This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File:                     Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier:          nw7KNOxDs4aUFBbKek14hrEKxS0Lxeh+uBNNZDCYKSw=
Subject key identifier:   07:23:FF:23:E7:53:64:B4:8C:53:72:07:79:47:FD:A6:A7:34:F6:6E
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer:       /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial:       019C420F25C47E23B3BAFE69FBC84F64A1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number:          0A01
Signing time:             Mon 09 Feb 2026 11:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:14 +0000
Files and hashes:         1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: icM8nvZlPGi6QDmOViCUbkN6NaAjyknP3LUF67R8xAk=)
                          2: zh3jJi7VlgsCf1B8mSSIRkmxTfM.roa (hash: UL+DW0mVWjoP5JojLcH0dVPVuqkEZ0cepJzgkv7Gs7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:25:c4:7e:23:b3:ba:fe:69:fb:c8:4f:64:a1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
        Validity
            Not Before: Feb  9 11:00:14 2026 GMT
            Not After : Feb 10 11:00:14 2026 GMT
        Subject: CN=0723ff23e75364b48c5372077947fda6a734f66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:28:f8:6c:a6:63:19:75:be:9d:05:1d:41:
                    41:46:f6:73:f2:06:60:78:31:33:48:6e:85:29:fd:
                    a2:10:ec:81:d0:33:6a:f7:ee:13:f5:f1:66:bf:ed:
                    e7:ad:b7:6f:6d:1e:4e:6b:a9:1c:f4:5c:c2:fc:92:
                    cd:29:78:2b:54:bf:6b:67:3c:db:1a:c8:7b:0d:f0:
                    9e:40:75:b6:14:c1:c3:dc:23:39:f5:4c:62:5f:b7:
                    ee:d5:3e:04:7b:4b:d4:5a:6a:14:c3:71:95:47:a0:
                    43:98:98:94:19:c1:00:ff:44:21:1f:a7:fb:d2:a1:
                    15:cb:59:68:e8:6c:62:65:e5:e4:ee:73:e6:78:a3:
                    d9:99:2f:10:b3:1f:34:f9:11:62:39:58:be:80:d1:
                    a4:62:8f:2d:6a:ce:b5:c0:51:4f:a8:f3:4c:9a:1a:
                    4f:43:0b:5b:92:83:aa:3b:c2:a4:86:35:8e:68:1b:
                    89:f8:9d:6f:66:46:ae:c3:b8:78:f0:79:5b:3e:18:
                    45:d6:b1:b5:b4:7e:a0:ba:6a:fe:e7:bd:35:e6:3f:
                    2d:4c:96:2f:49:72:64:7d:d7:26:10:c3:d5:b6:ad:
                    f4:2a:15:ae:0b:b6:f5:7e:6c:9f:1a:a3:a0:05:a1:
                    15:7a:6f:c3:8c:6f:08:a8:00:28:c4:b6:30:37:1e:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:FF:23:E7:53:64:B4:8C:53:72:07:79:47:FD:A6:A7:34:F6:6E
            X509v3 Authority Key Identifier:
                keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:77:04:10:91:a9:aa:7e:63:2a:4c:8a:54:f7:4d:f3:fe:
         08:1d:46:82:ab:c8:a9:56:7e:72:a5:24:0a:e7:0b:a0:b8:fa:
         54:fc:fe:45:dd:78:a6:21:51:40:74:b2:f9:09:84:f3:76:5e:
         07:14:d9:89:62:70:c0:45:07:83:2e:eb:5c:4f:15:83:fa:d9:
         ce:51:0d:b0:05:68:0d:fc:a3:9e:82:50:a0:a4:4e:3f:d3:1f:
         7c:a8:7f:a3:31:6d:c1:64:f0:5e:36:6c:15:e6:dd:b9:d0:ca:
         8a:ae:30:4d:c2:5d:f3:82:c4:28:d3:e1:1b:d8:82:1d:30:13:
         08:a6:09:1b:27:c2:94:8b:20:32:f7:f6:ac:72:a3:50:0b:10:
         73:60:20:8f:99:ce:e4:dc:51:52:db:52:00:75:f9:5c:58:92:
         02:8a:d6:5d:98:a1:22:1b:19:9b:10:f1:ad:92:f2:ef:21:71:
         c8:d3:9a:30:b3:84:b4:17:79:ec:82:02:7f:80:93:b0:61:8d:
         6b:20:2d:51:6f:f2:d1:2b:3d:fd:aa:e0:b6:0e:df:50:25:64:
         43:e4:1e:81:96:ed:00:91:42:57:a9:c8:63:7e:da:07:0f:19:
         40:7a:48:39:c7:8e:e6:c8:63:34:74:1c:fc:36:aa:90:af:b7:
         ec:ba:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:43 2026 by rpki-client