This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File:                     MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier:          ongo9NLizj87v6aHuS1SKyKcbc0IQlQQqkZHKriUsmA=
Subject key identifier:   4B:C6:31:93:64:6B:5C:B6:FC:AD:A0:C5:01:91:D9:F1:06:09:6F:1C
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer:       /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial:       019C438FC25DB574EF204CBFA70552589DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number:          0724
Signing time:             Mon 09 Feb 2026 18:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:20 +0000
Files and hashes:         1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: 3NJrUdNW/5lGkXxwKbHRhqQSb84g/OS3iqnMfrEtqbw=)
                          2: g299YTC_iLV4aJ1WAKAFuHKoAG8.roa (hash: RjwHc0a+p7SBX5dpTWoPHb71J5KbWW0USQUJuMMvXuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c2:5d:b5:74:ef:20:4c:bf:a7:05:52:58:9d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
        Validity
            Not Before: Feb  9 18:00:20 2026 GMT
            Not After : Feb 10 18:00:20 2026 GMT
        Subject: CN=4bc63193646b5cb6fcada0c50191d9f106096f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:95:91:89:ca:8a:0a:36:ac:5a:bb:53:04:
                    1b:f3:5b:b4:33:30:be:b3:38:fa:ca:de:5f:f7:6b:
                    20:73:b3:2d:a2:3e:8a:d1:f9:ac:74:ee:f7:42:7a:
                    c6:a9:91:56:9c:90:39:73:19:a7:59:0b:a4:2a:3d:
                    d2:ff:b3:95:a9:a6:0f:a7:dd:79:d6:1e:9c:bb:c2:
                    05:fe:62:d0:7d:c5:cf:46:10:43:59:e2:ea:89:4a:
                    e0:60:00:e3:d1:c3:82:1d:f6:90:04:17:95:f0:c1:
                    12:70:94:10:2d:e9:c1:7b:db:3a:59:d5:9f:cc:98:
                    39:a0:3e:67:64:95:d0:20:58:4d:91:a5:7f:11:95:
                    a6:52:66:d5:79:55:6b:8c:0d:19:9a:08:03:dd:af:
                    7a:0a:64:db:a9:05:33:2c:53:7d:db:a7:cc:7c:b7:
                    3f:ce:2a:a4:81:55:89:2b:a3:9e:31:42:90:64:33:
                    b2:26:e9:48:58:91:66:00:40:a3:ac:63:6f:3c:a5:
                    8c:0e:59:df:b3:63:dc:1b:f9:02:7f:9e:14:d7:da:
                    b0:58:5e:b0:94:f7:14:cf:21:b7:b1:42:c6:78:78:
                    ea:fa:37:8e:78:c1:10:a4:31:c1:45:d6:09:aa:36:
                    fe:8f:74:ef:4f:6e:97:44:39:9c:79:3a:95:9d:3d:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C6:31:93:64:6B:5C:B6:FC:AD:A0:C5:01:91:D9:F1:06:09:6F:1C
            X509v3 Authority Key Identifier:
                keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:96:26:15:c2:45:67:9d:cc:8f:cd:ac:19:73:71:57:9e:44:
         4f:46:36:ce:8e:76:a7:7b:af:0c:29:27:22:c3:31:83:a5:fe:
         d3:17:5e:fe:9b:3c:d6:b7:0e:c4:e4:39:a8:19:d8:ef:67:cc:
         b8:69:2c:9a:f3:21:ae:f6:f6:22:b9:87:d0:36:b2:db:15:23:
         cd:58:6d:4b:90:c1:71:75:5a:6a:a4:77:56:45:32:6d:74:a7:
         27:f5:47:97:ab:b1:c8:6c:12:5f:e9:d5:6c:05:7c:2f:82:76:
         c4:ef:16:dc:a7:4c:d2:fb:8a:28:0d:3b:90:bd:23:18:e0:1a:
         95:c9:d5:98:24:e2:cf:67:f5:7f:b1:50:b0:be:a3:f7:bc:3b:
         d2:08:1a:16:21:09:54:b0:d4:f2:dc:c5:e9:db:8e:e2:b5:fb:
         f8:34:0c:2a:4c:22:43:3c:5e:a3:97:c6:fd:e7:4c:3c:49:da:
         ca:23:f4:43:3b:e9:48:9f:21:7b:a6:5f:a7:a7:20:da:ce:50:
         c5:5d:89:e9:f7:e0:3d:6c:8f:63:ab:f1:25:97:73:e5:30:86:
         4d:28:e9:85:9b:66:cb:2e:53:7c:fd:4d:b6:d1:70:4c:37:fd:
         a8:33:4f:c4:62:19:04:e4:4d:67:f9:2c:d6:c2:dd:9c:ae:27:
         55:2c:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:38 2026 by rpki-client