This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier:          SlQoE4UHwDJwcY7jVEVIoARQrWB4/+MBmk6I9pM9X1c=
Subject key identifier:   9D:E0:CE:30:22:BE:2D:F3:7D:84:6C:16:42:CC:DC:48:D6:2E:A4:1E
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       019C420F42482155EC0DA3045FF03EF72611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number:          1241
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: +8UgcvIG/e7npGMZds/oN7wvSbtYqQklEuXMStw4gyc=)
                          2: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (hash: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k=)
                          3: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (hash: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU=)
                          4: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (hash: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:42:48:21:55:ec:0d:a3:04:5f:f0:3e:f7:26:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=9de0ce3022be2df37d846c1642ccdc48d62ea41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:8f:c4:a9:0f:f4:a6:8f:86:0f:34:45:c4:
                    42:17:72:fe:97:fc:a6:8a:b7:5e:8d:d4:d1:8e:43:
                    cc:cc:93:0e:a1:3f:87:63:c3:c7:89:ec:0b:a0:7b:
                    9a:e4:d5:98:4e:37:67:3b:3c:c7:6c:6f:d9:24:4c:
                    17:23:59:0f:fc:f3:14:c1:07:c6:c0:a6:02:78:27:
                    e9:ad:fd:f2:6d:f0:a7:3d:9c:a8:34:f7:72:79:f8:
                    53:c9:4c:4d:7b:3a:12:7b:cf:dd:7c:f9:04:a1:3f:
                    52:60:1d:00:c6:92:b6:b9:ed:7d:b4:69:67:75:2b:
                    ef:1a:c9:01:2a:a4:b8:6b:f4:f5:60:6e:08:c8:a0:
                    23:5d:48:a7:12:6d:af:ab:25:80:ed:b4:39:13:32:
                    5e:3f:61:5f:55:25:41:e9:00:b5:20:cd:3d:46:7b:
                    35:37:15:f4:27:84:4c:99:04:df:f7:10:c1:98:d1:
                    9a:05:6c:a6:0f:a3:b7:02:45:c4:9d:cb:52:90:74:
                    9b:85:6c:c1:79:18:12:28:bb:d8:b8:3a:47:f6:95:
                    8b:07:ce:98:e5:5b:d2:19:6f:46:6c:36:55:9c:68:
                    60:89:36:ef:43:46:80:57:5f:b4:3f:0e:82:cc:55:
                    4c:5d:cb:c1:46:c1:0a:16:39:96:ce:bf:14:78:ee:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E0:CE:30:22:BE:2D:F3:7D:84:6C:16:42:CC:DC:48:D6:2E:A4:1E
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:57:74:46:ca:4c:0d:d0:c7:4c:ae:31:2c:c2:7d:94:69:
         c7:07:27:9a:27:f0:73:68:e6:8f:76:b8:38:df:b7:bd:14:ee:
         da:31:90:34:00:69:fb:71:8a:05:e4:11:d4:2b:f1:3d:5d:b2:
         24:60:20:48:c7:4d:90:fe:ab:ce:eb:74:9d:e4:b1:29:7a:cb:
         69:bb:6e:37:af:1b:15:31:11:14:cd:38:07:40:b1:14:4c:43:
         10:7b:32:2f:41:98:8e:54:eb:8a:07:cc:05:16:c9:62:75:31:
         65:4f:b8:48:b5:88:54:9d:08:5b:dc:ee:1c:2a:fd:6c:32:d4:
         fd:4f:bd:bb:01:de:56:4b:d8:90:7a:83:06:9c:69:68:fc:cf:
         61:36:ae:d9:75:26:47:9b:39:80:dc:dd:42:4f:04:89:21:80:
         2c:eb:7d:a6:5a:d4:81:26:a5:57:cb:c3:ab:eb:be:83:92:fa:
         12:19:b3:55:66:e7:f5:00:86:88:e6:c1:63:e4:91:3f:7c:67:
         d9:72:3c:e5:66:ad:08:70:99:56:26:5e:16:67:91:2f:7e:a4:
         e3:fd:a8:0c:96:58:40:cb:99:b1:38:42:46:42:0f:e7:1a:f7:
         7f:9e:3f:c7:4c:5a:94:7a:42:b6:3d:76:82:d9:07:48:0c:7d:
         36:fe:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:57 2026 by rpki-client