This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File:                     CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier:          /8K2YrKOp8S3UYHZMAoCGwMXK02FQbZiT7FTpqDFv9A=
Subject key identifier:   9A:EC:CD:42:47:12:C2:24:0A:DA:C4:94:51:C8:39:33:FD:68:1E:77
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer:       /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial:       019C1C4BB9D6FEA54C7671CECC7FD5F4D7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number:          17B6
Signing time:             Mon 02 Feb 2026 03:00:50 +0000
Manifest this update:     Mon 02 Feb 2026 03:00:50 +0000
Manifest next update:     Tue 03 Feb 2026 03:00:50 +0000
Files and hashes:         1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
                          2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: hMNwYfWuLioQHfwFLfxmMZkPmvcyMyanPQjGP9rZrDk=)
                          3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4b:b9:d6:fe:a5:4c:76:71:ce:cc:7f:d5:f4:d7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
        Validity
            Not Before: Feb  2 03:00:50 2026 GMT
            Not After : Feb  3 03:00:50 2026 GMT
        Subject: CN=9aeccd424712c2240adac49451c83933fd681e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:ad:af:ea:33:69:3d:29:44:9f:da:5a:9b:
                    7a:24:6f:9b:7f:d0:de:23:c9:ba:7f:c8:bc:c3:d9:
                    67:bc:ab:91:e5:c2:f6:50:bb:86:ed:24:ce:d8:e8:
                    ca:f6:2e:3f:f3:34:45:18:cf:68:14:50:99:47:88:
                    d4:06:f7:cb:7f:e4:91:cb:f8:13:a9:89:e9:79:62:
                    e1:aa:5e:97:27:67:49:bb:73:8f:f5:8e:86:4f:be:
                    28:50:61:92:57:a3:17:a9:f5:a9:db:8b:da:e6:3a:
                    1a:d8:24:a1:50:b4:7d:83:f4:35:58:1e:d6:57:60:
                    3b:98:7c:4f:4f:f8:0c:f8:46:09:b0:cd:8c:b3:a3:
                    60:20:1b:61:5b:b6:56:7b:a0:7e:da:65:50:d0:57:
                    20:e2:75:46:24:d7:19:c2:3a:35:89:e2:b7:38:97:
                    f3:94:9c:98:78:f7:ed:84:60:89:6a:51:37:8d:01:
                    f4:1d:f9:58:af:c5:ff:a3:35:1f:96:eb:62:9e:7c:
                    6c:ef:05:11:01:9a:c6:7b:5f:91:26:01:a9:7c:a2:
                    c3:f2:8e:74:a1:87:4c:56:11:ea:a1:89:d7:04:16:
                    80:0e:e0:4c:a5:07:3d:7f:11:93:49:d9:dc:cb:1d:
                    3b:cc:90:ed:d5:e2:9e:b8:a0:77:06:dd:72:83:75:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EC:CD:42:47:12:C2:24:0A:DA:C4:94:51:C8:39:33:FD:68:1E:77
            X509v3 Authority Key Identifier:
                keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:01:a0:e3:82:f3:74:54:63:93:18:be:53:02:77:fb:d8:0a:
         bd:76:94:76:98:50:e0:fe:41:3f:0f:07:c9:0b:7a:49:3b:35:
         9e:0d:0b:f4:1d:ef:31:22:a8:f0:bf:23:8c:57:5c:4d:04:5c:
         b2:b6:3a:07:b5:9d:42:3b:1d:71:9c:21:2c:44:35:49:e3:e6:
         ed:13:5e:e4:cc:9f:a7:17:50:19:9e:85:59:b8:f7:fa:52:29:
         43:be:6e:8a:91:a2:ec:bb:9d:0a:66:76:4b:8a:26:c2:07:60:
         07:59:b4:5e:02:73:c7:0b:9c:5c:85:c1:df:03:49:f1:0a:b3:
         3e:68:07:6c:f5:85:5b:3e:97:2a:bf:9b:d3:cd:d8:23:28:91:
         00:0b:0a:46:06:84:cb:c6:69:db:92:81:9b:b1:98:d2:f2:f5:
         c0:25:9e:23:d0:91:9d:c7:35:76:e5:a1:95:5a:f1:9e:51:bd:
         f6:28:d6:19:9f:ae:0e:df:aa:d1:24:00:3b:29:3f:c1:1b:ba:
         35:40:0d:84:d4:20:1a:07:6c:80:1f:4b:e9:41:18:ba:f8:07:
         4c:9a:50:c3:17:f9:14:3d:a5:d7:ba:20:35:d1:6a:e0:13:1f:
         b0:d0:4c:99:4c:25:45:43:d2:66:fe:26:08:22:7a:bb:61:08:
         d5:82:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:28:54 2026 by rpki-client