This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File:                     0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier:          13Gu9A0Css9ap/anU2K+WBXx0iRki5UakOgw2GS5oh0=
Subject key identifier:   D4:2A:D1:5D:9A:67:7F:88:97:15:46:5B:0E:DE:A5:5F:CD:14:8B:3D
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer:       /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial:       019C4133792D7BED6E60F4960B17EE9160BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number:          0E8F
Signing time:             Mon 09 Feb 2026 07:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:18 +0000
Files and hashes:         1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: kCgKiHXhrCxwheCEVcaCFibw+cZHLmM35jbrDRfulw8=)
                          2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
                          3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:79:2d:7b:ed:6e:60:f4:96:0b:17:ee:91:60:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
        Validity
            Not Before: Feb  9 07:00:18 2026 GMT
            Not After : Feb 10 07:00:18 2026 GMT
        Subject: CN=d42ad15d9a677f889715465b0edea55fcd148b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:58:b5:4b:02:e9:2e:1f:97:c3:ff:03:71:
                    c3:2c:5b:1a:3a:a2:f7:7a:38:08:45:a1:95:1d:f2:
                    d7:c9:ed:1c:20:f8:c1:f6:5d:fa:16:1c:4f:88:ab:
                    4e:e0:0b:b7:2a:a5:08:be:49:55:b9:54:a2:2a:09:
                    ee:c1:c8:ed:78:ad:f7:0c:b8:63:83:e3:4b:0c:b8:
                    ec:75:31:7e:d3:e0:9d:73:71:a9:a8:5d:7c:cc:23:
                    36:77:33:e8:04:a5:dd:27:05:c5:3a:ef:6a:19:1a:
                    20:cc:1d:47:bb:35:56:43:f6:b1:5e:9d:20:65:7c:
                    d3:b7:5c:d5:3b:cd:42:52:b4:ad:1b:ee:d5:1f:aa:
                    20:28:5c:be:cd:0b:5d:50:db:22:d1:58:b1:ab:40:
                    4a:df:c2:00:9e:a1:4d:e1:60:f2:56:a0:07:5f:b9:
                    5e:a1:98:b7:17:3c:8e:67:4d:89:ff:48:85:1a:48:
                    f7:2c:63:1a:0d:b5:ff:94:0b:7f:fa:1a:4c:a1:2a:
                    ab:b4:ad:fb:c6:f2:e9:25:2d:cf:93:ce:8e:4b:28:
                    8c:f8:ea:1a:4f:8a:58:1c:f7:3d:58:a6:52:31:05:
                    77:b2:91:60:87:86:d5:60:82:b9:01:ed:de:2d:44:
                    2e:29:39:df:7e:ee:ff:71:9f:e1:3b:59:da:42:39:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:D1:5D:9A:67:7F:88:97:15:46:5B:0E:DE:A5:5F:CD:14:8B:3D
            X509v3 Authority Key Identifier:
                keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:d0:cc:ba:50:7d:e7:e3:38:d9:c9:eb:65:3f:62:79:2d:
         26:82:b3:0b:26:83:f0:2e:31:5e:7f:5b:50:c7:6a:6c:52:d8:
         4a:48:72:30:9c:c8:e4:31:af:77:04:59:36:f6:fc:5f:d5:fd:
         00:f8:29:9e:7a:de:00:88:0e:66:f7:f2:8d:85:1b:47:a7:4f:
         9a:d2:13:30:34:d5:28:dd:ab:2a:98:c2:06:42:26:0d:c7:c9:
         f5:4c:37:e4:c8:f7:47:1d:4a:1d:76:c1:db:8e:8b:7f:9f:69:
         00:78:09:8d:33:ca:6a:ed:ca:55:80:c3:b2:0e:a4:6d:08:aa:
         ae:47:ec:32:25:5c:19:a2:bb:83:64:42:4d:64:96:8e:e4:9c:
         aa:65:b6:25:ef:77:e8:e4:d3:2a:6d:50:84:68:e2:9b:03:b1:
         2b:49:ef:72:d0:dc:46:2d:3a:95:ea:eb:a4:35:9c:5c:bc:b4:
         ad:08:6a:c1:d7:0a:c8:be:ce:cd:0d:71:20:c8:bd:f2:ca:85:
         bc:5e:75:41:0b:7a:2a:15:03:05:2e:89:d3:74:56:5e:62:75:
         b3:3c:77:21:7c:f9:11:3d:b4:2d:9d:1b:01:75:84:33:be:b2:
         fb:b6:96:46:02:0a:b3:be:ad:e9:f8:66:68:05:7b:72:7a:9e:
         09:8d:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:08 2026 by rpki-client