This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
File:                     cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json)
Hash identifier:          G814PumtDYi74z516QZDmD/H0r6Vnr8AYb/G82r3Lx4=
Subject key identifier:   4E:25:0B:2C:07:E4:03:21:AF:51:8B:D2:9A:E5:44:98:AE:0B:00:C7
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Certificate issuer:       /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial:       019C427D062E2AD65A6E0DCA70257363A2CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
Manifest number:          0C50
Signing time:             Mon 09 Feb 2026 13:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:15 +0000
Files and hashes:         1: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: CvvrvHeoCsi1C0snW+1ogD5Y0BK/QKQPbIsMpR6YC3E=)
                          2: paBTm9XJ_5OjOsmofXolfSOu8tI.roa (hash: 0BVMqZx9bh/K7mlP8B+uwanGbjjmcCmxI2TQpqnc/3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:06:2e:2a:d6:5a:6e:0d:ca:70:25:73:63:a2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
        Validity
            Not Before: Feb  9 13:00:15 2026 GMT
            Not After : Feb 10 13:00:15 2026 GMT
        Subject: CN=4e250b2c07e40321af518bd29ae54498ae0b00c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:df:08:d8:bf:d5:43:51:6a:ad:c9:58:a6:
                    8d:d9:90:6c:8e:6e:7b:84:fe:25:98:0d:3a:ae:4f:
                    a7:62:ae:93:af:ed:a1:1d:b8:87:ad:d3:dd:64:7f:
                    cf:04:a5:8e:84:aa:fc:bf:ec:7a:95:e2:d0:31:2e:
                    e0:01:cf:d5:9e:92:09:65:d1:0e:e0:cb:05:60:8c:
                    51:d3:29:04:4c:09:17:fa:fb:ea:a7:79:67:17:83:
                    3e:4f:60:ea:cc:1f:88:b9:5f:cb:89:a0:df:79:04:
                    d0:8d:16:f4:32:f3:91:de:73:08:3e:bb:5e:c8:91:
                    4e:9d:6a:f9:c5:ad:c5:9a:a2:df:8f:32:2b:95:2b:
                    eb:6d:ff:9c:06:40:68:7f:ee:fa:ae:26:10:8b:d7:
                    9f:63:7a:aa:e6:4c:69:41:d3:48:5e:7f:62:33:d4:
                    88:e6:a7:70:75:85:bd:a4:4a:a9:37:18:c7:a0:f9:
                    94:a7:79:c9:e7:d2:51:3f:ff:bf:16:1d:01:ba:0d:
                    28:76:5b:2e:47:f6:3e:d5:49:51:08:c9:a5:b7:e8:
                    6d:f2:f5:2f:e9:38:94:1c:9d:88:1e:3a:e8:ba:f7:
                    65:67:88:83:96:da:8b:b3:ea:ec:7a:2a:1c:89:b2:
                    62:4a:48:19:2c:49:d8:ac:9e:70:68:51:c0:dd:7e:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:25:0B:2C:07:E4:03:21:AF:51:8B:D2:9A:E5:44:98:AE:0B:00:C7
            X509v3 Authority Key Identifier:
                keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:83:c3:a4:02:f1:7a:ef:b6:4b:1a:39:d2:25:b4:b6:ae:
         89:e1:43:19:38:16:17:c6:aa:ae:88:ea:ee:5a:49:29:55:23:
         06:4b:c3:e5:f1:c6:dc:ec:79:27:91:cb:2b:84:88:f9:be:58:
         65:bc:1b:c5:cb:10:cd:60:a4:c0:f0:f1:e3:1b:f2:35:9c:4b:
         c6:f7:14:af:cd:6b:7b:2e:7b:52:7f:f3:b4:88:37:49:1f:a2:
         ec:a9:37:0c:66:f4:e1:d9:1d:0e:18:8d:53:38:22:7f:f3:69:
         ef:66:57:78:4d:69:28:48:df:9c:63:ec:4d:6d:71:bc:db:31:
         b7:69:07:e3:0d:02:56:91:d2:cc:7f:05:92:b5:8f:2c:1b:0d:
         0c:8b:60:15:c3:22:9e:25:03:27:a1:46:0b:b0:22:84:87:22:
         bf:28:73:be:53:0a:77:1b:59:17:42:7e:2d:1a:1d:7b:c0:b8:
         b8:7e:6d:77:05:44:84:69:bf:24:cc:fe:39:d4:51:ec:04:e1:
         7c:90:69:f2:0f:80:48:c1:ba:7f:62:52:d7:e8:21:e3:01:70:
         65:09:20:02:9b:2a:e3:4f:ff:c1:9e:73:f9:9e:22:39:b7:7f:
         66:1e:af:0b:60:55:47:31:b5:20:ae:d1:8d:3e:17:3b:ca:f4:
         15:5d:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:40 2026 by rpki-client