This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File:                     SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier:          nS1VMz6WnYJ7gBr4OFj3KV4aSiu3ZUCvDTDIUvtq/pM=
Subject key identifier:   09:6C:B1:0B:4F:2C:C6:F0:8C:73:B4:54:38:ED:B4:06:47:0D:4E:60
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer:       /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial:       019C43FE0192B17371CF1DABB0735EE6678B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number:          11CC
Signing time:             Mon 09 Feb 2026 20:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:45 +0000
Files and hashes:         1: 7GkLDdomT5eL60D6-khNrUAPRs8.roa (hash: shWGexTkkzOs8oRP4d8FwNhRI05jCv9BHag7xNm2iyw=)
                          2: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: LDEdQHtf2/t1lluap7uPjTg7A8bjiXovBmp7wVZ+LqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:01:92:b1:73:71:cf:1d:ab:b0:73:5e:e6:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
        Validity
            Not Before: Feb  9 20:00:45 2026 GMT
            Not After : Feb 10 20:00:45 2026 GMT
        Subject: CN=096cb10b4f2cc6f08c73b45438edb406470d4e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:60:74:08:a6:07:0b:0a:78:e6:2d:51:43:
                    2c:1a:70:63:e2:40:14:0c:a4:bb:b4:fa:4c:6b:c4:
                    b6:6d:7f:84:0d:8a:83:36:70:4e:6f:85:a4:2d:3a:
                    11:bb:6d:e3:b2:d6:50:97:a6:b7:eb:c1:33:8a:aa:
                    67:ca:f7:2a:b5:b8:c7:14:71:8d:a4:a3:99:6d:2a:
                    6b:4b:cf:40:31:19:5a:79:3c:e6:0e:c3:11:87:f0:
                    7d:4d:b4:ed:89:16:41:eb:2a:41:fc:be:d6:8e:68:
                    e5:05:1e:d2:b6:ef:cf:6e:bc:40:ec:b7:83:be:29:
                    b1:a1:b4:9d:54:ce:f9:b4:ed:64:3f:47:43:4a:32:
                    fb:60:34:ec:d0:00:93:57:76:14:7f:2e:f2:d3:ae:
                    3a:ad:9d:b8:e4:36:cd:55:15:74:c1:00:f5:a1:11:
                    b9:63:39:ac:cf:73:33:ed:12:76:ff:bf:8a:35:4e:
                    02:10:e3:cb:68:cc:fc:c6:71:d0:de:83:e8:e9:36:
                    9d:d3:ef:c2:15:39:1a:45:f6:50:85:66:7e:37:df:
                    2e:20:2b:c2:b6:0c:65:d6:c0:fb:d6:12:53:7b:65:
                    7c:f1:21:9f:55:95:c1:2f:1a:53:6f:00:37:df:9a:
                    7a:2f:5d:ef:2d:6b:26:4b:4b:73:6b:96:e4:89:58:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6C:B1:0B:4F:2C:C6:F0:8C:73:B4:54:38:ED:B4:06:47:0D:4E:60
            X509v3 Authority Key Identifier:
                keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:59:36:24:f0:ea:42:2f:f2:8a:70:84:97:f3:bf:82:eb:fb:
         2e:50:32:31:37:a2:cb:f5:41:04:c8:f8:8c:08:40:76:5e:47:
         03:19:10:04:3b:47:4a:1d:60:89:b3:d2:11:29:92:e0:62:e1:
         3f:af:3a:bb:9a:b4:e8:f4:19:35:b9:bf:20:96:ea:db:92:15:
         3d:0d:be:c3:e9:ab:4c:be:e2:36:6a:6b:8f:0c:6e:5a:17:4f:
         80:29:9f:42:f7:4e:91:bd:50:b0:c0:31:c9:76:3f:17:cc:8a:
         ce:bf:91:21:32:e1:40:8a:cd:84:41:0b:b6:8a:ca:17:b6:b4:
         32:db:03:19:2b:5c:77:0c:84:ed:e6:74:b9:cd:d5:6f:8f:22:
         4c:f4:ab:b4:7d:b3:82:80:64:cd:21:17:ea:be:69:c7:ad:f7:
         84:e2:11:38:27:ea:d9:ea:c2:77:10:71:99:29:61:b0:5b:dc:
         a6:c3:21:3a:c8:d4:7d:e1:49:9a:cf:e7:b2:ff:a0:71:6f:18:
         dc:8d:fa:23:ce:07:27:21:69:bc:aa:ef:02:14:d6:c3:54:39:
         c3:b5:aa:bb:1f:c4:77:3d:89:3b:25:04:7c:81:1c:86:00:65:
         00:96:fd:70:a6:81:a1:8f:c6:f0:01:25:34:fe:3f:ea:82:83:
         81:7d:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:04 2026 by rpki-client