This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          IWztN64cdNSW6sz51mPw14jeUdl4CPEw4IloJCX9bF0=
Subject key identifier:   8D:FA:AA:E9:F0:B7:8B:7C:12:90:62:E8:4B:6A:3D:C1:8F:8C:50:E7
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       019C4359132A32F0267D64703C2AA82F84E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 17:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:36 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: qGzalBDdLF8AhoHAD/UmmJFdqq+GTlXF5nY76lLxYWU=)
                          2: e4nXI-_BDCIlp6mQT0lhpWhU9d0.roa (hash: GZ/VMI7kEuHwqJlfhTt9/h0l9gE/ESRoHXyKDs1cwjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:13:2a:32:f0:26:7d:64:70:3c:2a:a8:2f:84:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: Feb  9 17:00:36 2026 GMT
            Not After : Feb 10 17:00:36 2026 GMT
        Subject: CN=8dfaaae9f0b78b7c129062e84b6a3dc18f8c50e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:27:32:8d:87:24:ae:3e:35:22:b3:ba:5f:
                    a6:1a:7e:d4:0d:d1:8e:c2:1c:76:82:1d:0b:b5:3b:
                    e6:7a:9d:c1:b1:02:4f:08:11:88:37:86:f4:30:13:
                    11:ea:4b:d6:40:20:d0:91:d5:8e:87:65:8e:47:9e:
                    8f:bd:cb:35:99:f8:5c:f9:a3:7b:aa:f5:ca:1d:76:
                    c0:e8:2c:3c:b8:19:b7:e7:4b:52:7f:ba:88:b5:2a:
                    48:b2:a8:a4:bb:b1:fd:e1:90:3d:42:55:2c:ab:dc:
                    89:0f:1f:85:98:65:74:76:0a:52:c2:cb:0f:1c:a3:
                    44:3a:1a:82:ac:52:5c:e1:a3:02:f7:85:60:3d:06:
                    ac:47:ff:0e:0b:eb:40:93:d7:c3:d2:e7:64:e8:10:
                    5b:fe:33:4f:ad:18:03:59:27:78:43:b0:57:19:14:
                    de:ea:e7:2c:68:d5:f1:d1:6f:dd:fc:0a:f5:b2:ae:
                    d9:7d:3f:28:5b:b5:7a:bd:36:7d:d4:b1:ca:d8:12:
                    9f:bc:70:ce:40:61:11:16:fe:53:ce:34:1e:fd:16:
                    9c:3a:03:ad:e2:7c:b4:5d:df:7b:6d:8c:26:c3:e3:
                    a5:33:93:74:3b:ac:a1:bb:e8:38:38:28:e0:98:c6:
                    82:69:01:f2:b7:ab:11:6b:bb:83:a1:48:22:df:01:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FA:AA:E9:F0:B7:8B:7C:12:90:62:E8:4B:6A:3D:C1:8F:8C:50:E7
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:dd:2f:af:19:26:cd:28:75:fd:9a:50:39:da:15:ba:8d:
         51:68:30:61:3a:7d:17:d4:4a:44:3d:3f:d8:1c:06:5c:7f:d9:
         78:80:42:13:9b:29:69:b7:e0:3c:71:f2:ca:ff:ee:00:a4:3e:
         89:5f:87:8b:54:14:9f:3d:cd:03:fe:bd:cb:16:7f:db:dc:c2:
         cd:d4:23:59:19:76:09:ab:07:04:63:e5:b3:0d:76:c0:8f:82:
         28:95:a1:a9:b2:e6:a3:fb:b0:d3:1a:48:24:3f:dc:d2:f1:3e:
         4e:62:9e:43:1e:e8:cd:61:80:c9:ad:41:ea:12:6d:0b:cf:9e:
         e4:ce:03:54:a0:dc:2f:6c:03:85:8d:6e:f9:db:e6:a8:eb:99:
         a2:3f:89:df:e5:72:59:6d:21:be:7e:7e:85:0b:e9:9d:a1:6b:
         aa:11:a5:88:f5:8d:d5:d4:fa:f7:a5:ac:4b:fa:3b:3e:aa:84:
         25:1d:92:39:c7:39:83:01:10:67:4a:67:b3:19:ba:21:5e:c4:
         a0:28:e0:25:75:7a:d2:19:5e:48:ce:31:78:3c:e9:2e:79:5b:
         ec:27:b4:06:4e:ab:48:9c:d7:03:10:87:94:06:2e:32:a3:fc:
         f0:84:3d:09:f4:c3:de:06:6c:c6:f0:64:cc:f1:a9:ae:59:b2:
         75:49:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:12 2026 by rpki-client