This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
File:                     R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json)
Hash identifier:          smo0bTPcXBLQhj0AwF+z+lQxIDkhrajWF3uEvCu5NHA=
Subject key identifier:   82:BD:58:BB:8A:24:E4:8F:2A:84:D9:2D:17:B8:27:FA:0B:A6:86:72
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Certificate issuer:       /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial:       019C427D956D890AF685B84FD3E22CC7F435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:52 +0000
Files and hashes:         1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: qgq49rzUB2OTOAAlRC9kQSDJ9OMVhsn3GfLT7sYU1KQ=)
                          2: mjDE2a2XV65rnlTfLw7oWAEHGqM.roa (hash: 86WbIxRaOZz2IzmvB047OshmE/5HOAZmfFRJwBM7Qcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:95:6d:89:0a:f6:85:b8:4f:d3:e2:2c:c7:f4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
        Validity
            Not Before: Feb  9 13:00:52 2026 GMT
            Not After : Feb 10 13:00:52 2026 GMT
        Subject: CN=82bd58bb8a24e48f2a84d92d17b827fa0ba68672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:67:5f:f5:16:e8:e6:9f:c2:51:f2:dd:13:
                    02:78:c5:0a:5e:b6:75:36:14:6f:2a:c2:95:f6:4a:
                    70:90:ef:a8:43:46:81:c9:48:d4:83:73:ae:2c:07:
                    cf:a1:c6:d9:b9:2e:ff:da:60:64:74:d4:0a:99:b7:
                    ab:32:d7:69:65:c3:57:97:78:a8:5e:74:e1:82:be:
                    97:03:8a:58:b9:9d:e5:a6:ee:e8:e8:f1:92:17:05:
                    fe:0d:65:92:08:75:5b:04:ab:1a:e6:34:45:05:d7:
                    9f:43:ca:70:c4:6e:56:dc:aa:44:0f:82:d1:29:50:
                    1c:9d:51:8e:c9:5f:2a:34:a8:5b:13:b8:d7:63:3d:
                    e0:88:0d:91:53:7d:b0:3a:73:91:8d:b7:18:08:21:
                    bb:c6:50:34:cb:57:53:22:94:8d:45:7f:7f:29:ad:
                    69:f8:0e:c9:1c:bf:a9:71:20:b2:5c:c3:a5:7e:b8:
                    32:ba:b1:c6:25:8f:2a:9a:bd:52:80:99:27:8d:25:
                    70:54:de:c0:5d:e3:8f:54:23:14:72:f7:02:8c:e1:
                    96:5f:44:16:fd:d9:0f:1a:a3:da:e6:a9:ad:10:cd:
                    ba:91:43:94:5c:8b:f4:ce:af:84:37:95:a9:87:66:
                    2b:ed:b1:1d:5c:58:19:3c:6c:8e:2e:da:cf:e8:92:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BD:58:BB:8A:24:E4:8F:2A:84:D9:2D:17:B8:27:FA:0B:A6:86:72
            X509v3 Authority Key Identifier:
                keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:4e:60:b3:04:97:06:98:e9:18:91:fc:96:1a:7f:af:8b:
         d7:cb:e1:61:9e:91:c8:8d:27:d0:03:06:8c:2d:c3:19:e8:f2:
         91:17:a7:d7:2d:e1:84:2d:ca:02:05:c3:11:1c:16:4b:11:20:
         97:c4:f5:73:16:c7:f4:0f:b4:d2:34:f1:8e:44:1c:c6:cd:9e:
         d2:b8:eb:2d:61:af:78:1f:b5:a0:dd:a6:35:09:dc:e1:12:3b:
         d5:52:9a:09:4c:d9:5b:04:25:71:b5:02:87:80:73:02:98:51:
         22:20:98:ae:7f:fc:8b:7d:e5:32:3d:b4:18:6e:f8:c1:68:d6:
         38:f5:6d:21:43:53:68:e2:1c:74:70:52:c8:43:4f:1b:d7:d2:
         fa:91:fc:c5:5d:cf:a1:82:44:3e:9e:73:5f:4a:55:54:e0:35:
         a1:7e:f8:45:e8:bc:97:b1:59:bf:d9:c7:1b:f0:61:d2:37:c4:
         9d:b8:92:d5:58:18:b0:dd:1f:86:f4:b8:e4:a3:80:90:a6:3f:
         c8:d6:96:52:d0:c8:99:12:2d:cb:0d:94:be:06:b4:ef:90:74:
         0e:e7:99:bf:be:02:0a:9c:e3:b9:78:21:c2:ff:72:bf:8a:68:
         ae:86:bc:5d:cd:c2:a4:bf:5b:ed:77:54:6d:fa:31:47:0a:f5:
         77:7d:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:14 2026 by rpki-client