This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          zqTxy24ajXyby8KqaLprE6gqDY9dFnDZBAgw2e/sjUY=
Subject key identifier:   95:A9:60:8A:DF:11:97:BD:56:6B:22:1A:F3:5E:01:D5:94:83:16:8D
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       019C45477B924CD3CE62BA99A326D85DFB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          071B
Signing time:             Tue 10 Feb 2026 02:00:38 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:38 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:38 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: bao21ZSw75xpPazCemEwX8hbDWIVYDtX2om7Yf1w0rw=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:7b:92:4c:d3:ce:62:ba:99:a3:26:d8:5d:fb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Feb 10 02:00:38 2026 GMT
            Not After : Feb 11 02:00:38 2026 GMT
        Subject: CN=95a9608adf1197bd566b221af35e01d59483168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:85:c4:d4:9b:e5:1c:bf:5f:ee:ef:74:09:
                    c5:6a:14:84:87:cb:4c:8f:56:53:99:30:2a:61:19:
                    6b:48:02:59:6c:72:e6:70:4d:66:0e:c3:3a:b7:2c:
                    4d:e3:f4:19:33:51:51:09:c2:69:70:24:dd:b6:13:
                    92:3c:02:d4:f9:41:06:2b:cc:f2:ad:39:01:da:75:
                    03:9b:9e:86:a5:37:c7:fd:be:ba:97:8c:8a:d0:7c:
                    31:4d:05:6d:27:47:41:ec:6e:53:ee:9d:5d:fa:c6:
                    5b:72:aa:18:ce:0d:9e:fe:aa:e0:36:c3:93:8a:26:
                    bc:d0:f9:4c:d5:a1:f3:44:79:99:65:cb:61:4e:67:
                    2a:cd:b4:5f:e6:5d:5c:10:5a:e2:b7:eb:63:0e:ba:
                    e1:4d:e0:13:9a:3b:aa:67:db:c9:69:d6:62:30:97:
                    98:a8:3a:cc:45:1d:e3:b9:41:bf:10:50:5c:0e:6d:
                    be:0a:8f:bf:a4:c8:89:36:5f:31:be:63:81:35:4c:
                    d6:d3:39:16:76:00:40:84:dd:bd:ac:3f:08:6c:03:
                    4a:90:a5:7c:be:ea:94:33:0c:a8:e8:df:d4:e0:f7:
                    49:f7:f2:d6:9a:2d:b9:af:12:06:8f:62:13:7e:e2:
                    4c:c4:0d:32:c0:15:4b:bd:b0:15:14:b3:06:5e:d7:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A9:60:8A:DF:11:97:BD:56:6B:22:1A:F3:5E:01:D5:94:83:16:8D
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:db:65:8c:79:4e:78:e4:92:da:8c:bc:30:9e:e6:89:43:28:
         19:26:0a:0a:c9:46:32:7e:10:a4:95:45:8c:3e:99:f4:72:50:
         fb:3f:ff:03:fe:40:18:a8:40:5b:1b:0a:a6:71:15:76:13:e2:
         09:0e:fe:2e:47:e8:b4:d3:49:3e:79:5e:3c:63:84:99:ea:71:
         56:70:c3:80:30:bd:89:b9:85:dd:88:c8:ce:7e:76:66:c2:c6:
         b3:e5:d6:3f:cd:14:84:67:b2:4d:8d:a5:94:9f:83:cb:55:58:
         b1:b3:93:09:e1:62:86:e1:e0:8c:38:6c:0f:ad:a9:76:da:53:
         87:07:e5:63:b7:bb:ce:2d:66:1c:d4:a7:87:4a:11:eb:65:9b:
         1d:8e:72:6f:f3:48:16:f4:af:68:b3:48:b6:cb:a3:34:a2:c3:
         13:b7:14:83:06:14:f8:02:48:01:99:15:fd:58:a3:07:7f:51:
         85:0c:0a:ab:5c:68:70:13:64:5d:95:2a:83:eb:29:e9:8b:7a:
         78:6a:09:8c:9e:82:74:c7:af:60:36:ff:6d:e2:5a:18:dd:85:
         64:e5:68:9e:27:9e:55:81:f0:a1:a9:2a:19:3a:98:c7:ef:2c:
         f1:6d:83:2b:ec:40:59:62:33:8a:9c:1e:36:92:d7:14:a2:86:
         2c:80:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:50 2026 by rpki-client