This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File:                     rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier:          6f8YUKmjIRe3UWsP+R0+nu4BRLZgrJGeL6HvB7F6G/4=
Subject key identifier:   74:B8:FD:01:93:47:F5:F3:8E:55:41:CF:C8:6D:F7:25:A8:94:4F:E9
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer:       /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial:       019C432293D3DFA2EAF3280EEF7E77654C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number:          07BC
Signing time:             Mon 09 Feb 2026 16:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:05 +0000
Files and hashes:         1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
                          2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: +9kauVnVTgYjFkQZitPg/2XHx2LTNwejQ7DqZIgxm6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:93:d3:df:a2:ea:f3:28:0e:ef:7e:77:65:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
        Validity
            Not Before: Feb  9 16:01:05 2026 GMT
            Not After : Feb 10 16:01:05 2026 GMT
        Subject: CN=74b8fd019347f5f38e5541cfc86df725a8944fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:28:be:6e:65:45:ef:63:2c:ac:0d:51:b4:
                    bc:90:88:b9:a6:58:f9:cb:36:99:ab:81:48:6b:1e:
                    65:dc:c6:44:c7:4f:53:48:b5:73:0e:9e:0c:1e:c5:
                    e8:71:de:3d:04:c9:9d:12:46:3f:38:19:47:cb:05:
                    5e:f1:07:6f:69:fd:b1:d8:f7:fc:5c:0c:30:df:10:
                    7f:7d:c1:0f:07:1d:d6:fa:25:88:b5:0d:ac:b3:8d:
                    0a:93:ba:f5:29:72:43:1f:16:d1:92:a4:65:ca:38:
                    72:28:5d:2d:9c:d0:0a:63:b1:54:9c:cf:1d:52:ff:
                    0d:07:ae:5d:f6:03:60:4b:69:c5:aa:a5:fa:6b:34:
                    25:c0:5d:71:3e:ae:06:99:a7:22:28:57:ba:a3:bb:
                    02:40:a0:04:72:9b:a7:37:b9:34:57:c3:14:20:f5:
                    f7:12:de:be:55:99:e1:7b:61:82:ac:3b:3b:67:57:
                    0d:83:98:30:e1:69:d8:ab:0e:10:63:57:06:6b:5e:
                    ca:a6:ba:5d:d0:40:0b:f9:6d:b3:31:51:7f:6b:dd:
                    68:13:04:19:2e:27:5a:fc:7c:62:1f:08:95:d4:92:
                    fa:02:29:db:eb:9e:b9:fb:54:3c:5d:61:bf:29:c2:
                    cd:6f:e5:b9:99:27:7d:86:b7:8e:14:fc:5d:a6:08:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:FD:01:93:47:F5:F3:8E:55:41:CF:C8:6D:F7:25:A8:94:4F:E9
            X509v3 Authority Key Identifier:
                keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:70:c5:20:7c:33:b8:ea:e4:31:d0:ef:f7:b6:9d:7d:ce:16:
         98:b3:d6:5a:41:ac:fe:df:5f:db:e3:a4:f4:e9:1d:79:81:9f:
         ce:26:fc:8f:5e:10:02:79:4b:91:de:c5:6f:88:fc:c6:e8:0a:
         a8:6d:57:b5:52:81:ed:93:ac:fe:a9:a6:c5:83:10:f5:c0:ce:
         4e:a3:8a:11:15:0c:17:06:81:1c:81:ff:e5:df:e8:68:f6:b4:
         a2:2c:b1:8e:08:03:a7:b6:db:9e:e3:82:b0:11:61:53:f4:27:
         c0:c0:de:ea:f7:47:6d:bf:c4:60:71:0c:8b:db:f7:e4:63:e4:
         68:a8:52:bf:50:75:e4:d2:10:43:d5:c1:be:d4:97:e0:5c:d5:
         74:dd:0d:78:b9:e9:0f:22:c6:1e:df:d8:fb:4a:38:a9:4e:74:
         d5:a0:04:37:f8:fb:56:c9:fa:7d:a7:40:93:b8:8a:9d:52:63:
         7f:58:f1:f1:a5:ef:7f:7f:69:eb:79:6a:ee:24:d0:3b:83:b8:
         e2:db:62:15:e6:e3:5a:a6:78:d4:bb:28:dd:a8:c3:56:ac:c8:
         6a:73:be:df:1d:bf:47:6d:39:5c:42:71:31:77:7c:4a:c5:75:
         19:e0:fd:75:1a:b2:17:a7:2d:80:09:cb:c0:33:c2:eb:98:ad:
         10:22:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:25 2026 by rpki-client