This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File:                     2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier:          5ZyKTkKRr0GjCTI5JakyZbLvKUb4yv+1ug46hx9SOMc=
Subject key identifier:   C9:07:58:55:11:B2:C8:11:72:73:A8:2E:E7:E1:06:70:FE:68:09:05
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer:       /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial:       019C43FE87BEF86C78C270C870FE4F3B700E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number:          16D7
Signing time:             Mon 09 Feb 2026 20:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:20 +0000
Files and hashes:         1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: e35qJHzYOR18JQPH1lu/9IDIN0a+Kdivnn1y2w5J3HU=)
                          2: M_wYZNoIggWkJnIM6XvfidHolKY.roa (hash: EFTDpTat3ODzn/1H+OY3BBqxfsDk+P79i5ALHFGhTpo=)
                          3: bQp6UIfbTzW5AcQXknJHvnkzhQg.roa (hash: hPsgca8+uCeyeGUqGhR5eAAml/xZhMTXccnFrzec2lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:87:be:f8:6c:78:c2:70:c8:70:fe:4f:3b:70:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
        Validity
            Not Before: Feb  9 20:01:20 2026 GMT
            Not After : Feb 10 20:01:20 2026 GMT
        Subject: CN=c907585511b2c8117273a82ee7e10670fe680905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:9b:34:54:61:95:c0:0f:99:d0:fd:2f:32:
                    23:91:cf:dd:53:9a:00:51:31:e6:5f:ed:85:b8:77:
                    64:05:ba:90:bd:ae:f2:70:5c:4a:62:a4:6a:10:bf:
                    d2:2e:55:a3:15:84:e6:e1:c4:68:c2:4f:4a:c7:8a:
                    2d:0b:5e:ae:f3:70:03:d3:13:85:10:d1:e8:10:b6:
                    e9:a7:ff:9c:86:23:c6:e7:7a:40:91:f1:20:f5:c4:
                    b4:68:b3:89:9f:26:bc:3c:bc:a7:59:0c:3e:12:0f:
                    47:aa:25:fa:d5:4f:00:dc:b3:71:07:c6:3a:2c:2a:
                    e3:2e:bd:f7:a9:30:d2:d0:d0:5b:35:42:28:30:33:
                    1d:14:08:bf:db:98:16:29:00:78:f4:56:a8:b9:1e:
                    21:18:ce:55:9c:b7:8d:be:3c:a2:14:9e:5f:68:37:
                    32:b9:96:ef:6b:1f:f5:8d:ab:1a:8e:d0:61:1c:04:
                    ba:a8:c9:b2:9e:48:5b:0f:e0:2a:35:0e:7b:32:2c:
                    de:bd:0f:b6:5f:4c:df:15:c6:29:d6:ee:ab:54:ef:
                    2f:9a:bf:3d:3a:47:52:8f:3b:85:31:10:3d:eb:50:
                    1e:10:5c:a8:4d:ed:d5:d6:09:79:b8:21:10:6b:97:
                    7c:07:d4:2a:4f:59:63:26:4b:b6:82:4b:b2:b6:79:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:58:55:11:B2:C8:11:72:73:A8:2E:E7:E1:06:70:FE:68:09:05
            X509v3 Authority Key Identifier:
                keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:5f:e2:dd:39:5f:8e:99:d9:f4:d1:67:df:8a:35:f6:5b:
         32:a5:86:e1:85:9d:49:13:e9:da:fa:5d:3e:a4:0a:0a:27:92:
         ed:1a:5e:e5:1a:da:35:31:4f:b7:13:39:27:2f:45:4d:6a:ca:
         ed:f5:3c:44:04:7e:94:c2:3f:d4:68:85:cc:29:65:31:d1:df:
         02:8d:7d:27:f9:9b:38:79:b2:98:f3:92:12:43:88:27:d9:0b:
         d3:5d:9d:14:3e:70:73:d4:1a:1c:f0:8c:a0:3d:a6:04:b3:fc:
         6b:37:22:3f:93:9a:d5:f7:99:f2:d0:13:10:21:56:70:22:b4:
         98:44:34:9b:7e:bc:95:f5:1f:51:ba:e5:60:a4:84:dd:41:ee:
         22:7c:25:28:37:ad:a9:47:00:6a:77:c2:99:03:f2:46:0f:4e:
         d1:0e:31:5b:81:2c:45:8d:15:e1:19:68:2e:e4:b8:b5:39:69:
         36:08:77:04:7e:40:63:ea:fb:47:05:f4:10:de:af:ed:79:57:
         7e:99:72:32:a7:b7:af:a0:38:47:8d:52:5a:09:fa:31:92:53:
         0e:6b:bb:89:4c:c8:67:6b:81:a7:19:e2:ad:43:85:0d:16:a4:
         5b:c5:fb:f7:fa:97:b4:d1:d0:14:49:73:fe:8b:68:2c:87:09:
         9c:03:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:08 2026 by rpki-client