This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File:                     d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier:          M2Viul4LY4UObQJ+P8jlv5VNGtNDAyl1e9tXEKgFG8g=
Subject key identifier:   82:2F:CD:63:1E:64:B6:B2:47:3B:05:B2:2B:60:5C:2C:FC:F9:BC:0E
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer:       /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial:       019C424670A49CCD34CC57A454523E86C569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number:          0F35
Signing time:             Mon 09 Feb 2026 12:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:38 +0000
Files and hashes:         1: 3lFiJAi9xcyPhHbde0XIskVsgIs.roa (hash: qs21NuisUl0QxWCvF+rTCWm7FC1OO83XG3sDyW4a0mM=)
                          2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: cpNsRf7bVk0q+n+FDmCjseySJJHS8SKZJgOQXcEQXgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:70:a4:9c:cd:34:cc:57:a4:54:52:3e:86:c5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
        Validity
            Not Before: Feb  9 12:00:38 2026 GMT
            Not After : Feb 10 12:00:38 2026 GMT
        Subject: CN=822fcd631e64b6b2473b05b22b605c2cfcf9bc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:a5:c1:ba:f6:e3:d9:39:88:f1:67:54:5c:
                    7f:d4:92:d3:2b:83:a3:19:67:81:f1:a2:b9:fe:9a:
                    07:c2:7e:af:6b:8c:75:9f:6a:f9:66:56:1d:bd:15:
                    7e:82:ad:86:ce:04:0d:e3:ac:2a:d0:3c:53:b6:bc:
                    89:1f:65:37:2a:71:e3:0d:bf:70:c1:49:83:8d:53:
                    7f:25:7e:7c:be:8f:96:e4:fa:aa:8c:6a:41:e5:52:
                    78:1d:87:72:96:99:70:9b:54:c3:70:e0:cb:8a:c1:
                    4a:1b:73:cd:14:b2:f7:a6:77:01:de:11:5a:18:98:
                    6e:35:93:86:7f:03:3c:22:63:51:cf:63:e9:ef:f5:
                    88:e7:a0:4e:d3:17:c1:bb:00:7b:70:08:a0:cb:45:
                    b3:64:5c:14:74:3f:e3:9a:88:68:37:e7:32:47:80:
                    23:c1:ea:69:b6:8c:59:59:1a:87:06:00:18:92:5f:
                    ff:08:23:e8:62:3d:58:79:d1:2f:54:33:23:e3:40:
                    83:f0:04:70:8a:9f:b3:e3:1b:0b:98:88:4c:e6:80:
                    63:62:fd:b1:56:99:4f:9d:39:bf:7a:3a:fe:19:fb:
                    50:d7:eb:d8:4d:2e:fa:2c:b1:da:5e:d3:b8:0b:3a:
                    8d:49:72:03:c8:66:55:0c:ee:b6:9e:d0:20:d9:72:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:CD:63:1E:64:B6:B2:47:3B:05:B2:2B:60:5C:2C:FC:F9:BC:0E
            X509v3 Authority Key Identifier:
                keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:82:c9:97:e9:53:97:e3:86:e7:e9:a9:62:2b:0d:fd:ed:
         8c:27:86:3c:64:a5:f8:4e:bd:68:c3:8a:18:2a:31:88:e6:f2:
         07:ac:c4:d8:f3:d6:c0:07:2a:a2:ea:04:2c:27:23:30:21:77:
         13:dd:5e:4d:34:89:b7:b1:bb:22:20:a1:c4:90:21:3b:4d:ec:
         a1:26:bc:b0:53:ff:32:ac:d7:67:f0:14:09:59:96:0a:48:60:
         29:e9:c4:d6:e9:1a:b9:32:38:a7:f4:eb:ec:8a:28:58:3c:3d:
         46:d9:ab:2a:65:fb:b6:14:61:f5:37:ab:1e:34:a1:e2:dc:11:
         80:74:ea:18:40:37:0d:07:db:08:63:d0:03:be:d6:91:26:e6:
         35:6e:a6:50:94:74:dd:45:79:f6:65:96:30:02:e1:cc:7b:e7:
         02:77:88:cd:d5:7c:39:9e:90:8a:2d:4f:f2:ba:3a:73:fe:ee:
         cf:79:37:2d:b0:f9:ef:89:ff:23:0c:6d:24:26:c3:65:e6:3d:
         d6:41:a5:a5:33:e3:46:ad:14:61:e3:21:79:0d:12:bc:c0:a8:
         47:bd:b0:45:46:4a:7e:83:a1:b8:a3:fe:fe:b8:6e:52:4c:df:
         21:fb:1b:d4:8e:a3:9e:0c:58:83:ac:77:b5:83:0b:08:3e:05:
         b6:d6:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:57 2026 by rpki-client