This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File:                     S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier:          3aY8Tkv0mBq8sgRRvDWnE3yRMWF96+ff+N6Pc+cDX6M=
Subject key identifier:   6B:C9:45:23:C6:72:41:AB:52:80:2D:69:BA:DE:A1:2C:81:95:9E:1A
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer:       /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial:       019C427D51DAB5C11D0898F6AD31BC1E75DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number:          0FAB
Signing time:             Mon 09 Feb 2026 13:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:34 +0000
Files and hashes:         1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 5/epFqCuQtFfDkX+F9UbISsAXf0+FPf1aRpH4kbEHGY=)
                          2: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (hash: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:51:da:b5:c1:1d:08:98:f6:ad:31:bc:1e:75:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
        Validity
            Not Before: Feb  9 13:00:34 2026 GMT
            Not After : Feb 10 13:00:34 2026 GMT
        Subject: CN=6bc94523c67241ab52802d69badea12c81959e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:9a:55:a6:9d:3d:af:2d:7f:69:8a:d9:dc:
                    1f:b6:03:d8:64:c9:a9:3f:8f:d4:b9:01:22:2e:ef:
                    c0:03:06:b1:1f:a0:cf:53:cc:06:7e:8e:9a:38:ee:
                    58:6b:93:ae:54:fb:40:e4:9b:20:b1:37:bb:d0:95:
                    58:bc:2c:0c:50:41:6b:99:2c:b1:62:e8:47:2f:32:
                    14:8a:a0:cd:99:1e:7e:c7:5d:fa:53:dd:84:d4:92:
                    b7:d4:ed:bc:ae:38:30:bd:9d:7b:50:4f:48:be:9b:
                    f6:a0:93:40:42:87:7c:de:4c:c7:4e:51:99:b3:9f:
                    d4:b1:5c:ce:a3:d2:60:0b:fc:a5:74:e1:f8:9f:fa:
                    0a:c2:af:d7:df:b0:15:db:c7:62:24:79:d1:d0:bd:
                    82:b3:36:c0:bf:39:0a:e6:df:d5:0f:99:17:61:3c:
                    89:79:42:c2:16:5c:e2:88:96:7c:e4:fb:7f:6e:c7:
                    b0:d0:c3:0a:fd:09:a4:34:8e:96:90:bd:81:05:af:
                    7e:1d:e6:55:69:f8:c4:26:47:d6:1c:18:a7:f5:c6:
                    d5:e0:df:d7:c1:6e:31:a4:47:8a:b3:ba:1f:59:df:
                    7d:32:b1:9b:f7:f6:86:ed:09:15:e7:05:d5:09:ae:
                    ad:6e:ca:a8:18:f3:62:84:2c:be:3b:54:12:fd:1b:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:45:23:C6:72:41:AB:52:80:2D:69:BA:DE:A1:2C:81:95:9E:1A
            X509v3 Authority Key Identifier:
                keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:52:dd:7a:16:81:9d:d0:85:93:3f:8d:a9:34:ec:b9:6d:
         d3:1c:9f:20:5a:5c:ff:44:d9:64:3a:10:e5:24:d2:7f:20:30:
         67:4c:e5:56:e2:92:25:7d:de:d2:b7:a3:1b:45:4f:49:0a:e5:
         2b:84:18:4c:01:b5:27:63:d8:73:c0:9f:d0:e2:a2:43:70:a8:
         37:ab:21:f2:3b:1c:f4:c5:4d:f9:c0:e6:34:49:17:82:65:3c:
         18:12:fe:26:d4:59:a8:9a:92:71:44:83:5d:bd:e2:74:25:9f:
         fd:27:f6:96:51:c9:70:f2:64:0d:4e:4b:ec:b7:b3:3b:5a:9e:
         db:97:5d:74:9b:b3:7a:ec:2b:e3:63:33:a9:72:28:09:ba:f8:
         fc:6e:f3:37:10:2d:58:6c:6a:e9:59:d6:b3:d1:65:3d:68:df:
         80:2f:08:2e:ad:1e:ab:7e:06:cf:82:04:7b:a5:9e:e0:73:e4:
         43:c3:b2:9d:59:fa:e4:76:eb:3c:59:d8:4c:1b:14:74:71:89:
         87:d2:28:52:fa:f5:70:46:54:af:fe:a5:57:98:ee:33:b5:59:
         91:6a:23:06:77:be:2c:9c:e7:e3:aa:03:fe:ff:5c:d0:48:1e:
         64:db:72:eb:27:dc:6a:6c:41:67:0a:eb:44:f2:35:e1:0d:5b:
         98:36:77:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client