This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File:                     MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier:          jI4kYfPcd3kg5bqjTp7H5EfRmgQMDSwc7K1Pn/ghoco=
Subject key identifier:   7E:11:42:61:67:AE:11:F0:14:DB:04:45:66:26:07:74:81:06:4F:3C
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer:       /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial:       019C4133DEC6A88F767F635925AC13B7B569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number:          0B7E
Signing time:             Mon 09 Feb 2026 07:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:44 +0000
Files and hashes:         1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: 97Jv7tmYdc6mA0NOZrPyFAJvmO1u///l0N0RLHN3pWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:de:c6:a8:8f:76:7f:63:59:25:ac:13:b7:b5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
        Validity
            Not Before: Feb  9 07:00:44 2026 GMT
            Not After : Feb 10 07:00:44 2026 GMT
        Subject: CN=7e11426167ae11f014db04456626077481064f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:63:3f:cc:d8:d6:a6:d3:e9:da:d8:28:b8:
                    df:a9:d4:75:8f:58:07:a4:00:b2:28:19:95:27:4d:
                    7a:db:2b:88:ef:15:ed:09:34:6c:f5:df:54:fe:3e:
                    5e:ed:56:21:da:b5:4e:c7:55:b5:99:ba:81:dc:11:
                    80:28:e5:8c:8f:7c:55:8f:51:eb:9f:c5:34:11:70:
                    e9:8e:08:28:72:ef:84:79:0d:e3:cf:1c:16:d6:9c:
                    08:f7:54:bc:cc:2c:04:36:4a:46:2a:9e:54:65:15:
                    65:b3:22:b9:0a:fd:3b:b3:de:f4:1a:53:03:2d:27:
                    52:7f:3b:dd:a2:4e:54:12:6e:1a:68:5a:39:da:1c:
                    4d:ed:c3:77:79:19:08:b9:32:11:8e:28:eb:cb:4c:
                    a9:3b:5b:77:66:1b:c8:51:2a:6d:0a:54:d7:1c:ff:
                    95:b1:4b:a5:5a:7d:3d:90:d9:bb:0d:67:b9:55:74:
                    fb:bb:3e:ff:98:83:66:9b:0f:88:93:c7:8e:be:86:
                    60:5e:24:98:dc:d6:c8:56:bf:cd:d4:1d:6a:e6:25:
                    83:26:c0:92:bd:ae:04:6d:5f:64:d6:0c:4a:68:cc:
                    ac:d0:84:49:e6:54:af:0f:72:ca:9b:51:5f:68:ff:
                    e1:ec:33:02:a1:85:45:f1:f6:e8:46:30:7f:64:32:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:42:61:67:AE:11:F0:14:DB:04:45:66:26:07:74:81:06:4F:3C
            X509v3 Authority Key Identifier:
                keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:ea:c5:a1:0f:4e:f9:11:82:ea:56:b8:f6:c3:58:05:39:
         b3:02:c3:ff:54:97:64:04:87:c5:3e:78:cc:02:01:3d:b8:b0:
         71:33:cb:6f:fb:b7:bc:6a:5f:6f:37:22:b6:05:f4:3a:75:f6:
         42:b0:7f:4e:6b:cb:56:22:8d:fd:34:25:b4:b7:4d:f2:be:e1:
         d6:86:e8:3c:7a:0c:83:08:a4:14:5b:7e:aa:48:9d:78:74:6a:
         18:14:9b:1a:b5:36:37:95:b0:32:6f:ed:43:54:49:2b:fb:01:
         2d:e8:dc:8d:88:0d:0d:ae:34:53:4f:b2:e8:44:67:0e:21:7b:
         a4:8b:78:91:a2:39:e9:87:64:c3:76:c9:f2:05:24:5a:12:b4:
         2a:60:56:2d:05:52:c7:80:e5:87:a4:11:02:24:24:43:3c:c6:
         82:de:ec:e3:6e:a0:64:a4:53:cb:bf:b0:a8:3b:6a:30:b6:84:
         e5:ea:52:4d:2e:cf:5c:68:97:ed:d8:ff:be:9f:f8:d4:c9:5b:
         b6:33:b4:7c:bd:2b:6a:10:a9:2b:83:96:68:00:e0:5a:93:89:
         b9:fa:9f:09:67:32:f7:92:ff:56:5f:a7:2d:b5:97:4e:db:7d:
         99:4c:8d:43:8f:bb:5b:7e:6e:ef:ae:03:e3:c2:42:9c:19:e8:
         67:d0:d8:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM97GqI92f2NZJawTt7VpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2RhMTkzNTdjYmM2N2RhN2Q1NWZhMzVhYWIzNjk1YmMw
NGQwNGYwHhcNMjYwMjA5MDcwMDQ0WhcNMjYwMjEwMDcwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZTExNDI2MTY3YWUxMWYwMTRkYjA0NDU2NjI2MDc3NDgxMDY0ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5hjP8zY1qbT6drYKLjfqdR1j1gH
pACyKBmVJ0162yuI7xXtCTRs9d9U/j5e7VYh2rVOx1W1mbqB3BGAKOWMj3xVj1Hr
n8U0EXDpjggocu+EeQ3jzxwW1pwI91S8zCwENkpGKp5UZRVlsyK5Cv07s970GlMD
LSdSfzvdok5UEm4aaFo52hxN7cN3eRkIuTIRjijry0ypO1t3ZhvIUSptClTXHP+V
sUulWn09kNm7DWe5VXT7uz7/mINmmw+Ik8eOvoZgXiSY3NbIVr/N1B1q5iWDJsCS
va4EbV9k1gxKaMys0IRJ5lSvD3LKm1FfaP/h7DMCoYVF8fboRjB/ZDKxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4RQmFnrhHwFNsERWYmB3SBBk88MB8GA1UdIwQY
MBaAFDE9oZNXy8Z9p9Vfo1qrNpW8BNBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQyaGsxZkx4bjJuMVYtaldxczJsYndFMEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNjNiYzMtOGM3Ni00NzVlLWI5ZjEt
ZjBiYmJlYmJkNmE5LzEvTVQyaGsxZkx4bjJuMVYtaldxczJsYndFMEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wNjNiYzMtOGM3Ni00NzVlLWI5ZjEtZjBiYmJlYmJkNmE5
LzEvTVQyaGsxZkx4bjJuMVYtaldxczJsYndFMEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawTqxaEP
TvkRgupWuPbDWAU5swLD/1SXZASHxT54zAIBPbiwcTPLb/u3vGpfbzcitgX0OnX2
QrB/TmvLViKN/TQltLdN8r7h1oboPHoMgwikFFt+qkideHRqGBSbGrU2N5WwMm/t
Q1RJK/sBLejcjYgNDa40U0+y6ERnDiF7pIt4kaI56Ydkw3bJ8gUkWhK0KmBWLQVS
x4Dlh6QRAiQkQzzGgt7s426gZKRTy7+wqDtqMLaE5epSTS7PXGiX7dj/vp/41Mlb
tjO0fL0rahCpK4OWaADgWpOJufqfCWcy95L/Vl+nLbWXTtt9mUyNQ4+7W35u764D
48JCnBnoZ9DYKg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:43 2026 by rpki-client