This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          iAQ3g5EfI9ymGKr5H4IT3PH57ZM+LhMctTFlBaJqUyo=
Subject key identifier:   B2:35:8C:BA:B6:C4:43:D6:DB:CC:C9:CA:A5:AF:F6:F3:3B:AE:38:7D
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       019C427D08F77618CBB2F6AA467B0A16660D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          0E84
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
                          2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: FHQ5qgyzad6d4fWvpQUkkJP13efPKlIC1o3POshHVBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:08:f7:76:18:cb:b2:f6:aa:46:7b:0a:16:66:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=b2358cbab6c443d6dbccc9caa5aff6f33bae387d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:2d:9e:57:33:c1:c3:15:b5:57:33:9f:5a:
                    31:78:e3:61:c4:ee:e5:3b:83:fc:01:3b:0b:56:08:
                    bc:50:8e:67:c1:1e:70:e8:ed:57:a3:4d:d1:49:bf:
                    3e:22:e0:a3:93:28:06:73:54:00:ec:7b:0c:18:3c:
                    87:79:39:18:88:04:1b:9c:75:f9:e3:0f:fe:aa:82:
                    c8:32:ae:ea:af:9f:47:64:eb:88:55:c6:d1:be:3a:
                    3e:d2:ee:38:a7:e0:4d:43:25:2e:a7:63:96:5b:c7:
                    e7:79:4e:ac:62:fb:8c:54:d7:21:dd:14:b2:48:34:
                    c4:fc:7f:e7:ca:40:78:14:7e:ef:46:47:1c:a1:e9:
                    12:0a:d5:4a:e4:c3:2c:80:73:9a:3d:ed:2c:59:e6:
                    b9:10:0b:21:d8:97:a6:11:30:d0:45:37:48:de:e5:
                    12:78:1d:78:a2:0f:ca:c1:78:04:b7:1b:e9:23:a9:
                    a1:f2:17:48:70:ec:a0:f2:e7:e7:0d:12:15:a1:34:
                    9b:fd:40:2b:1c:bc:b4:9f:d1:15:9c:ec:88:e0:56:
                    2f:0f:19:0e:fe:22:18:62:5f:bc:48:0e:06:99:34:
                    b0:cb:26:d3:c8:e4:ef:94:ac:0a:e9:08:ac:47:9d:
                    73:93:c5:fc:25:5f:bc:93:e2:c0:f5:6e:2c:cf:66:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:35:8C:BA:B6:C4:43:D6:DB:CC:C9:CA:A5:AF:F6:F3:3B:AE:38:7D
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:93:c8:df:96:53:bb:29:ac:24:ac:09:77:cc:21:6a:1f:f1:
         9c:10:27:05:45:c8:39:48:f6:03:e0:67:bf:06:97:6b:5e:c3:
         6a:22:81:cc:68:40:6e:84:d6:7e:19:15:cd:1d:f7:d8:b0:09:
         58:b1:e6:36:2a:5d:f3:92:d1:4c:75:43:b0:57:72:d8:31:ae:
         c5:c0:05:7e:a6:37:5c:d7:95:22:2c:70:58:6d:51:24:15:e1:
         06:80:d2:57:08:d8:c8:d4:47:86:a8:0d:90:d4:f4:b5:5c:76:
         31:bd:6f:54:45:34:af:11:a6:4b:6f:a8:6f:2f:d8:31:cf:9d:
         d8:e7:a7:1e:e7:d6:22:99:bd:e6:69:04:7d:eb:4a:ea:c3:0d:
         15:d1:da:52:13:8f:5b:de:0d:03:53:24:58:a7:12:0d:77:fb:
         78:03:68:0f:f8:94:3c:49:63:11:83:e3:1a:21:58:fe:7f:c1:
         a3:64:87:32:0a:79:dc:14:94:24:8b:ca:87:58:14:c6:6e:a0:
         38:54:2d:38:c0:f7:f8:e9:57:a3:4f:6f:0d:a0:5a:d9:0f:94:
         e2:f1:6f:c3:dd:c8:0b:ad:8b:be:dc:66:86:a2:cd:ce:22:a9:
         36:a1:ad:e6:0a:66:d7:c2:d7:d9:9e:b5:b1:c0:07:ce:9c:fc:
         89:ed:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:45:59 2026 by rpki-client