This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File:                     RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier:          m9Qk6r2/TcSEIONQHCrz8fBd52lJsrVUSj97CAH3QcI=
Subject key identifier:   D7:E3:F3:78:39:5F:AD:35:76:B4:D7:73:25:94:BC:91:38:A5:D1:B0
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer:       /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial:       019C43903790869D4AF4E573C6192BB86AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:50 +0000
Files and hashes:         1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: x+0Kh6MlIqLwsJEtH8O/rXJOAAegRoCtKlTjhYaGtSU=)
                          2: ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa (hash: PoyEOK64ZRkHmMkkLoFS8S4R0VxZJdJWksZdI9vklg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:37:90:86:9d:4a:f4:e5:73:c6:19:2b:b8:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
        Validity
            Not Before: Feb  9 18:00:50 2026 GMT
            Not After : Feb 10 18:00:50 2026 GMT
        Subject: CN=d7e3f378395fad3576b4d7732594bc9138a5d1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:27:1e:a1:b7:fc:ea:ec:5d:68:44:ba:71:
                    49:b2:9f:d6:64:f9:b2:a4:46:5c:db:e2:ed:56:7b:
                    16:2a:ed:7b:8e:72:bc:e0:81:6d:1b:18:62:de:11:
                    17:ab:78:8d:7c:75:d1:ae:e5:d4:b4:e6:a9:5e:f4:
                    1b:2b:a9:6b:03:49:86:cc:f7:ae:87:b6:11:08:06:
                    d2:6a:14:c4:26:2a:8c:05:20:94:95:8c:8c:5f:f4:
                    df:87:0c:62:3a:1a:44:84:16:9a:f0:a2:ec:dc:f2:
                    f3:18:2e:07:8e:5b:ec:38:2c:95:33:45:ea:c4:41:
                    07:63:04:78:84:97:42:1b:4e:d0:33:b8:13:a2:03:
                    b4:35:95:6a:81:0e:b2:fc:12:26:a8:28:1e:b9:28:
                    f5:f7:10:62:6b:36:13:8a:b2:47:cd:63:e3:25:8c:
                    f5:03:62:9a:b7:12:92:39:57:2c:44:28:b4:a6:f9:
                    4e:8c:1c:87:7d:06:c8:50:97:a7:33:6a:63:67:7d:
                    70:cb:11:ee:89:a9:e8:ec:a5:63:65:c3:52:01:7f:
                    a2:8a:43:40:a6:d6:8d:42:4b:01:17:f8:cd:f6:11:
                    24:46:e7:9b:c6:f8:fc:d1:31:8f:e6:0c:a3:a3:2f:
                    1c:fb:fb:fb:e5:b8:07:bb:7a:d0:13:70:24:f1:c0:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E3:F3:78:39:5F:AD:35:76:B4:D7:73:25:94:BC:91:38:A5:D1:B0
            X509v3 Authority Key Identifier:
                keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:64:eb:0e:b7:84:d5:02:e7:20:88:af:d2:ac:fd:36:3b:56:
         12:5c:e4:1e:fe:0d:57:da:06:e5:98:2c:3b:aa:98:34:1d:a3:
         77:1c:64:8b:62:6f:19:d1:3b:06:1c:90:89:56:dd:8d:98:52:
         50:aa:f5:89:c8:a9:77:34:a5:fa:17:32:6b:75:0f:69:ef:8b:
         7e:3c:47:5b:20:3b:d3:4d:26:67:03:63:21:4d:ad:04:0c:de:
         fd:0d:8c:59:18:fa:52:d9:98:68:98:47:37:6d:f9:3a:1f:d2:
         7f:c5:83:dd:d1:ee:1d:2f:eb:01:70:99:e4:64:9e:28:3f:7d:
         40:34:99:c3:df:63:76:ae:62:a9:f8:e6:f1:f3:f7:af:43:7d:
         64:3a:82:f8:85:06:ed:45:cb:3c:a1:f7:4d:73:ca:f0:f0:2c:
         c6:91:ac:b0:97:5a:a5:bd:43:f3:8c:fb:31:eb:dc:8f:c3:2f:
         b5:16:50:f4:45:a6:f2:cd:d3:ba:f9:50:d1:b5:63:49:29:f7:
         3f:b4:54:97:29:9e:7e:4d:e1:e3:e5:54:da:37:de:7d:d5:7d:
         d7:bb:cb:91:f9:f2:1b:ea:07:27:c2:0d:12:4b:2b:12:b9:17:
         c1:d4:36:e5:8d:0e:f4:79:42:13:e9:be:38:39:c2:ab:6a:66:
         18:81:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:14 2026 by rpki-client