This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
File:                     0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json)
Hash identifier:          PmtM9CtUIR/WbUQKq/X1wOE4N/PTm482kyCxrUfaaDI=
Subject key identifier:   CB:8A:77:89:FC:68:49:13:0E:05:FB:97:31:90:57:93:4D:DB:0A:4E
Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Certificate issuer:       /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Certificate serial:       019C4434F797B294ECFBA5E199E0FF4789A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
Manifest number:          0EF3
Signing time:             Mon 09 Feb 2026 21:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:47 +0000
Files and hashes:         1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: yHv86xspHLC2d44vyMItmcZuXp/xRBzLkNErpmUGG18=)
                          2: DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa (hash: pdxpKRsCb/8YBP2FJ+k4bPhM6JUzQTx+ikb3uy3CSBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:f7:97:b2:94:ec:fb:a5:e1:99:e0:ff:47:89:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
        Validity
            Not Before: Feb  9 21:00:47 2026 GMT
            Not After : Feb 10 21:00:47 2026 GMT
        Subject: CN=cb8a7789fc6849130e05fb97319057934ddb0a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:69:67:50:da:e2:dd:27:42:75:67:a8:44:
                    eb:b0:fe:a6:58:4e:22:ae:e8:bb:b2:2f:a3:a7:36:
                    99:6c:01:4f:b8:56:fc:03:1b:93:3c:61:39:5d:d4:
                    15:92:41:a5:7d:b6:37:e7:3b:f5:01:08:c2:38:6d:
                    c8:cb:8a:70:c2:57:b6:28:23:5c:82:c0:27:c1:1a:
                    6e:95:64:25:94:c1:ad:d5:76:68:a2:b0:bf:f3:3c:
                    73:d3:c1:6c:fd:9e:7b:db:8e:9d:fd:f2:3f:20:91:
                    f3:57:c5:83:be:ab:55:d1:5b:27:de:97:85:da:ce:
                    73:5c:47:2d:e5:24:f3:6a:1a:75:75:8b:9c:7b:fc:
                    9a:d4:fe:a3:3b:0e:ff:d9:d2:8f:67:dd:39:6c:b9:
                    78:e9:98:b8:3b:28:c0:a4:c5:99:45:df:d3:0c:b3:
                    55:91:29:a5:ee:3f:fa:04:e5:1c:83:e9:69:d9:47:
                    c6:f3:79:ac:7d:9b:f1:d0:4f:be:c2:8d:0d:95:90:
                    97:5c:44:68:33:3e:cb:3a:4d:45:68:17:93:9a:75:
                    ab:a3:ba:b9:6b:5b:0a:72:8a:d2:82:c8:11:45:9d:
                    f6:58:ec:bb:af:98:a8:10:1d:e2:f3:9d:83:ff:cd:
                    35:01:de:ed:6a:5a:5d:4a:c7:20:de:af:5c:23:08:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8A:77:89:FC:68:49:13:0E:05:FB:97:31:90:57:93:4D:DB:0A:4E
            X509v3 Authority Key Identifier:
                keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:02:1a:c2:b1:dd:df:1f:9d:53:61:40:d4:51:4f:31:f5:25:
         8b:b6:7e:cf:2d:97:62:a0:84:09:ba:26:7c:0d:41:29:4f:af:
         a8:c5:4a:2f:6a:f3:bc:74:e1:04:6a:a4:b3:de:68:91:b8:08:
         75:88:34:6a:9b:78:60:e5:b4:15:01:a9:2f:f1:bc:1c:c5:d7:
         a3:3d:4c:07:c7:31:2a:68:bc:b7:3c:90:6b:02:7e:30:9e:50:
         b8:38:82:8c:23:6e:75:3d:aa:b4:b9:f0:94:6b:5e:3c:66:8b:
         1a:e3:95:21:15:ac:0c:18:3a:90:5b:97:02:f6:4b:bb:42:34:
         88:e5:fc:b7:96:97:93:72:fc:bb:56:5c:1c:d4:ac:f0:ff:8a:
         20:52:ad:e1:7c:19:50:a6:fa:e5:7d:3f:f4:82:64:71:a7:40:
         27:5e:be:17:79:3e:30:9d:c9:3a:f5:ea:c8:ba:b1:09:bf:bd:
         65:79:56:98:70:2d:89:00:68:8e:6d:36:a4:8c:91:ae:e5:0c:
         af:89:12:e8:cf:f9:de:91:ae:08:47:32:98:8a:c0:5d:26:ea:
         5b:da:e3:44:a8:50:e6:75:a5:69:7a:d4:49:00:b6:97:57:b2:
         03:2b:85:ae:b7:1e:4d:43:96:e0:01:c1:bf:06:17:00:c6:ce:
         56:ce:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:19 2026 by rpki-client