This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File:                     mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier:          t3ePpjOxlb6XkKH9YXl2XkN6GPqR+5annzn6assnVnA=
Subject key identifier:   B8:0F:00:7B:2C:2C:00:FF:BC:F3:A0:7F:52:28:A4:00:FE:7C:88:87
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer:       /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial:       019C41341A2BB1F5A45826DA6757702BCEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number:          16F8
Signing time:             Mon 09 Feb 2026 07:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:59 +0000
Files and hashes:         1: 0ATyl4ekFRj-WxgYIcv02NV23tI.roa (hash: JP25J8vGC7AY6JQNIpPVJxNPRtt2vIdmRIL8Ejj1OxQ=)
                          2: WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa (hash: 2P6nSAZ1sPNq/s5iROpnF+sOeXvgcoADYMvtdAcO7JY=)
                          3: gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa (hash: gknScLT558AwNuqdvMmD/GV256E2UaSmjDtUQzxe0LE=)
                          4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: hnzokWP7mPUB1XjJd0CL8J0E9FaB2SSJek4iggaHrUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:1a:2b:b1:f5:a4:58:26:da:67:57:70:2b:ce:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
        Validity
            Not Before: Feb  9 07:00:59 2026 GMT
            Not After : Feb 10 07:00:59 2026 GMT
        Subject: CN=b80f007b2c2c00ffbcf3a07f5228a400fe7c8887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:8d:e6:0b:c0:2a:0a:cc:bc:80:29:ca:6c:
                    ea:64:9c:69:9d:0f:75:ee:81:a5:d6:fe:1b:9a:9e:
                    9b:2b:08:26:1e:d4:c4:99:3c:a2:3f:b7:4e:1c:d7:
                    8b:b3:29:c3:6e:cc:96:05:de:30:5f:3d:52:df:18:
                    50:5b:e3:6b:56:69:58:79:b0:3d:03:b9:65:b4:71:
                    0d:fd:9d:ca:57:f3:98:6c:d6:3d:17:8a:5d:f5:7c:
                    c2:c1:b6:0d:04:a0:ff:d0:df:1d:00:43:e3:fc:0e:
                    ad:9d:fc:47:fb:a3:47:5a:f6:2d:97:90:4f:d4:b6:
                    e8:79:bb:be:06:ce:da:f9:09:eb:e4:12:65:58:f4:
                    c9:93:b7:08:db:78:30:80:2d:27:4e:5f:99:2c:17:
                    24:15:ed:e5:e3:4d:86:b8:08:6f:fe:e7:75:b5:c9:
                    1c:2a:b9:f7:99:25:3b:13:1e:ba:a7:de:3e:4e:89:
                    45:be:4e:16:36:f1:12:c7:19:c9:47:84:e8:ed:44:
                    26:c3:f2:b3:43:23:eb:09:05:53:0a:08:e3:b4:3e:
                    80:dc:9a:59:8d:9c:28:b6:1f:d1:86:d6:4a:1b:2b:
                    6e:f6:78:8b:ba:c5:a9:b3:07:58:c3:3f:3a:b4:3b:
                    4e:6b:f8:80:51:3b:7d:89:6f:e9:17:7f:e2:ab:9c:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:00:7B:2C:2C:00:FF:BC:F3:A0:7F:52:28:A4:00:FE:7C:88:87
            X509v3 Authority Key Identifier:
                keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:20:68:21:14:bc:74:79:36:33:b1:c0:84:92:f8:f8:66:d8:
         5b:15:3f:a8:99:e4:ea:bd:40:c1:32:5d:43:53:01:e3:c0:0a:
         cc:b9:4d:ee:26:77:24:2f:4a:05:1b:41:ad:37:64:10:df:05:
         3f:1f:17:15:53:fe:fd:3e:83:c1:e0:89:e7:cf:0a:ac:e9:78:
         54:da:85:9d:14:a3:23:9c:cb:07:55:3b:c2:d0:c8:f3:b2:ae:
         3c:03:d1:eb:ef:b0:f6:3f:ad:f6:a8:a4:87:4b:98:66:51:a2:
         81:4a:77:82:03:40:46:42:a1:48:4a:4a:1f:0e:6f:63:ed:1e:
         70:d3:4f:e0:77:0e:e0:f2:11:03:36:b0:73:d8:20:d8:82:07:
         cc:88:fd:36:b6:3c:29:ab:ba:99:82:61:45:db:73:2a:b4:38:
         8b:a1:8a:85:b3:6a:b9:fc:21:1a:72:a8:62:aa:22:f6:b7:0e:
         1d:40:99:a3:73:59:65:09:a7:be:31:bf:99:ea:26:2e:3b:ec:
         79:d7:77:61:a0:95:29:ed:18:d6:aa:7d:44:bc:38:f4:11:e7:
         a6:d9:b7:c1:9e:39:65:4e:57:8c:c2:f7:18:f8:0f:03:9b:3c:
         e6:e7:1a:b2:c7:e1:d4:a7:dc:42:75:d3:57:a8:26:01:ee:a0:
         fc:92:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:35 2026 by rpki-client