This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File:                     pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier:          vN2v/P+Zy/UHHO/dagOmT67UdAV013u5phehYJmAxS0=
Subject key identifier:   66:3D:DE:FD:14:18:A0:F9:F6:3C:8A:F4:C7:5E:28:01:56:AC:0F:EC
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer:       /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial:       019C427D3341BFDBEA3E003B6181685E3CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number:          0899
Signing time:             Mon 09 Feb 2026 13:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:27 +0000
Files and hashes:         1: gvfxgS9VdbGwIqb9SxlXG1MbNbM.roa (hash: JUjuVP1XRuU3MRxww3ep16uVkjCeigeMEzaVCeFSa2A=)
                          2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: JyTc7Vyrho5wmZgfZqzxeEhHd/hgyaaWoaPkNIF+UzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:33:41:bf:db:ea:3e:00:3b:61:81:68:5e:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
        Validity
            Not Before: Feb  9 13:00:27 2026 GMT
            Not After : Feb 10 13:00:27 2026 GMT
        Subject: CN=663ddefd1418a0f9f63c8af4c75e280156ac0fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:f8:6a:99:59:00:a2:a0:db:74:9b:a4:b7:
                    e4:0c:22:4c:2e:da:a1:7f:30:53:d5:7e:18:20:e2:
                    d8:de:22:56:1e:ef:c0:23:d5:7c:3e:85:a2:e1:31:
                    03:bb:6e:60:01:ac:4f:6c:63:4c:62:f1:58:7f:03:
                    49:0b:b8:18:9a:52:af:d6:e1:ab:68:cb:da:71:fc:
                    3c:40:91:3c:b5:6d:fb:57:7a:02:02:49:19:e2:51:
                    da:32:f1:a6:fb:55:5b:02:20:01:7c:d0:33:6f:3a:
                    09:8a:09:19:2d:6c:46:4b:13:f4:6f:03:0d:06:e3:
                    27:e9:fa:33:97:79:93:fd:d1:f1:82:ba:27:97:e8:
                    dc:32:ab:82:8f:8c:58:e2:b6:f5:83:e0:5b:e7:68:
                    6b:6c:dc:1d:09:d8:4d:94:80:aa:60:db:b4:5c:0e:
                    9b:5d:02:00:00:c4:0e:ee:43:73:b1:fa:1c:42:e7:
                    c9:66:d9:9b:50:18:d6:d5:b3:4b:22:c7:98:d1:f7:
                    dc:86:51:eb:1a:08:85:a2:78:6c:16:dc:c0:41:da:
                    dd:c8:73:3c:1d:ae:a5:b3:c1:c4:48:b9:ad:4a:56:
                    49:d9:ed:ae:97:81:ea:78:9b:2b:20:a9:c8:3b:53:
                    55:f9:1f:6d:65:ab:bd:a9:5b:5b:7a:5c:3c:41:e2:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:DE:FD:14:18:A0:F9:F6:3C:8A:F4:C7:5E:28:01:56:AC:0F:EC
            X509v3 Authority Key Identifier:
                keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:25:5d:a8:21:34:57:64:23:18:fc:4e:6c:d6:fa:3e:be:
         93:9e:79:16:66:c0:05:a1:2d:14:e5:7a:4c:38:59:d3:dd:54:
         31:7c:c1:d6:20:41:72:f1:1f:af:a6:60:8b:55:fb:d9:a9:5b:
         5f:8b:9c:1c:24:6a:a7:81:03:b6:7b:bd:49:87:a5:52:76:2b:
         50:56:78:6d:74:91:e9:c8:c5:53:d9:bf:23:3d:b3:db:8a:4e:
         61:94:1d:3d:a8:10:e7:12:9b:6e:d3:4d:22:aa:bd:90:96:48:
         e7:e2:13:b3:aa:b6:76:08:b4:e5:a0:4c:ff:ec:89:1c:88:d0:
         43:21:77:42:d3:b3:99:fc:09:a0:c1:29:33:e6:f7:29:dc:4a:
         db:c0:78:6b:4e:b3:13:94:22:83:c8:56:e1:1a:d1:f0:06:28:
         1d:cc:a5:81:a8:9e:8c:f8:95:60:22:dc:1a:30:91:e0:0a:cb:
         f4:08:07:57:94:b5:03:e2:2e:77:b0:d1:ec:bc:d8:83:67:8c:
         68:dd:b0:11:83:27:8d:84:02:49:69:6b:b3:d9:5a:b1:76:26:
         45:4e:f0:4e:9a:5e:f0:b7:95:a0:fb:68:7c:e6:75:e9:c7:3e:
         c9:ee:06:71:20:5c:d3:6b:c8:7d:71:a4:ae:f6:85:b5:8c:22:
         fa:59:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:44 2026 by rpki-client