This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File:                     io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier:          LYXEqbmXcmKFxJNKKjTtl3LkccDgePc1drWMW9J3F0A=
Subject key identifier:   09:C3:BD:E8:7F:A7:EE:95:0D:93:9B:37:23:25:C4:C3:9C:B0:68:17
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer:       /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial:       019C416AB9659424A588F9CC95F6534CAA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number:          0C08
Signing time:             Mon 09 Feb 2026 08:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:39 +0000
Files and hashes:         1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 8I+uGkDkcG5tsm3zO17yGDK/SUZ+gI+IDhLhO3lh0Wg=)
                          2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:b9:65:94:24:a5:88:f9:cc:95:f6:53:4c:aa:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
        Validity
            Not Before: Feb  9 08:00:39 2026 GMT
            Not After : Feb 10 08:00:39 2026 GMT
        Subject: CN=09c3bde87fa7ee950d939b372325c4c39cb06817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:cb:7c:81:8a:8a:a1:2f:ad:ed:16:5d:70:
                    57:28:92:47:04:01:e9:12:af:26:77:8e:7e:5e:d8:
                    1d:df:d2:bf:a1:df:c4:8c:b7:ef:42:b2:fc:e0:8c:
                    a9:47:5a:3f:b8:f8:42:46:db:73:70:ef:61:26:6b:
                    42:b1:d1:1a:66:c3:14:6f:94:82:ae:e7:a7:12:91:
                    c4:fb:87:62:d8:93:91:a2:9b:1b:b9:ef:70:0f:77:
                    58:af:8e:62:17:f8:92:1e:6d:f5:f1:2f:5a:53:48:
                    3e:ac:cc:3b:9f:78:9e:f8:7d:66:ca:98:ea:4f:b5:
                    2b:13:9f:89:fd:ed:5a:7c:c8:84:23:fa:90:d0:3b:
                    76:9c:b4:a5:c0:fa:d2:e1:2d:3b:f1:bc:30:97:b2:
                    87:55:43:fa:1c:1f:c8:1f:5c:3e:b5:4a:1b:6a:5f:
                    9e:f5:73:b3:d6:e8:14:62:51:08:80:d1:c1:0a:86:
                    d5:e3:4a:ab:5c:45:df:ce:21:21:f1:6e:bd:0f:1d:
                    5a:25:00:07:7f:28:15:44:5d:6d:27:95:cd:6c:dc:
                    ff:c0:68:93:b1:c7:f6:bd:8b:af:62:15:07:1a:aa:
                    79:7b:ab:ec:d4:0d:9f:1a:7a:52:00:aa:78:bc:77:
                    1c:26:ff:a9:36:8a:75:ca:82:45:d2:39:68:7b:01:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C3:BD:E8:7F:A7:EE:95:0D:93:9B:37:23:25:C4:C3:9C:B0:68:17
            X509v3 Authority Key Identifier:
                keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:55:5f:6e:36:3e:b6:2e:44:27:c6:68:15:40:b3:9e:b5:
         57:fe:d0:1d:85:71:7d:72:7a:ce:a5:78:8d:bc:6a:1b:27:b2:
         d1:c4:cc:e6:78:d3:bd:f0:02:4c:6b:24:58:82:9b:57:7b:58:
         76:2e:65:7d:39:8d:db:fd:07:8a:41:31:34:c4:c4:0f:de:9b:
         9b:b9:06:97:b4:63:cc:b4:75:f4:54:e9:59:74:e5:f5:f9:42:
         2d:e1:db:91:51:df:a6:3c:a9:42:60:6f:44:38:54:1a:ea:86:
         a7:68:85:b2:dd:a4:a6:13:6d:6f:55:ab:bf:15:39:ff:c2:30:
         e7:98:64:52:78:58:ce:0a:50:8f:17:5c:12:72:f1:a9:01:7f:
         26:29:16:7b:4c:fb:87:e9:3d:30:4e:ac:f3:c2:72:fc:eb:64:
         67:2a:6b:0b:97:c2:7b:b5:80:bc:4d:6e:2f:e8:2b:5b:d1:75:
         b0:f8:a9:1d:7f:d9:bf:f6:0b:77:55:95:cd:af:8b:a2:13:d9:
         db:74:85:ee:ca:9b:e7:11:63:53:71:62:5b:e3:bd:91:75:39:
         73:ef:39:cb:b7:62:8a:52:b0:b7:30:7a:07:5f:b2:fe:92:71:
         75:65:87:fe:a1:92:27:84:76:23:02:33:67:a8:69:fa:80:55:
         68:1d:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:38 2026 by rpki-client