This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File:                     8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier:          c9y1HIus6DWKa7UXrwMNvAT5pA1y7yElBC5Ac6VZlrY=
Subject key identifier:   E6:73:90:F9:CC:F7:51:D7:F7:31:4C:A8:CC:D9:D2:C7:14:6B:C6:0C
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer:       /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial:       019C44348735D907E2E5319638791F50A054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number:          1106
Signing time:             Mon 09 Feb 2026 21:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:19 +0000
Files and hashes:         1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: f2BuMV7yOOFe870zI5309u5PeibSdZbP7+B+DbObIe8=)
                          2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:87:35:d9:07:e2:e5:31:96:38:79:1f:50:a0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
        Validity
            Not Before: Feb  9 21:00:19 2026 GMT
            Not After : Feb 10 21:00:19 2026 GMT
        Subject: CN=e67390f9ccf751d7f7314ca8ccd9d2c7146bc60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:21:d2:6d:44:b9:d2:49:bc:9b:4c:a2:bb:fc:
                    f5:f0:c2:89:31:5c:27:f2:bb:ab:59:c4:da:64:24:
                    92:18:66:a6:cb:bd:33:96:c8:9c:c2:43:98:68:97:
                    69:53:57:04:96:2c:d2:ad:eb:74:0d:d6:85:a1:f0:
                    8f:13:51:2e:50:aa:73:81:57:b6:af:f9:15:52:d7:
                    bd:5f:3b:90:98:cd:0e:0b:3d:4e:a7:1a:a1:6b:e3:
                    ee:18:3c:36:8a:0b:1f:b9:c9:2f:c5:2c:9e:fb:c3:
                    63:97:99:21:73:61:7d:d7:fd:af:c7:32:b6:c0:61:
                    b4:9b:29:8a:74:76:21:1d:15:0b:3d:53:54:e0:3d:
                    ac:4d:ad:f4:13:de:0a:27:e9:50:b2:71:e6:9d:67:
                    5c:88:be:e3:c1:3a:93:a0:3f:27:3b:3c:cd:6e:5f:
                    be:a1:81:e7:79:49:83:5d:9f:42:ff:9f:a5:5c:8e:
                    67:83:e7:51:a5:eb:c3:48:b3:c2:f9:fb:51:18:2d:
                    61:64:32:90:58:ce:f0:ba:78:df:b6:5c:90:ef:6c:
                    5f:f2:5c:d7:b3:83:ec:76:a5:59:32:12:6d:98:c1:
                    5a:0a:81:1c:fb:61:e9:5a:61:3f:d3:0c:80:15:d9:
                    d0:6f:78:74:cf:d6:b6:7e:c4:88:56:3a:eb:99:d4:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:73:90:F9:CC:F7:51:D7:F7:31:4C:A8:CC:D9:D2:C7:14:6B:C6:0C
            X509v3 Authority Key Identifier:
                keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f6:da:fc:0e:b0:ae:3c:a1:e4:14:34:66:35:b9:39:c2:89:
         64:2d:d7:54:55:60:13:14:82:ea:49:5e:18:31:9b:40:19:27:
         ab:f6:28:1a:1d:02:72:fc:2d:dc:65:74:e5:eb:de:0c:c2:1f:
         4e:b3:44:f8:4e:98:d8:20:24:55:43:3c:6f:06:8d:1a:59:b9:
         36:39:1f:a2:87:d9:0d:2e:0c:27:ee:94:84:87:26:91:ff:c2:
         07:53:9b:ab:96:16:1f:90:2c:e3:dd:a8:c4:9c:58:59:a1:e5:
         ab:03:33:cc:a6:d8:4a:10:2f:ec:b5:46:88:71:bd:29:c6:91:
         ea:ad:a3:ba:e3:00:c5:8e:5c:95:0c:71:16:16:bf:4f:df:e0:
         a8:1b:47:27:59:88:04:14:89:78:54:1d:9c:81:aa:9e:15:79:
         a4:cf:cd:91:c4:da:51:65:a0:b6:ea:77:c6:dc:06:28:6a:05:
         78:46:03:1c:55:65:40:6c:53:24:2c:5c:6e:8b:43:83:97:bb:
         22:b7:b1:b1:4c:27:65:a5:bf:85:e5:35:1d:c5:99:dc:fe:8e:
         d3:6c:5f:e9:ee:49:a1:7c:3c:fe:33:8e:7e:fe:81:55:6e:80:
         15:e2:10:21:e8:b0:6b:25:c6:af:ac:65:e6:f3:74:6e:3b:51:
         d0:fd:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:40 2026 by rpki-client