This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File:                     D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier:          CoLfIqYhuE648sgY8T/+uDHG3KlKrST1fyhAZW78ffs=
Subject key identifier:   0B:51:06:54:9F:B8:70:10:BE:4E:BC:C0:11:EE:93:F0:26:CE:D2:6D
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer:       /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial:       019C4322CEE4A21BD229CC059937705DAA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number:          1550
Signing time:             Mon 09 Feb 2026 16:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:20 +0000
Files and hashes:         1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: eZ/ZFfM2B/4sxPAXFrjKG8rPlksBswpYkR6NAHNKQgk=)
                          2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
                          3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ce:e4:a2:1b:d2:29:cc:05:99:37:70:5d:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
        Validity
            Not Before: Feb  9 16:01:20 2026 GMT
            Not After : Feb 10 16:01:20 2026 GMT
        Subject: CN=0b5106549fb87010be4ebcc011ee93f026ced26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:98:f5:60:02:6c:1f:e8:d1:f1:26:da:3a:
                    cd:78:66:0d:03:42:6f:95:0f:f2:f9:62:aa:e7:a3:
                    b3:ec:e0:d9:21:e9:77:bc:51:96:50:08:02:2c:c6:
                    fe:2c:e0:a6:42:b9:2d:5e:6d:6e:c3:64:c4:fd:92:
                    58:ea:d4:bd:91:61:a6:dc:f3:31:7e:17:89:5d:d9:
                    e4:93:51:d2:da:a0:cd:d3:92:fe:61:44:34:d3:64:
                    4d:cf:c5:8a:2a:17:10:32:b0:da:13:08:dd:06:f1:
                    0d:b9:a8:db:cc:c3:8a:cc:1c:31:25:c3:38:82:2f:
                    b8:b7:54:57:52:c3:a8:01:c7:4e:3a:d9:83:cb:db:
                    3f:08:cf:f7:38:33:fd:0f:02:ed:ba:9e:70:d2:99:
                    d9:ae:0e:c5:81:78:e1:b7:93:ac:be:68:d2:85:f4:
                    08:7a:36:8d:89:6e:d6:3f:c4:f7:c1:a2:43:a7:06:
                    dc:71:26:9e:73:ac:08:b7:7d:c3:bb:e9:05:4a:a4:
                    b9:68:93:17:23:73:5d:26:09:d8:83:4a:a0:10:ba:
                    cc:e7:3b:80:de:f7:2a:2c:6f:43:9d:4c:b4:c3:4d:
                    90:d7:f0:39:9d:a9:6e:7b:cf:0a:38:68:ed:bc:6a:
                    4c:19:36:90:e3:fd:5a:c3:14:a3:43:e9:0b:49:53:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:51:06:54:9F:B8:70:10:BE:4E:BC:C0:11:EE:93:F0:26:CE:D2:6D
            X509v3 Authority Key Identifier:
                keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:ad:1e:8d:c2:90:b5:d0:3b:5d:d4:0b:19:38:6f:4e:84:
         d7:7b:58:0b:7d:02:12:f1:97:c1:3e:f3:0f:1d:b2:3c:f2:cd:
         3e:f3:18:e5:df:47:79:6e:33:a3:7d:6a:58:46:af:40:b4:01:
         d5:66:fc:be:2c:62:3c:d3:35:06:00:15:a0:36:3e:92:ed:07:
         0a:ff:cb:f6:80:ed:08:76:31:8c:4a:26:1e:93:2d:07:ef:11:
         2e:38:56:f5:ac:a9:ee:48:dc:ab:77:a6:d0:a8:bf:e1:1c:3b:
         f9:ce:58:3e:70:2b:65:c7:4a:8f:c6:ac:ff:d1:df:80:f3:7f:
         90:05:92:75:58:e6:2f:2b:53:80:98:30:a9:5d:db:89:7d:b0:
         85:ec:48:d0:d7:bf:d0:2c:80:33:8a:dd:e5:cb:d1:07:89:84:
         22:18:2c:08:6b:5e:8e:eb:0c:ce:54:c0:96:fc:e8:87:be:44:
         1e:c0:86:13:99:e9:b5:cf:c6:1d:57:9c:01:2e:3a:54:c7:c2:
         cf:b3:68:0b:6e:d2:bb:d9:4b:4a:2d:ab:c9:db:fa:55:d3:9c:
         69:57:50:53:2c:e9:1f:89:10:06:40:6e:67:44:d3:55:a7:f4:
         88:10:f3:d5:15:f6:44:f3:f7:7d:0c:64:ca:f1:06:19:35:93:
         4d:ee:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:02 2026 by rpki-client