This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File:                     74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier:          gza9JnZj7+wfVILiEYxWg03muKPIKT9D1K92Sda6g/8=
Subject key identifier:   AC:C1:C6:72:B1:83:D1:31:D3:62:27:8B:07:72:77:56:DE:34:4C:BD
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer:       /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial:       019C42465703E970C0E2BEDE5242270DF36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number:          1624
Signing time:             Mon 09 Feb 2026 12:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:31 +0000
Files and hashes:         1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: Y0sacX6BzMPuinjkI/LkRP3c0l5i9XKIx4JRRvGT+6c=)
                          2: BcbpeOE1UIMLYcx9_xoYiBz5cII.roa (hash: C/EPAsh6T699gB8fYjC4QQRKH8QFpe67E9wrm8R7nkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:57:03:e9:70:c0:e2:be:de:52:42:27:0d:f3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
        Validity
            Not Before: Feb  9 12:00:31 2026 GMT
            Not After : Feb 10 12:00:31 2026 GMT
        Subject: CN=acc1c672b183d131d362278b07727756de344cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:09:83:3a:67:96:d0:75:39:72:db:91:f9:
                    28:56:63:59:49:82:cc:62:b9:b6:5c:67:93:32:8f:
                    55:7f:88:1a:c7:e7:d3:a7:f9:77:81:a8:41:8a:ce:
                    08:1b:8e:75:28:28:25:aa:3d:a1:98:8b:18:96:17:
                    d8:a7:a8:7c:79:63:d0:61:f5:91:4e:c3:17:e3:d3:
                    43:05:13:f4:93:c6:fb:aa:66:82:05:bc:76:51:1c:
                    20:1e:10:0c:17:29:46:93:8f:db:72:89:37:76:e3:
                    fa:4c:71:ea:f1:17:21:97:2b:fd:01:d2:06:e2:41:
                    94:87:fe:ef:01:08:8a:c9:24:05:db:9d:23:98:98:
                    ae:77:df:9f:e5:bd:62:d9:3a:bf:af:92:96:95:08:
                    97:de:e6:95:b9:53:ae:bd:76:de:b6:97:bc:13:11:
                    6c:8e:38:fc:ac:79:ca:53:79:00:36:91:c8:f1:25:
                    47:de:d6:94:66:65:4e:b0:0f:8c:7b:01:35:68:e9:
                    4b:4f:19:27:7e:a4:ed:98:28:29:70:bf:07:cb:2d:
                    ce:00:c6:b2:d4:e4:a8:53:14:6a:5f:4e:ea:24:4a:
                    10:be:c1:74:d5:9e:00:cd:01:5c:38:91:cd:43:0a:
                    1c:5f:43:59:33:62:63:80:2c:50:a8:a1:d4:1d:0b:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C1:C6:72:B1:83:D1:31:D3:62:27:8B:07:72:77:56:DE:34:4C:BD
            X509v3 Authority Key Identifier:
                keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:44:a8:99:96:a3:4b:c0:2f:1c:24:ae:08:20:a5:29:be:1f:
         ca:12:23:81:81:58:2f:49:66:c4:57:75:2b:77:c9:4b:84:ab:
         cd:8b:38:23:de:d8:92:74:c5:e4:eb:26:54:5f:33:8f:cd:5b:
         84:fc:38:38:2d:bf:a8:62:57:20:a2:a7:3b:68:68:e9:2e:8f:
         5a:89:2a:7c:b1:ff:22:a3:0b:48:0f:b3:00:6e:78:39:03:23:
         ea:54:74:3d:23:eb:aa:bb:62:03:35:11:a0:0a:7e:93:56:fe:
         5a:f5:51:de:a7:46:01:f8:2e:0e:63:18:a8:e6:54:3e:80:8b:
         90:91:95:b8:f7:3b:11:e5:66:0c:85:24:32:41:08:89:5f:29:
         5a:04:fc:b7:0b:db:7a:81:e6:be:f0:bc:ca:16:0c:9d:6e:af:
         a0:97:8f:87:7a:65:46:03:81:dc:0f:1b:c6:42:2c:65:03:65:
         ac:67:7e:f4:f8:fa:bb:36:67:96:c8:45:82:a1:d3:98:60:b8:
         12:75:25:9c:58:ed:25:d4:10:93:ba:d8:9f:e6:79:37:72:9e:
         a8:28:24:22:f7:f8:4b:e0:dd:08:a3:ed:e1:d8:ad:d8:c0:ac:
         56:7c:38:1c:ca:d1:60:dd:04:f9:95:87:2c:07:54:c7:9b:dd:
         22:67:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:45 2026 by rpki-client