This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File:                     M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier:          wDJCOdSvn2p52gn2gtHvOr679vOkn12pSfp7ym9l3HQ=
Subject key identifier:   B2:1E:87:21:1E:78:48:E9:A0:22:14:00:06:78:97:6E:03:66:66:C8
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer:       /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial:       019C4246AF82BB9525D35699ADDBF603627E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:54 +0000
Files and hashes:         1: FL9A-Wc7z5VMCe364E-fjxzBfRE.roa (hash: ICmFI8eTAGCEVNybXrRIRxi+lptZELNrevDuYYLtLB8=)
                          2: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: xk58uBLUMD2N42CN/qRoR/nhvgRRExnel23l9t/cd1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:af:82:bb:95:25:d3:56:99:ad:db:f6:03:62:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
        Validity
            Not Before: Feb  9 12:00:54 2026 GMT
            Not After : Feb 10 12:00:54 2026 GMT
        Subject: CN=b21e87211e7848e9a02214000678976e036666c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:58:a1:a3:22:f1:44:da:27:f3:71:8c:84:
                    de:aa:39:18:72:a8:5c:9e:1e:b4:5a:11:67:26:df:
                    88:8c:a0:0f:0c:73:b2:93:1a:05:eb:d3:1e:c8:37:
                    a8:f6:8f:75:aa:1f:db:76:5e:8b:6e:44:61:6c:e0:
                    f0:63:e6:d0:de:a6:4a:99:cc:bd:6f:6b:ef:5e:b8:
                    8a:96:31:4b:a6:b7:ae:dd:04:61:f6:92:c2:58:54:
                    13:e3:59:a0:21:d9:cc:65:be:fb:7b:a3:e4:82:15:
                    3c:d8:b5:a4:e7:be:cb:78:4a:09:71:44:72:26:1c:
                    76:a4:c7:19:af:25:31:34:46:aa:11:7b:60:7c:ca:
                    c8:58:cb:8b:47:36:e0:dc:02:7e:02:41:37:32:3f:
                    ac:87:6c:0b:d8:30:55:57:d1:2c:ea:fb:37:1d:86:
                    0d:f8:2a:80:2e:8f:e9:83:c1:1e:09:97:19:6a:95:
                    9b:14:0b:b5:72:36:16:00:fa:eb:d5:0d:54:cc:4f:
                    f0:26:13:26:50:b0:b2:b5:23:0b:d6:7f:d5:fa:87:
                    33:a1:c8:49:0e:49:fc:0e:61:a3:7d:a7:ad:3c:f0:
                    65:81:98:32:ff:a9:35:57:71:82:da:a5:b9:84:c9:
                    ab:cd:c5:da:41:03:17:a5:f8:04:db:5b:5b:29:33:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1E:87:21:1E:78:48:E9:A0:22:14:00:06:78:97:6E:03:66:66:C8
            X509v3 Authority Key Identifier:
                keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5a:b5:4c:bc:6e:94:f6:9d:d0:a7:84:17:35:d2:15:88:94:
         67:a5:d7:a5:4c:55:3b:a2:81:60:a1:0e:16:a7:cb:6f:45:0e:
         77:3b:99:dd:69:30:e5:94:c6:46:b1:a4:20:8f:3e:5f:e2:ea:
         67:28:24:5d:ec:87:ef:13:97:59:c0:28:be:52:03:25:e4:da:
         1d:00:dc:f5:95:eb:db:fa:64:7d:90:d1:57:7f:36:a0:0e:78:
         38:a4:90:29:86:40:e9:05:46:b8:cd:54:a2:9c:9c:7c:ae:c4:
         94:d7:c6:4e:6b:94:de:89:32:2b:61:44:74:a8:3c:02:bd:56:
         de:ee:a3:b4:55:99:74:0a:8f:6d:b7:b9:46:5d:4c:aa:48:88:
         eb:6f:68:2d:cf:08:d5:b9:0b:f0:1f:77:32:9f:d9:18:f1:02:
         77:a6:2f:0a:88:a0:72:18:ac:3a:24:88:68:43:6e:ee:d3:a8:
         bb:be:96:1f:4e:1f:80:02:38:fd:6e:57:4a:68:47:81:bb:35:
         6c:1f:a3:65:7f:9f:fe:0b:fb:0d:32:33:39:12:c9:1d:7c:82:
         0a:fc:2f:b2:99:5e:a8:1c:da:c4:30:71:4b:56:42:bd:2a:72:
         02:a3:b3:14:35:44:f9:bf:65:16:ad:ca:bb:5a:05:c4:c8:5a:
         a9:71:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:34 2026 by rpki-client