This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File:                     IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier:          E7jWM8fxypvrVnCpDHiTCwES0cyufe3Kqqtxd82CCyo=
Subject key identifier:   BB:00:92:B5:D1:AE:35:12:93:41:04:A8:5C:C0:0E:DA:F6:2C:1B:2D
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer:       /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial:       019C427D3102B559E14B32D73AAB9E6AAC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number:          09CE
Signing time:             Mon 09 Feb 2026 13:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:26 +0000
Files and hashes:         1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: D2nluD9d4PWQYOwpgkX5nueyIiQKtBsSG3RSfH7oAfw=)
                          2: _ve7f_eKRxTXvAdLhrojJgOcPWA.roa (hash: CPmTvOiaDxy3JYxjp63taRHI0Y6d1z0nn8MiWd6BcsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:31:02:b5:59:e1:4b:32:d7:3a:ab:9e:6a:ac:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
        Validity
            Not Before: Feb  9 13:00:26 2026 GMT
            Not After : Feb 10 13:00:26 2026 GMT
        Subject: CN=bb0092b5d1ae3512934104a85cc00edaf62c1b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:ee:84:9f:e3:23:68:3c:a5:c0:e8:c7:b3:
                    ce:10:9a:81:c9:68:31:f3:01:e9:41:d5:d0:50:b4:
                    31:9e:bb:ca:b1:ca:60:b6:ec:fe:39:0c:90:5f:67:
                    37:21:81:f7:c8:43:26:b3:e0:d6:36:b6:fe:60:36:
                    b8:18:85:15:74:a5:68:c0:89:f1:6f:91:0c:ef:1a:
                    dc:3e:b6:9d:1c:3d:5d:52:da:58:c0:f5:5f:5d:1c:
                    0f:41:4c:1a:54:d1:90:ac:12:0a:2a:da:2a:7c:6f:
                    24:10:18:1a:84:60:a9:45:5c:28:89:1a:7d:e6:2b:
                    ac:41:f5:e7:4d:66:a4:0e:37:d1:86:86:67:7f:c7:
                    48:8a:f2:73:0c:da:5d:4b:cf:f4:43:00:de:64:f8:
                    00:12:02:7f:7c:0f:cf:6c:68:7a:3a:29:13:34:e1:
                    80:a5:84:00:2b:1d:40:98:9f:fd:6c:1a:ba:4a:ff:
                    6e:2f:e4:09:57:91:49:32:70:c5:f0:f7:da:c6:dd:
                    84:d8:7a:78:aa:d2:3b:e1:e7:8b:0c:d2:b1:3b:09:
                    55:6d:7f:14:e6:62:21:aa:64:3e:00:b2:1c:66:79:
                    de:7a:58:75:a3:3b:1a:aa:ed:27:6f:67:4e:40:1b:
                    09:7e:63:3d:32:5a:7d:54:fb:59:6f:98:3e:3f:1e:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:92:B5:D1:AE:35:12:93:41:04:A8:5C:C0:0E:DA:F6:2C:1B:2D
            X509v3 Authority Key Identifier:
                keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:4d:1b:65:33:53:70:0f:db:a9:df:ad:f6:d6:d4:e0:1f:
         5d:91:84:a4:b2:7f:e3:30:76:c9:ed:44:20:12:39:75:21:bc:
         75:99:d6:31:ee:4e:0b:b3:d1:d2:f0:da:d4:cc:f3:a8:6f:bd:
         7e:b6:14:28:37:1c:46:6e:09:b0:fa:c8:59:8b:ce:01:6f:76:
         62:11:cb:03:86:c9:df:da:9a:86:c1:da:65:dd:65:fd:9e:99:
         75:56:fb:40:8b:5b:08:4b:fa:aa:20:4a:1a:2e:25:86:65:2d:
         b4:67:43:09:32:a6:56:0e:d0:df:d8:19:25:36:b0:f7:b6:36:
         cc:98:4c:6e:af:6c:40:83:cd:4a:4a:5a:f8:f3:fa:90:04:28:
         f8:f3:c8:e2:0e:92:2a:f0:d6:ef:aa:eb:89:62:23:38:99:1e:
         ec:11:08:e5:ff:04:57:bd:b6:44:b6:75:31:04:d6:18:16:55:
         79:9f:bc:98:85:3e:d9:fe:c0:f8:cd:de:13:dc:0f:c2:61:65:
         2d:63:ed:88:95:b3:65:1c:87:4a:7d:66:a6:6c:23:c6:c0:88:
         24:99:91:29:e8:aa:67:aa:7f:ee:04:ef:34:5f:3b:11:1b:33:
         c5:fa:a2:0d:d5:66:bb:0d:e1:b6:76:1a:a3:50:65:82:c3:d2:
         60:39:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:47 2026 by rpki-client