This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File:                     8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier:          dxhI14059w5c0kB++DLa4VQbLVV+NSbDLiGo9DbCi+A=
Subject key identifier:   3E:00:07:FF:C5:44:AB:57:A0:6A:68:B6:90:48:73:2C:BC:4D:B4:0C
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       019C42EB7565CEB3BAC9C7418D92A4BA62AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:53 +0000
Files and hashes:         1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: AVmdo2XuxgrmBXh0npYe/7r5Nj9OjWSa+dKX7VgUmTI=)
                          2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:75:65:ce:b3:ba:c9:c7:41:8d:92:a4:ba:62:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Feb  9 15:00:53 2026 GMT
            Not After : Feb 10 15:00:53 2026 GMT
        Subject: CN=3e0007ffc544ab57a06a68b69048732cbc4db40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:c1:76:dc:ec:31:07:d8:f1:06:d1:7a:26:
                    56:8c:3b:6a:ec:40:40:36:dd:cf:aa:4c:61:f0:72:
                    39:5b:1d:af:3d:b1:92:e5:33:df:a6:61:e9:75:bc:
                    fb:e5:cf:51:80:52:51:10:92:1c:3d:ae:d3:13:53:
                    0c:72:1b:d6:5c:7a:a9:a2:be:aa:2f:20:75:3d:26:
                    f5:dc:6e:a0:73:25:a5:a8:45:69:dd:be:22:7c:7b:
                    e3:84:f2:af:69:bf:35:e7:8c:dd:5f:b9:44:fe:e1:
                    99:c4:99:e8:8d:50:33:05:1d:82:15:69:7b:da:cd:
                    dc:8e:4c:54:77:65:f9:4a:37:1d:3c:bf:02:0f:89:
                    ef:65:06:ab:54:71:31:94:ab:90:cd:d2:2e:8b:50:
                    3a:37:e7:36:13:47:67:99:54:51:d0:bd:0b:01:db:
                    34:88:13:8f:80:6e:ff:82:71:92:ed:c6:26:2d:bd:
                    a1:ab:be:7d:30:5f:19:e5:1b:ab:f1:89:cc:40:c4:
                    56:69:33:45:70:f1:e1:22:fe:68:f4:8f:44:00:b2:
                    d6:2f:ee:3a:8c:0b:e6:ce:83:1d:5f:16:52:b2:f9:
                    78:64:c4:09:09:d6:f2:8c:71:c7:42:b5:9b:b3:f1:
                    00:55:d0:a4:83:b6:c4:89:0c:ef:ed:fd:a0:86:ef:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:07:FF:C5:44:AB:57:A0:6A:68:B6:90:48:73:2C:BC:4D:B4:0C
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:27:8b:09:fa:70:06:54:c0:62:c8:b6:4e:b5:8a:cc:8d:bc:
         2b:fa:7d:04:22:b7:cc:2b:b2:fc:4b:2d:3a:94:40:5f:79:05:
         29:9b:3c:ee:07:03:c6:d2:f6:4a:2d:d0:6e:21:68:81:38:d6:
         c1:02:55:a2:9a:fc:3f:38:8d:c3:cc:d4:9b:96:b9:7a:44:9c:
         da:ac:31:5a:5f:4a:e8:fc:64:1d:c8:97:fb:a9:7a:d3:8c:2f:
         84:17:98:29:f3:3b:be:ab:c2:dd:34:f4:26:b0:f5:9f:bc:39:
         f5:82:6c:88:12:e8:af:4b:6c:b6:86:4b:51:89:d1:f4:55:52:
         bf:8f:87:17:6e:6b:8f:8c:dc:4e:f1:64:1d:0b:9f:5e:a3:45:
         c5:dc:77:03:d6:21:0b:bf:40:8e:b4:4e:c6:bc:fa:69:dd:51:
         6e:91:53:02:f8:66:c3:c0:20:2a:a1:1d:9f:9f:79:5e:af:08:
         e3:ea:f6:4c:53:21:1e:e6:9f:ea:29:30:e9:e7:e6:63:9d:92:
         f6:a7:36:a7:2c:8d:9c:74:ac:36:a2:f9:62:f5:ac:7b:b9:4b:
         0d:47:2d:1e:a8:fb:a9:90:74:f8:18:c3:bc:55:de:d0:be:30:
         f1:a1:4c:e5:32:4a:06:42:56:d5:a4:1a:c8:d4:b5:e2:e7:8f:
         29:91:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:43 2026 by rpki-client