This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File:                     mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier:          eKcfAGGmm8+3cukj0w0Sp2dvSiAyDxITMh1UNgKyG0c=
Subject key identifier:   B5:35:B7:A2:F5:CA:11:74:01:C3:BC:0C:99:5F:F6:80:2F:A3:2E:61
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer:       /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial:       019C43C75BF4DD3E984029F6AFE7EC33F527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number:          14FD
Signing time:             Mon 09 Feb 2026 19:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:04 +0000
Files and hashes:         1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
                          2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=)
                          3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: Pc01jtfWXqmNeh/hYedrjgsL96ZZ0LcjRjpJa4GSxPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:5b:f4:dd:3e:98:40:29:f6:af:e7:ec:33:f5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
        Validity
            Not Before: Feb  9 19:01:04 2026 GMT
            Not After : Feb 10 19:01:04 2026 GMT
        Subject: CN=b535b7a2f5ca117401c3bc0c995ff6802fa32e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:ad:47:6d:96:4c:5f:38:ba:8b:1d:57:28:
                    44:a4:e7:ce:08:de:e7:4f:a9:58:b0:9e:82:93:70:
                    d6:17:92:dd:4d:ed:6a:ab:10:ac:6c:83:c7:6f:70:
                    13:e4:b4:6c:b7:7d:74:29:8f:62:76:14:27:d0:52:
                    3a:fb:ce:ba:e9:4d:19:fe:a4:d8:b2:ea:52:1b:0b:
                    28:72:33:2f:73:ec:e2:4a:17:14:a5:42:91:5f:82:
                    2b:df:bd:4b:6c:8a:8f:9f:4a:98:da:7f:77:8a:a9:
                    34:df:ea:11:d7:99:ac:0f:9e:38:ed:6c:1a:19:31:
                    d3:52:27:f7:cb:9e:c5:f8:4a:d6:e0:ed:9a:39:5d:
                    73:49:fc:89:18:ba:9f:4e:54:b3:69:81:f2:5b:04:
                    a4:e2:51:b5:ae:ec:80:90:e4:a1:0e:bb:66:de:09:
                    b9:27:d6:2d:20:1b:5e:6b:ec:ab:38:b9:1e:cd:05:
                    0a:68:e6:31:f0:77:be:ae:e5:96:44:a6:f4:da:96:
                    af:c0:29:79:76:7a:df:66:48:da:01:4f:1c:10:b1:
                    dd:b6:95:e1:60:e5:55:dc:dc:4f:1b:83:d0:4d:2a:
                    bf:43:a9:9e:f5:8f:c4:5c:ad:94:9d:e5:4d:84:25:
                    3a:2a:94:e2:53:de:12:80:11:8f:6c:26:85:bc:48:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:B7:A2:F5:CA:11:74:01:C3:BC:0C:99:5F:F6:80:2F:A3:2E:61
            X509v3 Authority Key Identifier:
                keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:fd:c5:17:03:ac:33:f0:3d:93:6f:29:5c:c9:96:bb:c9:
         01:4c:44:a9:29:c4:9c:2e:43:b6:a1:38:23:57:2f:cf:d1:74:
         6b:c5:15:2c:db:9b:4d:af:c6:ab:96:47:a7:2c:47:bd:f3:f9:
         18:29:65:93:39:d2:d9:4a:c0:1b:7a:2c:5b:7d:92:bb:e8:8a:
         33:f5:4e:5c:6b:97:32:c8:43:40:96:09:7e:bc:5a:d5:4b:fa:
         6c:c5:89:34:ec:50:f7:35:d0:ed:9d:90:ed:68:ba:a5:f1:ba:
         3a:3e:70:df:15:f4:c3:97:0f:d2:d0:dc:43:ea:c6:a9:d7:e0:
         ea:aa:ef:eb:5d:18:16:84:9b:ea:0b:53:09:1f:b9:fb:d2:38:
         de:91:63:f0:a0:a8:4e:99:cc:36:8b:ec:42:bf:ff:36:0b:cf:
         ab:a6:5e:3c:f7:27:30:6b:3e:b6:18:8b:86:ff:98:72:34:2f:
         c9:62:27:6b:19:ae:ad:31:98:dd:b6:27:01:b5:66:70:86:53:
         76:8e:2f:a6:bc:31:14:4f:b4:ef:8b:85:a6:2c:b5:e8:f4:5a:
         ed:03:fc:b9:0d:18:7f:3f:82:43:53:52:ad:36:43:20:2d:63:
         5e:86:90:d5:b1:bb:f4:60:0e:9c:64:73:b1:9c:cb:ec:5d:f1:
         31:b3:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:03 2026 by rpki-client