This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File:                     2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier:          EBcmWPyTt7/5OU02/zDJQU8FIGru2g9hgh1PZwa2sac=
Subject key identifier:   5C:12:B0:C4:55:16:7F:86:B3:B4:2B:3A:DD:C8:10:0F:0A:A7:C3:59
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer:       /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial:       019C424623684C43B9A4C6EC9D94F9845B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: uhb4adPzdyLROglM42ziq7KKzGyVSZqTNsr2fAoIF8s=)
                          2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
                          3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:23:68:4c:43:b9:a4:c6:ec:9d:94:f9:84:5b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=5c12b0c455167f86b3b42b3addc8100f0aa7c359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:3c:85:39:75:d6:e3:2b:39:52:a4:c2:90:
                    dd:03:34:e7:58:9d:d7:46:28:01:3d:11:96:a0:6a:
                    ea:3d:92:92:9e:cf:e1:f3:37:4c:3f:ee:dd:ad:33:
                    25:e7:24:07:8d:00:19:1f:eb:5d:e5:f4:25:9f:40:
                    9e:0b:b7:71:de:96:7d:3b:e9:2d:81:96:04:7d:73:
                    a9:ad:94:c8:9b:9c:ef:df:b0:23:e2:c6:94:de:58:
                    41:37:28:a9:96:f9:85:ba:ac:8c:a8:4f:de:3e:1a:
                    89:9b:bc:d8:3b:13:fd:3c:8b:e6:d9:bb:9e:f1:af:
                    a1:b4:77:70:51:a8:ae:9e:4f:34:b0:63:26:7d:e8:
                    e8:8f:73:43:87:b9:2f:2f:66:b6:c7:68:d0:61:69:
                    de:ef:e3:15:a3:ff:ef:ba:ec:c1:a6:00:54:4f:3e:
                    e7:d6:6d:51:d1:37:47:63:a4:71:5f:87:a1:c7:0c:
                    30:c9:98:c2:21:1d:e1:bb:0d:13:fd:45:f5:7e:8b:
                    12:81:d5:76:5f:0d:46:7e:2c:ca:48:58:ca:05:36:
                    b7:45:78:d0:43:e2:6f:8b:3a:7c:8f:20:27:01:2c:
                    84:ad:02:76:48:81:44:7a:04:4c:e1:2f:4f:90:14:
                    ae:0d:d8:96:8a:c8:b1:ed:4e:77:8d:7d:42:5c:6e:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:B0:C4:55:16:7F:86:B3:B4:2B:3A:DD:C8:10:0F:0A:A7:C3:59
            X509v3 Authority Key Identifier:
                keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:df:07:71:ef:d2:e0:57:8f:2e:34:8f:f1:84:f1:26:bc:
         b0:4f:c2:46:0a:07:1d:73:ef:6a:57:ba:7b:a9:06:5d:ff:ce:
         66:be:69:32:b3:6e:a1:ad:97:67:ff:7f:01:25:d2:13:19:58:
         40:2f:85:17:50:02:08:e5:e9:c7:1c:e5:09:d5:82:f5:57:2b:
         8b:55:a0:73:20:16:24:50:86:9c:a6:81:97:22:9a:ba:1a:da:
         67:f7:c2:fc:35:e9:d1:76:b9:86:c2:4c:02:45:2e:f9:49:87:
         c9:17:e8:61:99:fc:80:20:ea:8d:ac:b8:b7:2a:00:7e:f6:60:
         1e:67:95:6a:ff:39:8a:3a:ba:4a:ef:be:d2:8b:1f:34:a9:42:
         c9:bd:2b:75:54:cb:59:de:94:a9:9e:60:65:39:0f:c2:8f:d6:
         9c:35:90:cd:b8:6b:7d:1d:8b:66:01:44:09:94:72:35:8e:7b:
         09:10:bc:18:b2:bb:e7:d5:4a:ea:64:82:62:e0:ad:5c:02:88:
         f9:f0:9c:83:0c:5d:93:c2:2a:08:40:21:9f:06:1d:c1:fc:34:
         5d:1d:b4:88:ef:50:cd:98:4c:dc:0a:7f:85:a2:e3:32:3f:7f:
         bf:e0:bd:b1:79:4d:13:fc:ab:e1:d8:62:d2:ee:47:7e:0d:65:
         96:f5:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:35 2026 by rpki-client