This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          KSItFiKf6lPja1Fyepwsfh1Xf/dvcHBUk33V7cljDFY=
Subject key identifier:   4D:EA:B8:3C:CE:C6:6C:62:2F:A4:0F:5B:E6:59:98:DE:F7:25:AC:1B
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       019C438FFC5B03AEB8F439C0EA3B649BF5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          066C
Signing time:             Mon 09 Feb 2026 18:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:35 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: hOj4hJknaZcq3xcQ4UBuYExQDrGgmC5wXs/QbvfMk/Q=)
                          2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:fc:5b:03:ae:b8:f4:39:c0:ea:3b:64:9b:f5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Feb  9 18:00:35 2026 GMT
            Not After : Feb 10 18:00:35 2026 GMT
        Subject: CN=4deab83ccec66c622fa40f5be65998def725ac1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:a5:02:c7:16:e1:28:52:da:7e:8e:a8:6b:
                    9e:5e:f7:71:45:64:5d:65:18:d1:c1:49:f7:8b:a8:
                    89:13:bf:1c:ce:9d:5e:02:7a:10:0b:b2:6e:7c:08:
                    09:01:77:ca:82:b6:59:1a:d8:93:a7:c6:40:02:f1:
                    a6:69:ae:38:b3:cb:c3:37:3e:22:81:2d:14:c2:be:
                    f1:bf:33:34:13:f5:0c:92:13:33:70:38:67:c3:06:
                    05:da:fc:be:28:52:5a:ea:df:c5:ab:ef:e7:5c:7c:
                    c9:0e:fc:fc:93:43:6c:fc:f7:1e:74:cb:06:33:ab:
                    e5:80:1d:e7:ab:75:61:ab:3b:60:8a:b0:32:03:f9:
                    f7:e7:3a:6c:b4:fa:19:97:97:44:aa:2e:10:1f:96:
                    bd:96:cd:69:93:52:72:2a:8c:be:e8:77:6e:ab:82:
                    61:10:7f:14:c1:21:3c:29:cb:d1:66:8f:c5:cd:ec:
                    3a:ac:4f:a4:dd:82:84:c3:cd:5d:0f:bb:16:4b:59:
                    d7:b7:29:ab:32:25:5c:9f:3e:dc:f7:f0:2b:79:26:
                    bb:40:70:9c:cb:bf:5f:d8:0d:e8:35:f0:6a:ae:16:
                    0a:60:e1:bf:9c:24:ab:70:54:fa:fc:35:69:f2:d8:
                    3e:fc:b7:1d:75:a8:18:a8:93:cb:48:10:60:49:85:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EA:B8:3C:CE:C6:6C:62:2F:A4:0F:5B:E6:59:98:DE:F7:25:AC:1B
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:84:72:45:1d:24:68:ce:a9:ac:3e:93:3e:d2:39:a5:c2:
         8f:2b:85:e7:38:f9:33:4f:13:24:b6:ee:17:d2:4f:52:21:f3:
         47:cf:02:25:20:d9:6f:d6:c2:4a:cc:35:60:a7:78:c6:b8:e0:
         3c:0f:42:83:fe:8f:bd:b7:34:98:d7:e7:44:e0:3b:ef:7c:ec:
         c6:97:1b:04:64:95:f0:03:49:98:a9:42:6e:a8:bc:0e:81:a1:
         73:2b:a1:3f:88:62:98:fe:f9:56:21:04:dc:56:5d:cf:4f:bf:
         2c:55:42:bc:79:a2:da:f3:0c:d9:61:de:b7:5e:6a:7e:db:22:
         85:59:35:f8:07:7f:44:f3:a1:78:b6:e0:89:0f:53:dc:d5:0e:
         50:04:1a:e7:a9:c2:ff:ab:f2:71:2b:a5:8f:cd:69:39:2e:a0:
         8f:d7:b4:d3:99:1d:b3:a4:73:18:c5:87:77:67:96:cb:76:6f:
         1b:30:34:6e:80:5a:1e:58:2c:65:65:fb:41:a2:da:0a:53:39:
         17:f0:5d:29:7a:98:ad:15:15:3f:73:33:eb:22:0a:6a:a5:cd:
         d0:cb:5b:5b:bd:db:b2:7e:4b:2c:fc:44:8f:b5:4a:87:99:0b:
         f5:22:aa:f2:7d:aa:2a:10:78:24:00:3a:65:4c:33:5d:23:4e:
         5f:a5:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:00 2026 by rpki-client