This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File:                     MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier:          bOgmewgYD2OFYUvtTC3AQmMpzv5mG/wNWtxaSAoD5f4=
Subject key identifier:   E1:A9:18:74:C0:36:A1:4E:EE:B7:14:FD:85:52:C7:15:C5:C2:EC:A8
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer:       /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial:       019C4358EF922415D52AD8E8164259EB498D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number:          120B
Signing time:             Mon 09 Feb 2026 17:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:27 +0000
Files and hashes:         1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: NYGx4rDMngmmZ2C1szM8c93T8b2z6VfFwjcwNXKg+G4=)
                          2: yWKjIr-KiDyKL-TFC_YWyumNPFY.roa (hash: tGpo5HgtbRNbDfzJQyEVQHJI3m6rcZ2a1vQoza/IAIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ef:92:24:15:d5:2a:d8:e8:16:42:59:eb:49:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
        Validity
            Not Before: Feb  9 17:00:27 2026 GMT
            Not After : Feb 10 17:00:27 2026 GMT
        Subject: CN=e1a91874c036a14eeeb714fd8552c715c5c2eca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:a9:12:79:78:4e:62:4a:81:f7:e3:f7:02:
                    30:b5:1e:c3:14:7d:0c:00:14:a4:6b:67:77:b4:83:
                    bb:d4:a2:a2:f2:a9:46:a8:c4:11:a6:22:b6:b8:98:
                    8c:d7:7e:46:a9:b5:87:98:d1:37:02:2c:32:54:07:
                    04:08:7f:54:ec:ef:3c:39:6a:cb:d7:97:a7:3c:4c:
                    68:e9:e2:38:5e:aa:20:68:5d:24:0c:04:6d:22:8f:
                    95:ee:13:8a:86:c0:f0:26:69:03:8b:1c:4d:b3:1c:
                    51:7c:b2:63:d0:e5:1f:9d:2a:d9:e5:e6:27:ef:58:
                    f5:6d:9f:b1:17:b2:10:1c:58:d5:99:a4:bd:85:59:
                    a6:33:ed:65:99:b7:97:40:40:28:ba:0c:14:ca:74:
                    e3:65:7e:c6:27:8b:4e:f9:a0:d1:57:0f:76:26:b6:
                    d2:16:98:3c:62:7b:b2:c1:02:f8:a9:48:84:b8:5e:
                    57:6b:0c:b3:11:9e:64:3c:cf:9d:aa:09:3a:bb:41:
                    41:fc:af:4d:12:b5:09:b3:b6:ba:b5:ef:64:0b:88:
                    ad:42:22:64:5f:40:69:67:70:a9:75:99:42:72:0c:
                    7f:a9:c6:f7:14:73:3b:f8:2c:0b:98:21:1c:d0:fa:
                    04:92:9b:a7:c6:31:44:be:34:16:c4:4f:52:e2:a4:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:18:74:C0:36:A1:4E:EE:B7:14:FD:85:52:C7:15:C5:C2:EC:A8
            X509v3 Authority Key Identifier:
                keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:84:7f:c3:01:20:0c:bd:1f:ab:55:20:78:92:78:d6:f9:
         cc:cb:53:1c:02:a7:39:ec:e6:8b:0a:2d:7e:af:f3:e3:f7:a2:
         f1:1d:04:18:1d:67:9d:8d:ff:f1:ad:86:b5:a8:25:db:fb:28:
         fd:e1:fc:0a:c3:ed:b7:ed:62:4f:5e:7a:78:85:36:1c:34:54:
         82:59:80:ce:66:68:02:2c:2d:32:b7:6c:82:56:2f:4c:2b:19:
         2a:9a:26:ba:f1:b4:07:66:4a:63:ce:6e:47:44:d9:91:03:d2:
         d1:e8:51:31:06:0f:7e:39:56:e4:2c:9e:b2:dc:78:83:5f:4b:
         2a:d9:95:3e:08:31:ad:06:15:84:dc:1e:a5:32:93:d9:dc:70:
         cb:63:10:4c:ab:7a:17:9b:80:ba:0c:23:7a:c6:59:3a:5a:9d:
         75:b9:1b:e9:84:4b:be:74:44:39:8d:3a:67:83:81:fa:d7:5b:
         4d:fd:b7:8f:b4:d3:8d:54:db:f7:d5:0a:54:3f:83:00:28:65:
         95:4b:ab:ef:ba:0a:a6:47:16:8a:99:be:0e:f2:ab:94:83:ae:
         e7:61:a8:95:21:7f:de:f8:ef:7c:76:29:62:2f:ff:f8:ce:d4:
         c7:86:85:90:7d:64:37:cf:16:0c:4d:2f:e3:6f:2c:38:ce:ae:
         59:ad:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:51 2026 by rpki-client