This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File:                     76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier:          J0CXiqVVrhjgBit9C3yVEl4DJo3mNuhqFr1k275XZL8=
Subject key identifier:   AC:16:E6:12:B5:05:89:0F:0E:12:09:F4:73:F2:94:6B:4D:0B:87:94
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer:       /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial:       019C2C2CB08A051B431ED4CA9DEE4F9A5223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number:          0240
Signing time:             Thu 05 Feb 2026 05:00:52 +0000
Manifest this update:     Thu 05 Feb 2026 05:00:52 +0000
Manifest next update:     Fri 06 Feb 2026 05:00:52 +0000
Files and hashes:         1: 3Q7uKZsMpZsukO9sW6TdxaymeCQ.roa (hash: YaBk8NWI//Ry/v2mJRSlpe9+IsnRQkr7eOxzzcKCjKo=)
                          2: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: W8kmVLrBiafZXTKjw594xrL+99Xj02n/2PDOHJgUj2o=)
                          3: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
                          4: TdySsF6nSwr-dhc2le7MQt8mmfo.roa (hash: Hl3h9XRsY3f/YfdL9fN3vN5Yw0EWEoNUgj337vGvxO8=)
                          5: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
                          6: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
                          7: faxz85ncSANyoCyoA0iZzbQT2pA.roa (hash: c9pfeG45GPdyOjVw3Hfm0xwfiU1wCm+0zXavVbdZ1pg=)
                          8: mlJz0jAjXSbwKoBR591-5IstuJM.roa (hash: 2XZpPqD+ykYjyZg4D1aiqzw/ZhMry8rNdzsEz73FgnY=)
                          9: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 01:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:2c:b0:8a:05:1b:43:1e:d4:ca:9d:ee:4f:9a:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
        Validity
            Not Before: Feb  5 05:00:52 2026 GMT
            Not After : Feb  6 05:00:52 2026 GMT
        Subject: CN=ac16e612b505890f0e1209f473f2946b4d0b8794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:0e:82:f3:92:1e:31:bc:ef:c9:6d:e2:43:
                    54:59:87:f0:ac:cc:31:b2:cb:38:d8:96:cf:db:32:
                    cb:3e:b9:9c:24:b0:5a:42:f7:25:81:70:65:0c:62:
                    e9:27:51:ec:c1:fb:4d:f3:f4:0b:01:72:73:fb:bb:
                    95:8d:61:28:16:b3:ee:ee:58:ad:d5:5d:31:1e:1d:
                    1e:8f:cc:d6:a1:21:56:5c:f0:fc:72:47:ec:43:33:
                    cb:11:87:4b:94:35:31:f7:16:89:b0:e6:85:6d:54:
                    a6:cd:c2:13:76:b6:af:42:89:5e:c0:ce:d1:c8:d3:
                    00:f1:fb:19:da:e8:95:55:e9:9a:92:fe:50:2c:c6:
                    9e:53:63:40:e2:ae:06:7e:9b:9e:5e:bc:53:c1:07:
                    a4:c9:72:fe:dd:26:19:84:c5:26:5a:28:11:ea:a2:
                    26:58:13:a7:cd:05:35:47:cf:46:01:65:d6:ae:23:
                    7c:6d:44:41:20:a9:d7:3e:e0:6a:28:a6:be:9b:bc:
                    54:91:a5:16:27:f0:4f:e2:59:31:d6:e8:b5:ff:1a:
                    f5:bb:d5:f6:04:e3:0a:23:ee:31:59:10:74:1e:09:
                    b2:c6:f6:f7:da:10:23:e1:e4:92:30:be:3a:80:75:
                    b5:bd:f7:44:67:5f:a7:eb:89:6d:3a:bf:05:19:35:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:E6:12:B5:05:89:0F:0E:12:09:F4:73:F2:94:6B:4D:0B:87:94
            X509v3 Authority Key Identifier:
                keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:e1:74:e6:ce:28:5f:2f:17:bd:25:96:85:91:ec:89:a6:
         f4:8f:75:d5:b7:c6:7f:69:99:37:aa:fa:85:ee:a9:47:50:6b:
         27:f1:1c:15:6b:d0:06:67:f2:b8:b0:c2:03:a3:66:cc:87:46:
         7f:de:59:ce:9d:bd:97:18:1b:ae:4f:9a:c6:9c:0e:86:75:18:
         33:ec:35:0d:a9:09:2f:2c:a9:df:1b:d1:ba:66:ec:71:d9:f8:
         6f:11:5f:6d:04:70:d3:fc:f2:bc:b2:5d:3c:44:22:ed:3c:96:
         17:e6:4c:e2:8f:72:e0:f6:9f:ef:ad:af:7a:69:64:f6:58:70:
         51:fa:65:b2:b6:34:7b:fd:c5:c3:ef:be:55:2e:83:22:f9:c3:
         bb:2b:00:56:e6:9e:1c:16:91:4a:24:8f:39:fd:64:79:93:74:
         c0:cb:2a:73:4c:b6:9d:55:5a:ad:cc:74:69:a7:0e:5b:94:4e:
         e1:58:ca:99:b4:06:e3:61:0b:43:57:23:d6:07:85:75:3b:03:
         8f:23:84:3d:b0:54:f8:cf:e5:05:a0:4f:c2:51:66:b0:4e:b5:
         d8:25:8b:b9:1a:28:2d:44:cb:1f:9a:0d:4d:ee:65:bd:03:c8:
         d7:2b:9d:8b:9b:e8:4a:aa:2a:da:a4:cc:ce:25:0e:ac:49:bd:
         5b:27:3d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 08:04:41 2026 by rpki-client