This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          9LH8/oTF725ra3zN6Ku0cNMIyvh1Y+dOuJPW1yRUCQ8=
Subject key identifier:   72:EF:80:D4:A2:09:6C:BB:77:CF:AF:92:F9:69:C5:61:84:61:F0:B9
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       019C43596F1201CB95321256C28DF74F9097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0E16
Signing time:             Mon 09 Feb 2026 17:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 17:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 17:01:00 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: WYftOHzBWbGgDSTwjdg4WcXMUphcYCH8UlepaUwnu+w=)
                          2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:6f:12:01:cb:95:32:12:56:c2:8d:f7:4f:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Feb  9 17:01:00 2026 GMT
            Not After : Feb 10 17:01:00 2026 GMT
        Subject: CN=72ef80d4a2096cbb77cfaf92f969c5618461f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:24:d8:b3:81:b4:08:20:70:90:a5:f7:d5:
                    98:cd:9d:da:d7:de:35:f5:6a:b9:9a:f1:db:ba:77:
                    38:39:85:32:6a:ae:4c:7b:1f:89:06:be:c1:fb:9f:
                    c8:20:4a:d2:f2:ba:77:06:80:a9:de:9c:a8:90:d9:
                    47:51:9b:78:16:68:d1:55:d6:45:79:c1:f3:56:60:
                    4a:5d:15:0a:2b:e5:f6:76:b2:b1:68:23:96:1a:80:
                    4c:3f:2a:ed:96:fe:db:59:d3:b3:3f:34:33:38:13:
                    8d:4e:ec:c3:3f:de:55:01:bb:10:c3:58:13:de:82:
                    3e:3c:9b:4c:4f:e8:29:93:60:c2:73:58:c6:15:63:
                    38:a3:76:ee:b4:fc:e3:34:07:68:56:f2:26:80:9f:
                    20:60:6d:f0:45:71:64:00:23:07:a3:b7:77:ee:1b:
                    75:fe:33:c7:04:90:da:d4:01:af:4c:9a:16:36:fd:
                    b7:58:23:4d:32:70:48:f5:28:8a:43:13:09:6f:d4:
                    50:e5:bc:e9:fb:0c:b4:5c:34:a9:60:46:79:c7:9b:
                    a0:71:5a:18:a7:f1:b9:60:73:2f:20:f4:52:e2:84:
                    80:e8:ac:30:e7:36:c6:29:96:6e:ac:60:60:73:23:
                    c7:70:86:8b:c4:9a:3c:7a:d1:bc:ee:c7:9b:0c:14:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EF:80:D4:A2:09:6C:BB:77:CF:AF:92:F9:69:C5:61:84:61:F0:B9
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7c:7c:34:d6:2f:01:c6:14:0c:9e:90:ee:0e:d0:41:6a:98:
         1e:06:23:c1:89:88:c3:41:fb:3f:8d:01:6c:3c:7f:0f:ce:aa:
         3a:b1:10:0e:88:a4:92:a9:e0:92:f6:61:f8:a1:03:e3:41:72:
         0a:23:23:4e:61:e9:0e:f1:9c:87:f1:98:a4:19:9f:76:a6:3f:
         9c:52:69:a8:62:a9:a2:a8:f2:0d:b7:99:51:19:d9:54:92:09:
         7e:49:8e:6a:46:69:67:b1:99:4c:45:ae:fa:87:cb:14:73:9b:
         1e:52:1b:c0:28:8a:90:be:a9:fd:72:99:6d:41:d4:6f:b5:63:
         bb:1c:f5:6b:e8:7f:8f:e6:c1:f2:dc:41:48:8f:44:9b:34:74:
         95:ef:4e:32:df:d7:bb:a3:6d:b0:a8:b9:17:8b:56:84:7e:1a:
         16:16:1c:2b:89:f5:61:55:e6:1c:ba:ff:0f:cf:f4:9a:25:45:
         b4:ce:ea:cb:fb:a4:d7:04:eb:47:e7:4a:35:47:38:ff:b5:b8:
         6a:6c:a7:a3:88:51:68:a6:6f:e7:60:c2:20:e8:93:b4:90:f9:
         34:d8:bc:19:a5:c2:65:47:74:8f:1c:44:cf:3e:e6:99:8c:c1:
         e4:67:1c:b9:40:13:22:42:8d:e8:ef:e1:4a:5e:8d:27:ab:7b:
         a1:89:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:53 2026 by rpki-client