflr+UUXmq/8QRbUD8ByIzk30LTx6MnF98gDo=
Subject key identifier:   D3:0D:5C:69:CE:07:97:6C:69:82:AA:8E:0A:59:94:87:13:43:41:BC
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019C42EAFA21768FFDDD60EC8406DD068ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0BBD
Signing time:             Mon 09 Feb 2026 15:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:21 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: tkfLP5EumkDC0mGg520tsZs3KjBgiJCO8zvfRn9y4KU=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:fa:21:76:8f:fd:dd:60:ec:84:06:dd:06:8e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Feb  9 15:00:21 2026 GMT
            Not After : Feb 10 15:00:21 2026 GMT
        Subject: CN=d30d5c69ce07976c6982aa8e0a599487134341bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:90:76:f0:4f:ad:76:3e:7c:4d:91:1e:0a:
                    7a:9f:19:c4:61:d0:d4:cb:35:b4:29:a9:0a:0f:ad:
                    11:67:d0:78:de:11:2a:d3:6b:cb:34:7a:8d:f4:ca:
                    1e:be:21:91:c5:3f:de:27:71:b1:09:66:b8:96:cf:
                    16:89:a3:bc:d6:9e:05:78:25:9a:d1:df:3c:00:9e:
                    a1:33:cd:41:56:fa:30:5b:bf:4f:e3:3c:27:17:15:
                    70:3d:eb:80:0e:b1:48:c3:0b:ae:93:f3:92:f9:c4:
                    26:c1:2a:2f:d8:fd:11:1d:27:d5:71:a0:9d:af:07:
                    f1:e8:7b:d0:f8:5a:63:56:93:d9:94:c1:94:dc:17:
                    2b:2c:8e:73:50:ec:d9:41:2c:26:fd:9b:61:12:18:
                    a8:63:6a:bc:fe:e1:b1:ca:da:3e:52:16:b0:96:1c:
                    f2:4d:dd:50:21:ed:ed:07:f8:ba:da:76:22:3b:7e:
                    0b:f1:d0:67:67:29:a2:a3:b7:5a:a4:d0:8e:fe:e4:
                    26:96:9e:c4:f1:4e:66:a3:e9:13:0c:f0:11:30:36:
                    b0:c4:41:26:13:5e:a7:ef:a9:51:cb:2d:14:4e:b0:
                    18:21:b0:67:3f:06:bb:b2:49:e1:76:a1:51:17:15:
                    68:23:78:31:37:18:08:05:b0:41:84:98:5b:51:ef:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:5C:69:CE:07:97:6C:69:82:AA:8E:0A:59:94:87:13:43:41:BC
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fc:56:ce:84:49:4b:49:99:d5:fa:df:f3:a1:57:3a:29:fa:
         01:f3:5e:98:af:1b:0f:46:50:9a:e6:c1:27:98:11:41:29:a0:
         be:09:3e:d1:45:f5:f2:dd:c4:88:59:9b:1a:1b:7f:e6:df:40:
         68:02:e4:c8:8e:a9:b3:a3:31:f1:ec:ca:a0:26:3b:e9:9c:55:
         24:a3:86:16:fc:e5:c3:00:74:63:4a:db:9d:76:19:71:e6:09:
         ae:76:d4:96:ce:ed:1a:34:1c:62:b7:9a:56:e8:d7:70:69:c7:
         b8:34:c3:c2:63:cd:25:0c:7c:f1:c9:43:79:6b:cb:b0:26:64:
         af:0b:93:46:2a:a5:01:b8:28:6c:58:d0:6b:ba:e7:07:2c:10:
         74:fb:86:71:0e:a3:bb:e5:0d:c4:1e:a4:ff:28:98:6a:f2:f9:
         dd:1c:f5:b3:96:e1:1d:23:2d:5e:16:7c:36:53:04:b7:de:8d:
         f4:36:63:55:7b:a3:e3:3c:e3:69:53:56:6a:8b:9b:70:55:54:
         e8:9c:d3:2f:fa:0b:0b:76:70:0c:32:f0:bc:d8:08:e7:d2:62:
         8a:4d:3d:73:49:30:16:00:9d:0b:b1:03:af:88:07:27:26:38:
         8f:ed:9b:a4:31:d2:55:95:7f:f4:b7:91:d4:d9:e5:d7:61:70:
         7a:e0:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:15 2026 by rpki-client