This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File:                     CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier:          +1Bh9T9xRmerIhuvvpb515PZ0iEQ9TlwicttJalUTtI=
Subject key identifier:   60:FC:C6:89:CA:B4:4B:A8:9D:73:60:29:3D:50:73:BD:49:00:59:A0
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer:       /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial:       019C42B47810BAE2D2D027B2797DEDF059E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number:          1451
Signing time:             Mon 09 Feb 2026 14:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:49 +0000
Files and hashes:         1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=)
                          2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: VK1UmVpCV4BR0u7FtJppLiDd8M7hj/MNJIAmhSkyvuM=)
                          3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:78:10:ba:e2:d2:d0:27:b2:79:7d:ed:f0:59:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
        Validity
            Not Before: Feb  9 14:00:49 2026 GMT
            Not After : Feb 10 14:00:49 2026 GMT
        Subject: CN=60fcc689cab44ba89d7360293d5073bd490059a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:f8:c2:6c:c7:75:85:42:4a:5a:b9:0b:8f:
                    e1:a6:6b:ea:41:d4:ff:c5:fd:db:2e:ab:7b:9f:72:
                    0f:9e:69:0a:82:3b:c7:6f:14:72:74:57:65:cc:54:
                    4e:89:50:c4:83:13:de:90:64:95:6f:01:5c:c2:91:
                    db:a9:7e:9a:dc:63:86:d3:fd:f1:d4:60:a4:0f:fc:
                    40:8f:fd:6d:e1:a0:e8:1b:63:18:ad:24:7a:cf:ee:
                    ae:0c:9b:eb:8c:f1:ad:1c:ad:c4:c3:ec:11:63:da:
                    56:5a:6f:db:28:44:61:d9:00:21:69:b0:d6:e2:03:
                    b4:4d:e0:de:38:c9:c1:ff:72:6c:9b:5b:4f:69:3c:
                    69:2b:8d:22:19:77:d9:b0:f5:6c:c9:6d:96:b3:e1:
                    ee:77:0c:d7:48:d8:35:1d:d9:91:a8:ab:f2:05:ff:
                    73:82:5b:2c:79:0b:31:80:a0:db:c4:d5:7b:f7:ed:
                    e3:78:d0:ed:13:f3:f4:b5:24:bc:d2:e2:68:68:14:
                    67:25:12:69:84:ac:fb:e3:76:b9:7c:7d:23:8a:97:
                    38:5d:f3:8e:16:91:9a:6a:2e:f1:5b:78:7d:5e:62:
                    ba:7a:da:d2:74:a2:fc:94:67:d1:4a:31:f0:6b:bb:
                    f6:ea:6d:cd:f1:34:eb:06:1b:f6:0a:f7:c8:29:69:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:C6:89:CA:B4:4B:A8:9D:73:60:29:3D:50:73:BD:49:00:59:A0
            X509v3 Authority Key Identifier:
                keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:8c:1b:d2:3f:c0:86:6f:1a:bb:e4:d1:bf:6e:fa:e5:5f:
         71:a5:a1:d5:41:49:05:f7:e8:88:af:96:98:57:35:5e:3f:e5:
         e2:aa:db:83:90:7f:bb:84:c2:e3:ab:50:3e:4b:eb:1c:d8:f3:
         df:43:1f:e1:6a:ea:8b:5c:8a:91:ce:fc:1e:d9:ef:3f:f6:bf:
         dd:a7:f2:3c:b0:47:41:80:b6:2f:3c:cb:21:62:c4:b5:1c:e2:
         76:91:88:85:d6:13:7f:7c:3b:08:44:80:41:1d:8f:49:72:74:
         67:db:d4:c6:9f:80:08:7d:01:2e:87:05:cc:17:95:85:25:74:
         be:91:d5:26:53:f5:e4:a6:c5:dd:80:f5:8d:e2:5b:c9:af:33:
         41:d8:a1:11:0c:1f:37:4a:05:46:32:f8:4d:9a:ed:77:e8:c4:
         72:0c:83:36:6d:42:db:9f:81:c3:95:03:6a:81:47:fc:30:17:
         67:19:7b:70:68:31:db:bf:3f:f6:cc:4d:8c:26:97:2d:76:b9:
         00:e9:43:a5:46:05:e0:0c:a6:d5:a2:f5:24:44:ca:06:c8:98:
         84:08:51:90:25:dd:6f:1a:71:59:59:c3:85:5e:97:9f:d1:79:
         d5:57:9a:46:43:33:8c:91:f6:73:8f:96:93:a9:d5:9d:83:00:
         07:5a:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:41 2026 by rpki-client