This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          LU+mjsdJFKXAjBjbTitV17q+a8YAeEe4TUIjS1ZgHSw=
Subject key identifier:   63:18:B7:76:02:39:29:B2:AF:7E:01:17:3F:E6:8B:30:71:39:D0:5B
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019C43596B68FD02D73FF695B9FC91BA8AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          17C7
Signing time:             Mon 09 Feb 2026 17:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:59 +0000
Files and hashes:         1: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=)
                          2: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=)
                          3: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: 831fdQzEyHZNGbOtvEnE6uQ2uid0rqXIhBIjgkb1GPQ=)
                          4: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=)
                          5: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=)
                          6: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=)
                          7: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=)
                          8: vRTSmI6KhjkZ7QSqDR8TmUD_H-o.roa (hash: g93xhnAacJq3AAXAMyOtAyF6fP7Xgz52ChSm97QaIXk=)
                          9: vhH6t6qr4OOEOFH2ZKyOJF9900M.roa (hash: +SWCDVXuJQ1wGclZXtz1oIs0lRGx7DF+jr45nXzXg2w=)
                          10: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:6b:68:fd:02:d7:3f:f6:95:b9:fc:91:ba:8a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Feb  9 17:00:59 2026 GMT
            Not After : Feb 10 17:00:59 2026 GMT
        Subject: CN=6318b776023929b2af7e01173fe68b307139d05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:b6:20:61:a9:da:ad:40:c8:0b:3b:b4:cc:
                    fa:89:83:a4:0c:d3:52:22:cc:cf:a9:21:ef:d6:03:
                    2a:7e:3f:17:a7:e5:de:1d:5a:ef:a7:09:04:d9:22:
                    de:50:38:8a:b5:25:f7:5a:fe:5d:6d:4e:7b:69:4e:
                    c3:4c:d3:d1:62:fa:f7:a8:2d:05:c1:f8:1e:83:35:
                    0f:6a:7b:1f:30:66:55:ee:4f:05:3e:30:4f:98:bb:
                    ec:c1:52:6f:6b:94:96:db:78:70:e9:aa:6e:5f:86:
                    17:e6:e2:af:17:37:97:9b:84:64:58:e6:3d:a0:05:
                    fe:f6:63:59:d1:3d:49:73:11:20:fb:c8:de:73:09:
                    ae:a0:4b:fe:8e:8c:fe:43:36:b2:73:fb:2d:83:42:
                    be:8c:a2:8a:b3:5a:e4:bf:cf:ca:38:31:8a:88:f5:
                    d2:b0:b6:f7:58:2a:59:48:64:7b:ce:5d:cd:13:cb:
                    dd:c0:bc:3a:15:75:aa:b2:69:f6:d8:64:68:46:e4:
                    bc:b4:c9:16:4d:40:a8:99:00:64:0e:1e:d4:56:74:
                    c8:4e:27:16:a7:a9:25:ee:ee:f8:91:1b:ce:69:00:
                    ea:21:4e:8f:e5:26:f5:df:84:35:96:ce:10:b1:83:
                    cf:df:34:c0:ca:9c:0a:e3:2b:49:e7:7a:5a:b7:70:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:B7:76:02:39:29:B2:AF:7E:01:17:3F:E6:8B:30:71:39:D0:5B
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:7c:9f:02:44:3f:98:ae:77:63:14:a2:91:12:68:81:6d:
         36:36:95:70:05:2a:b6:ee:29:a4:52:9d:aa:93:5d:72:94:62:
         bd:3c:39:46:4b:12:0d:2a:19:8e:fa:4e:ee:b0:48:20:51:1f:
         e2:58:26:e7:ea:93:3a:d7:c4:02:af:e2:5c:73:41:01:53:4c:
         df:79:b4:0b:94:8f:b0:a3:1a:c3:ed:1e:27:d2:f1:88:31:19:
         e6:28:28:c5:c7:fd:05:af:24:29:ec:95:f3:ac:52:6f:1e:1d:
         27:11:46:a1:97:b4:bd:11:ba:23:1c:6c:85:a9:26:a9:66:ae:
         53:ed:7b:6f:bd:4e:aa:b7:21:4d:65:b7:88:be:73:88:f2:bd:
         71:08:5f:db:16:25:c4:eb:56:0b:70:9d:ff:66:81:e0:b6:7b:
         f3:47:45:1c:d6:fb:54:45:1e:34:2e:4c:1a:c8:dc:5a:f0:78:
         67:85:2c:97:a1:42:a6:32:93:c9:f9:59:f8:2a:fc:91:36:f3:
         77:a8:a2:d3:22:bf:5a:31:65:4b:6c:4c:e9:0f:82:ca:83:29:
         45:09:1c:19:ce:e0:0a:5f:7e:c0:15:a7:ff:7d:b0:1a:8e:95:
         6f:ef:56:45:d2:87:92:c5:8c:40:4e:bf:3e:45:a3:b9:08:d0:
         7c:65:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:15 2026 by rpki-client