This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          Oayq9t5aTA9xpI6fCfvItKo/AFdvQ4mSvI6pOYETNdg=
Subject key identifier:   86:A5:0D:12:35:58:9C:51:CF:98:F2:C7:02:B8:33:01:6D:57:12:E4
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       019C446C6EBDCC2F70793E4DFA9194CF2ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 22:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:22 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: D6B1QEZ7+X+7fOHM5pIyvINyApzi8LBI+zBGd9/QNqU=)
                          2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:6e:bd:cc:2f:70:79:3e:4d:fa:91:94:cf:2a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Feb  9 22:01:22 2026 GMT
            Not After : Feb 10 22:01:22 2026 GMT
        Subject: CN=86a50d1235589c51cf98f2c702b833016d5712e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:e1:2d:87:5c:f3:cf:d2:9e:56:50:e3:f7:
                    f2:1a:a3:dd:96:85:f1:10:f1:04:40:fe:5b:8a:df:
                    c4:02:56:1b:e7:47:19:df:56:cb:91:1e:f9:c6:85:
                    3f:ba:d9:83:ee:2e:de:73:e5:95:f5:ee:e9:e8:61:
                    0d:98:66:a9:c0:9f:03:bd:c2:1e:43:96:52:fe:07:
                    6f:b1:d7:9b:60:fe:68:2a:43:ce:ed:1f:1b:d3:6b:
                    16:1c:25:d3:65:fb:47:a4:81:1f:fe:ce:7a:fb:0e:
                    af:cd:95:7a:0a:0a:f2:a7:89:cf:3d:34:8f:be:77:
                    13:18:b8:43:d9:a1:9a:5b:66:c0:31:dd:06:75:86:
                    24:5f:2d:b6:16:65:76:aa:cb:3d:48:06:2f:b4:06:
                    69:52:d0:fa:42:4a:4e:80:5a:ea:89:c5:a3:bb:27:
                    c5:01:1f:ed:65:a5:23:81:51:97:5d:2e:1d:f2:68:
                    8d:61:7a:fe:53:a6:3a:24:58:44:9b:f3:c2:03:f8:
                    1c:73:0d:f4:0e:8b:a8:35:ac:b1:b1:52:ff:99:dc:
                    0e:57:52:b8:84:30:8c:ea:e7:81:e7:6d:00:3b:85:
                    aa:64:a1:bc:dd:09:e1:2b:b2:ff:88:60:31:0a:5f:
                    c2:7d:ea:0b:d5:31:de:27:66:c7:ea:12:61:96:04:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A5:0D:12:35:58:9C:51:CF:98:F2:C7:02:B8:33:01:6D:57:12:E4
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:84:72:c3:4d:d3:c9:d1:1f:80:2d:be:bd:b1:c7:74:38:
         d6:48:6b:a0:74:74:80:da:48:04:fe:61:bb:59:90:68:72:7c:
         f7:6f:ff:ec:d4:5b:aa:6d:b1:d3:87:e9:fa:e1:38:3b:e0:c4:
         59:68:9d:10:00:02:9c:12:17:9c:38:cb:73:6f:ee:79:79:6d:
         a6:7e:70:c5:e6:17:ff:3c:5d:32:53:69:93:2e:5e:d1:42:26:
         de:c2:c2:de:89:85:af:e4:01:bd:00:56:37:0e:a0:35:03:d0:
         d4:d3:9e:37:56:a6:92:7a:33:ff:b1:0e:93:28:f6:d1:4b:c7:
         2b:33:72:f3:6e:c6:37:36:71:e5:63:95:fe:49:0f:c2:b8:ab:
         be:16:f5:7e:95:34:9c:21:6f:34:59:e5:3b:23:15:0b:d0:04:
         aa:82:89:ad:74:ee:0a:34:29:ba:d5:fc:11:8f:36:3f:57:b5:
         90:bf:41:15:21:b3:a2:5e:23:f2:58:2f:ce:b1:f0:73:48:ba:
         4c:d1:31:ca:1a:b6:f5:1a:e4:38:68:19:96:61:5a:96:87:0a:
         16:f8:fe:af:96:46:f1:20:29:39:d0:46:13:52:22:97:6b:e9:
         56:71:c0:9f:a1:ec:aa:7b:bb:aa:43:b0:bb:6d:b3:ad:71:08:
         df:6f:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:39 2026 by rpki-client