This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File:                     SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier:          oeq5xNVb6s2N1tBLQUa1pz0LHTH5NBAKPX68Ekvmp8w=
Subject key identifier:   EF:C8:CF:37:42:21:65:DF:71:3F:B5:9E:A9:72:55:80:A0:B4:43:F1
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer:       /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial:       019C42B45FA7E1AB92EA71859549C2E4A3A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number:          084C
Signing time:             Mon 09 Feb 2026 14:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:43 +0000
Files and hashes:         1: MihSKG7X7G5hbWHLKrg3NwyaRV8.roa (hash: pifaWr0Q6EtkAgB5G0YP5mWdeXXsBTXipgMqv9n85pY=)
                          2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: srGjpZ+B6k/b7nsa851PwQhzp9VS/trEkzI305ehKfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:5f:a7:e1:ab:92:ea:71:85:95:49:c2:e4:a3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
        Validity
            Not Before: Feb  9 14:00:43 2026 GMT
            Not After : Feb 10 14:00:43 2026 GMT
        Subject: CN=efc8cf37422165df713fb59ea9725580a0b443f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:90:96:af:16:8a:53:41:d2:df:10:f6:73:
                    1f:1f:91:03:fd:14:ee:f9:af:ed:39:af:5c:49:fa:
                    77:b0:d3:b7:0a:f5:3e:c0:5e:a8:50:09:2f:6a:3d:
                    4e:e9:7b:ec:7f:a7:37:6a:99:31:86:17:02:ed:69:
                    ba:d7:c4:cc:29:2b:9b:49:7a:ae:ad:74:3b:84:61:
                    23:14:bc:46:c1:c7:83:bc:d7:32:32:53:b6:08:df:
                    00:4f:c6:fe:a9:74:e5:0c:68:b9:13:9d:23:46:b8:
                    f4:44:bd:fb:3e:54:71:22:11:15:eb:4c:8a:ee:97:
                    cc:2e:91:53:a1:df:e1:51:b8:d9:f7:e6:60:18:8b:
                    85:36:66:c1:be:e4:17:40:bf:e3:ae:c3:d9:d3:ce:
                    5e:0b:1a:96:d4:a8:ea:98:73:ab:94:8a:6a:6a:8a:
                    c4:ab:b4:08:80:f0:d2:d8:85:2f:6a:61:10:48:fe:
                    f9:19:c5:a6:bd:96:36:54:13:c7:6a:9d:c5:1e:ee:
                    82:45:b9:f9:d2:40:db:ec:0b:97:78:87:1f:eb:e4:
                    63:9b:04:af:c3:76:30:11:51:a9:56:91:34:74:95:
                    95:37:23:7f:fa:d7:d6:f9:32:9e:1c:f0:a3:8b:1b:
                    db:e5:9b:63:25:4a:b0:93:de:47:6a:ef:95:7d:94:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C8:CF:37:42:21:65:DF:71:3F:B5:9E:A9:72:55:80:A0:B4:43:F1
            X509v3 Authority Key Identifier:
                keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:4e:4a:11:bc:c1:01:c9:bc:06:74:1d:ee:71:3a:d1:31:
         c7:ae:83:aa:16:43:22:76:c0:45:89:7f:20:30:64:17:de:86:
         c7:8f:44:4e:ae:64:30:9b:ae:19:f7:86:fc:a4:03:6b:bb:fa:
         14:4f:98:5d:95:3d:ce:a1:c7:93:0c:ba:b3:2e:33:3d:69:c9:
         ff:5a:a8:e4:82:6a:67:88:aa:29:ea:13:ad:51:0f:95:75:49:
         34:d3:66:95:fc:05:09:3f:0a:38:ec:a9:bd:f6:17:44:66:de:
         a7:cf:8b:eb:ab:d8:98:21:93:0e:9c:d8:74:cb:60:87:42:fb:
         e4:da:15:03:26:dd:1a:b8:8a:4e:31:86:28:2d:63:a6:23:4f:
         89:90:34:70:5d:7b:d6:f6:d2:52:80:35:86:e6:b2:c0:b0:fa:
         43:60:59:2f:15:d4:39:03:c3:4e:72:51:7b:73:d2:e2:22:1b:
         f0:9c:57:71:2b:e9:56:d1:82:7f:b4:d3:86:1d:45:ad:e7:58:
         06:bc:b5:52:67:22:96:6c:66:14:15:6c:b1:0f:15:ad:12:9b:
         2c:2e:1b:ba:70:2f:8e:28:12:e9:fd:55:f6:42:c9:23:ba:ff:
         22:7e:bf:cd:df:73:04:ae:08:7f:3e:fa:98:3c:99:44:5d:f1:
         ea:0c:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:37 2026 by rpki-client