This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File:                     MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier:          vBamP79X0n0mZnuAckV2MzqMPQor0/0Eo0IaZ1Ulinc=
Subject key identifier:   F8:1D:00:8F:F1:47:28:77:FA:AD:B9:A4:F1:D9:83:0C:FD:22:98:49
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer:       /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial:       019C43226B53F4BB81974A40483638C06BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number:          0BF6
Signing time:             Mon 09 Feb 2026 16:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:54 +0000
Files and hashes:         1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: bFMTy9bEDMXjrecj6SBQcXcKZa3OMPQ4YMV912qDlQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6b:53:f4:bb:81:97:4a:40:48:36:38:c0:6b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
        Validity
            Not Before: Feb  9 16:00:54 2026 GMT
            Not After : Feb 10 16:00:54 2026 GMT
        Subject: CN=f81d008ff1472877faadb9a4f1d9830cfd229849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:54:ff:19:0c:89:d6:b0:6c:0f:0b:0f:fc:
                    6b:7b:f6:1c:f4:bb:b5:36:15:ef:1d:7c:43:e4:4e:
                    5c:ba:33:93:6d:c9:a5:6a:03:a4:a6:d0:de:f6:2d:
                    ec:6a:ca:bc:84:16:e5:0b:c5:26:ae:f6:ea:c0:b1:
                    6b:91:3b:5c:17:55:9a:5f:fd:49:c6:de:09:6c:08:
                    47:81:49:28:78:44:32:49:6b:14:0f:af:46:57:83:
                    cd:a3:d0:a9:60:f6:d6:68:cc:be:8b:de:3b:cf:51:
                    0a:fd:4c:5b:7d:7c:7b:cc:b6:a6:ed:e9:37:77:95:
                    68:2a:34:6c:c1:1c:6b:62:db:75:80:72:1a:93:7c:
                    f5:79:19:8d:15:b3:aa:31:3e:dc:13:6a:71:4b:91:
                    8b:48:ba:37:23:96:e3:62:ac:5a:1b:c6:4f:61:9b:
                    8d:7e:52:ef:93:36:e8:e0:40:2e:d1:97:90:44:9b:
                    f5:de:7d:09:13:bd:0c:c1:b4:f7:86:4a:1f:a7:6f:
                    71:8b:01:7b:02:63:df:c1:d8:18:bf:c0:16:4d:c2:
                    bb:f3:83:28:fe:f9:e6:23:78:e3:87:dc:f6:2f:7c:
                    a1:95:9b:5c:cf:96:a4:60:f8:a4:a5:45:b1:35:84:
                    e9:3a:19:06:ef:22:1f:e0:46:30:bb:1f:80:18:77:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1D:00:8F:F1:47:28:77:FA:AD:B9:A4:F1:D9:83:0C:FD:22:98:49
            X509v3 Authority Key Identifier:
                keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2f:49:2b:ec:77:b4:2f:4c:e7:ba:61:44:d9:15:6c:69:30:
         c7:11:2d:21:58:08:34:9a:1f:a7:e7:ea:01:eb:9d:f4:64:b4:
         27:d2:0b:7b:3d:16:75:e3:30:3f:96:94:80:41:48:7f:5b:72:
         1e:11:e3:96:d5:37:48:bc:b8:d2:22:77:df:99:19:11:a0:1f:
         20:42:b0:33:6a:5f:2a:c1:a4:a7:15:7d:5d:cf:b8:cd:b8:7e:
         81:b1:ef:1a:7b:a5:63:dd:5c:63:80:e6:ae:77:46:f1:f3:5b:
         1b:ce:63:c3:fb:31:25:ce:df:90:82:5d:74:ca:e5:c7:c9:2d:
         6f:47:f6:8d:8c:b1:0d:31:37:65:4d:c3:4d:8d:ff:6d:9e:d6:
         fc:d6:56:ac:41:7c:4b:cf:15:f9:56:cf:54:6a:f8:8f:d3:d7:
         27:66:8c:e9:0c:87:68:bb:e0:f6:ca:b6:9d:3c:44:75:fc:e2:
         71:ad:4f:51:97:cb:ed:47:39:b8:c1:e6:e0:2d:77:a2:27:68:
         cf:42:f6:c1:05:61:ce:92:23:44:2d:f8:e8:04:29:0a:31:37:
         8d:d6:7f:00:45:e8:16:f1:90:92:c8:61:2d:a3:50:e9:1e:15:
         21:21:35:65:b9:3a:61:39:6f:b8:79:61:ef:ca:d4:7f:13:d5:
         1b:57:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:33 2026 by rpki-client