This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
File:                     T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft (raw, json)
Hash identifier:          T3E0LgOPvN+frfIkU00Idpy4/8AY6/kKQaHIwR+Hln0=
Subject key identifier:   9D:A2:1C:4A:35:45:BC:2F:38:65:00:ED:77:A9:9F:BA:33:FB:15:E5
Authority key identifier: 4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48
Certificate issuer:       /CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
Certificate serial:       019C42B479A9AD06C115F0C766359FBA7DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
Manifest number:          03D0
Signing time:             Mon 09 Feb 2026 14:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:49 +0000
Files and hashes:         1: DxI_kOfaH9nvsBV0r3xzUBEXmgY.roa (hash: wU9cPOo8mwz6ydyhIKOGWW7zEmO7xyneDQny8VJv6qI=)
                          2: T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl (hash: snQv0X0u2aghRMPwLecZ12hqAS1FWUkOi4vmHMcQGkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:79:a9:ad:06:c1:15:f0:c7:66:35:9f:ba:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f401dc13e50e9cc3d42d913ea65b1554c95a548
        Validity
            Not Before: Feb  9 14:00:49 2026 GMT
            Not After : Feb 10 14:00:49 2026 GMT
        Subject: CN=9da21c4a3545bc2f386500ed77a99fba33fb15e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:8a:f2:95:43:8d:36:0f:92:a3:08:a5:e8:
                    8a:54:6b:ea:d2:2d:2c:ce:8c:95:3c:54:4e:c0:c7:
                    bb:11:e2:be:61:18:4c:d3:79:da:96:f4:29:67:4d:
                    2d:0a:86:43:13:40:8c:30:04:c5:f6:8b:2d:1f:b8:
                    7b:ea:fa:5f:5a:fd:75:cb:52:fc:7d:c2:08:b6:f7:
                    10:13:e1:77:44:a5:9c:51:78:ed:ba:5c:df:ba:d8:
                    21:34:95:dd:03:84:a1:bd:a5:52:46:58:31:07:a4:
                    5e:9c:61:c6:d8:ae:ec:ec:eb:b7:55:1f:be:49:f8:
                    42:40:09:3c:16:9b:97:9d:b9:53:01:87:cf:51:15:
                    3b:79:a0:f0:4d:4a:06:dc:41:00:88:1d:6e:1b:fd:
                    13:02:6c:5b:fb:2d:23:c0:a6:c5:06:c5:be:a7:c1:
                    fe:4e:f4:52:f3:30:b9:10:e1:52:82:33:c7:b6:ac:
                    1b:a3:bf:21:c3:9b:6e:f8:1e:fc:53:6f:cc:02:7c:
                    1e:da:89:bc:2f:d2:b2:97:b7:95:36:92:8e:8e:a3:
                    50:bc:75:fa:94:1c:4c:5a:fc:49:e4:9e:53:51:c0:
                    ca:fd:e7:97:49:09:71:31:5d:68:19:01:ce:cd:8c:
                    25:ed:58:21:49:ed:c4:3d:80:bc:03:11:0f:a9:65:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A2:1C:4A:35:45:BC:2F:38:65:00:ED:77:A9:9F:BA:33:FB:15:E5
            X509v3 Authority Key Identifier:
                keyid:4F:40:1D:C1:3E:50:E9:CC:3D:42:D9:13:EA:65:B1:55:4C:95:A5:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/96690c-d4e5-40fa-a869-3a05bb7530c6/1/T0AdwT5Q6cw9QtkT6mWxVUyVpUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5e:15:eb:7e:9d:0b:fe:43:d0:d1:c9:96:98:00:ab:b0:b6:
         4a:b2:34:00:57:f4:44:50:db:1e:66:9f:f3:77:44:17:ef:1e:
         cf:b0:b8:2c:c3:ea:d3:b9:dc:9b:ee:47:93:1f:2e:a6:8f:84:
         3a:3b:3c:f5:29:ad:03:cb:5e:36:17:cd:31:0c:85:05:2d:dc:
         73:5b:7b:87:77:c6:7d:10:66:be:b4:24:9f:30:ba:c3:75:67:
         dd:36:c6:1a:bb:6b:d1:cd:66:d3:cc:79:82:f4:c8:ff:a3:bc:
         ec:c0:2e:b7:06:f0:cc:5a:22:95:7b:9f:f1:1e:d6:fe:6d:20:
         c1:a3:ce:df:14:2d:9e:c5:80:2f:6d:e6:c7:2d:a5:12:6c:71:
         58:9b:d6:82:35:8d:ac:05:3d:db:f2:1d:c8:20:25:5f:d3:25:
         09:95:30:bf:df:84:ab:5b:20:8d:b2:93:86:9d:f7:63:e0:c6:
         e6:ac:ec:73:21:7c:1f:ed:48:b5:86:c9:76:44:75:0f:57:56:
         3f:a2:df:ca:e1:26:f4:be:9e:19:69:22:78:df:8d:87:0b:52:
         f4:2f:c8:e9:bb:31:64:16:fa:e4:b4:f6:9e:bc:b5:28:ba:56:
         98:93:4f:66:3d:44:e1:f4:18:af:82:e7:18:bb:dc:db:74:0a:
         1f:87:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:25 2026 by rpki-client