This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File:                     16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier:          Y4SMQ51AmgFffKMobn0ynSsS7xXw/6R6LxJ3jhpAiEc=
Subject key identifier:   40:30:9F:FD:39:84:E1:D3:46:EB:94:98:46:E9:18:D4:39:25:54:E0
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer:       /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial:       019C44A2637CBA9FB1F08C9566B6036DB885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number:          01B3
Signing time:             Mon 09 Feb 2026 23:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:18 +0000
Files and hashes:         1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: 2PP/+aawAIn05phglQx5yVdSq/ZJ3B4bG5BusJuxHWE=)
                          2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
                          3: Ga3UDOpYfgNzEoEP6SCJ3qpT1GI.roa (hash: l0pSXZWDcOE87oqHCiYGC4+D1pIC7qRKEwvtCxYBnHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:63:7c:ba:9f:b1:f0:8c:95:66:b6:03:6d:b8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
        Validity
            Not Before: Feb  9 23:00:18 2026 GMT
            Not After : Feb 10 23:00:18 2026 GMT
        Subject: CN=40309ffd3984e1d346eb949846e918d4392554e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:1c:0a:14:09:90:93:cd:f3:04:91:e4:02:
                    ba:bb:d7:24:06:3a:15:c5:1e:98:5a:45:e6:7f:c5:
                    40:80:a3:11:38:99:69:7a:d7:a2:14:0c:08:fb:d1:
                    b5:0d:12:70:e1:ce:fb:1c:42:9d:03:e0:bc:94:63:
                    99:4d:ea:39:6e:0a:ba:d9:78:c4:73:5c:7f:78:e8:
                    41:df:8b:5b:4d:47:5f:d5:8e:7d:16:55:a3:59:27:
                    75:89:98:e9:e6:5a:34:ff:21:27:77:49:f8:dc:87:
                    33:78:25:50:8a:64:e2:69:bc:9f:4a:a2:5a:e4:c8:
                    5d:8b:ce:48:b4:6f:3d:43:87:38:7b:a3:7b:53:76:
                    27:a3:0b:75:e5:63:62:c0:ed:55:8a:3f:e2:b5:22:
                    c0:14:ad:8a:82:e6:43:74:c6:89:b2:16:56:97:cf:
                    dd:c0:12:5f:39:6e:88:e7:20:34:54:1a:7f:b9:9d:
                    61:85:28:b1:a1:ca:c9:62:c1:52:16:ae:2e:6a:9c:
                    b4:92:d1:99:b4:89:46:24:4c:92:40:c1:0a:13:49:
                    13:9a:51:72:d8:67:af:db:ed:20:88:b1:aa:84:6c:
                    82:87:22:26:33:08:79:1d:68:b6:cd:77:47:86:bf:
                    47:da:fe:92:7d:68:11:47:9e:2a:ee:86:4c:0d:76:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:9F:FD:39:84:E1:D3:46:EB:94:98:46:E9:18:D4:39:25:54:E0
            X509v3 Authority Key Identifier:
                keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:7f:e0:0f:5b:13:a7:96:8d:8b:7e:c2:82:bf:dd:40:1d:
         fc:20:4b:ef:fd:d6:df:94:1f:5b:2f:68:79:ef:35:b6:57:16:
         9c:31:65:19:37:60:26:0b:ae:23:d8:a5:27:d4:fb:3a:81:2c:
         60:c4:91:79:e9:e2:5f:8f:3d:30:6a:f2:45:af:07:a2:40:ba:
         a8:34:5d:67:e4:96:70:42:1b:c1:4a:ab:4e:07:d5:66:19:f6:
         a8:dd:bc:1a:0b:f2:19:9f:60:4d:ba:12:35:4f:a8:48:70:2f:
         f1:ff:2a:33:ad:b1:68:84:7a:40:da:f9:fc:3d:8a:e2:f0:77:
         fd:c6:48:e8:4c:d2:14:96:01:0f:86:a9:13:5f:ef:92:62:f5:
         5f:76:b2:bd:fa:cb:fb:0d:70:88:d9:8d:b9:8f:ce:f6:af:c1:
         bf:7f:9b:dd:ea:cd:d8:5b:a2:21:2f:f0:4a:3e:cb:eb:e4:d7:
         33:18:ef:7e:3f:19:b8:88:55:af:e5:78:a5:16:18:45:83:c3:
         f6:aa:9b:87:11:14:0a:dd:b5:16:a3:67:12:0e:9c:72:43:1e:
         60:19:4c:d6:5d:64:fb:ea:76:e9:0c:29:1d:1b:95:18:14:09:
         8e:4b:72:59:ae:65:8c:70:3a:f5:72:7c:4d:22:c8:16:22:d4:
         8b:3a:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:51:19 2026 by rpki-client