This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File:                     sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier:          VTrkzQojvMEisB3X+6WpRmF8tlKn+0OUnFlmNOtBuzo=
Subject key identifier:   4B:99:0B:BF:00:84:F6:C1:FB:1C:3E:0A:5C:D3:54:09:22:E6:A1:E7
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer:       /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial:       019C446C79907E3865E62403EAEBA7E59FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number:          0A75
Signing time:             Mon 09 Feb 2026 22:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:25 +0000
Files and hashes:         1: SyjKeUnbRSDs4kNGNlsLLfS--v4.roa (hash: FpkjhgAtv2x7Z5TEduGx1C16Z0THVbd0mVvuXtouz6k=)
                          2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: WmHyBznmpXGnqKfHfkOpeskTaMnAMGflvlfLw912Pyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:79:90:7e:38:65:e6:24:03:ea:eb:a7:e5:9f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
        Validity
            Not Before: Feb  9 22:01:25 2026 GMT
            Not After : Feb 10 22:01:25 2026 GMT
        Subject: CN=4b990bbf0084f6c1fb1c3e0a5cd3540922e6a1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:1a:0e:a9:2f:80:55:e8:a7:0b:b6:a1:9f:
                    b0:a8:3e:dc:ab:53:20:39:83:1d:65:14:a3:6b:e6:
                    b3:43:d8:fa:3a:08:47:5c:14:9d:b5:86:1f:d1:aa:
                    27:29:f1:41:7e:e3:27:21:37:8d:a2:3e:2a:d4:9d:
                    36:c7:c0:1a:8b:60:35:8f:71:ed:e0:21:87:6e:98:
                    8e:c0:d8:84:35:53:11:33:36:54:76:cf:40:ea:3b:
                    6d:dc:7d:c6:75:9e:05:80:af:0f:2a:87:5a:a2:40:
                    42:ca:21:94:8a:30:fa:0e:18:00:ed:bb:98:25:6c:
                    62:31:f8:fd:53:2c:bf:a0:d9:36:a8:50:7e:e1:24:
                    14:47:90:0c:64:93:0d:bb:68:8b:c4:70:83:d5:1b:
                    fa:c8:66:d2:20:6e:c0:b8:c1:b3:fe:e0:72:99:4e:
                    d3:32:31:c4:02:fb:42:b8:d5:b0:0f:ae:25:38:fa:
                    2f:5a:a1:05:34:d2:1f:5b:16:08:68:95:b3:7a:84:
                    6c:33:48:08:9c:79:61:7c:45:43:39:0f:b0:85:34:
                    cc:d6:7f:73:4d:97:21:ad:19:c7:38:f0:dc:30:19:
                    53:86:d0:57:6b:be:87:04:90:66:05:21:c4:60:c4:
                    1d:23:94:25:b4:51:c9:da:9e:4b:28:f6:53:4d:29:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:99:0B:BF:00:84:F6:C1:FB:1C:3E:0A:5C:D3:54:09:22:E6:A1:E7
            X509v3 Authority Key Identifier:
                keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:82:90:41:f0:7b:ca:d9:c6:f8:d6:24:46:0a:a1:3c:33:4f:
         7b:17:b3:ea:c8:75:fd:a8:59:35:8d:54:82:b2:99:d2:61:17:
         84:e9:2b:20:87:5e:5c:bd:2e:a7:db:a4:b1:6d:77:5a:3c:bf:
         ca:45:5b:22:53:46:94:fd:e7:c6:54:ae:da:cd:e0:3a:96:92:
         d2:2a:c0:1d:22:1f:b6:29:b0:ce:28:e0:e6:cf:76:b6:9a:d0:
         38:73:6f:c4:06:18:88:76:94:ce:d7:5f:7e:61:5f:3a:25:a0:
         53:2a:28:e3:c9:68:c7:8b:4c:fa:64:fe:74:92:38:df:b8:51:
         2e:c1:7b:22:c8:ca:2f:65:f5:17:3c:8c:6c:4c:45:2b:5c:d0:
         f3:28:39:fe:67:5e:46:c6:66:09:eb:7d:35:87:cc:45:f4:da:
         4d:22:c1:c7:d1:05:da:27:c3:05:98:0f:ef:69:61:65:d2:78:
         23:1b:f7:fd:4d:c7:bd:77:ca:00:6b:3b:00:b3:16:14:eb:55:
         9f:72:84:b5:62:51:78:1d:fb:02:af:93:24:92:81:07:e0:35:
         e7:9f:95:d4:dc:f4:8d:b8:c7:48:62:be:80:45:ba:67:6f:d8:
         d7:d4:59:9c:e4:a6:5f:3a:56:af:07:66:d4:fc:f0:52:44:4a:
         f3:e5:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:30 2026 by rpki-client