This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File:                     C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier:          I7C29J471Z9BtqxK0WNOKHY+cUbb2EQPi9k9Ei6tqQ0=
Subject key identifier:   FF:29:B1:B4:D4:39:14:30:99:0C:4C:55:3B:05:85:24:36:FD:6C:09
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer:       /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial:       019C42B4541F6A3DEF56E59365D228BD2AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number:          0AA5
Signing time:             Mon 09 Feb 2026 14:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:40 +0000
Files and hashes:         1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
                          2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: cmERPzntAv3oXwoJNDjbO1+egWsci6qOH7IHQHanJs4=)
                          3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:54:1f:6a:3d:ef:56:e5:93:65:d2:28:bd:2a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
        Validity
            Not Before: Feb  9 14:00:40 2026 GMT
            Not After : Feb 10 14:00:40 2026 GMT
        Subject: CN=ff29b1b4d4391430990c4c553b05852436fd6c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:14:c8:7c:52:0b:ca:e6:ba:e9:e1:42:b7:
                    29:79:09:b1:6b:47:7e:a8:70:51:89:7c:40:3c:8b:
                    26:63:c9:f4:05:2d:67:ae:c1:09:78:91:c3:c6:3e:
                    f1:ed:49:44:7d:c0:f0:54:05:c1:20:ea:24:f2:41:
                    15:8e:46:b3:e8:a4:31:dc:7e:c3:c6:f0:fb:4a:0c:
                    4e:89:65:10:4e:98:15:32:4a:81:2d:c4:f1:df:5c:
                    28:9f:a6:6b:61:42:51:f3:bd:96:db:1b:d7:af:bc:
                    71:11:04:cf:38:ca:ca:df:85:d2:0e:2b:74:18:e0:
                    52:c5:c1:d4:c1:e8:39:b3:93:60:4c:95:d3:69:44:
                    4f:5c:05:b1:10:55:73:ed:3b:ab:70:6c:84:be:1b:
                    f5:e8:7a:7c:d8:63:dd:d9:84:c1:49:af:b3:66:e0:
                    31:02:90:db:47:62:fb:fa:bb:01:88:5a:6b:c3:12:
                    a8:e3:97:c1:9d:b8:d6:18:c3:16:43:e1:61:7a:7b:
                    3a:13:17:0d:69:ec:a5:f5:3c:dc:25:a8:f0:c5:eb:
                    ed:b0:6b:16:12:b0:8f:d6:dd:ee:82:59:fd:2e:bb:
                    94:55:3d:12:fa:6e:15:fe:6e:ce:47:11:36:72:4d:
                    7e:eb:29:1a:a3:4f:4d:17:0f:e8:37:ed:25:88:fd:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:29:B1:B4:D4:39:14:30:99:0C:4C:55:3B:05:85:24:36:FD:6C:09
            X509v3 Authority Key Identifier:
                keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:c8:93:9d:28:6d:f2:63:43:ed:3c:58:76:15:08:06:6d:
         3a:4e:80:a5:c5:b4:cc:df:bb:b6:c2:82:da:a3:de:74:a5:1b:
         47:92:79:dd:a6:08:af:92:46:35:7e:cd:ce:1e:0f:6c:c7:e5:
         01:51:0a:f6:c7:18:ff:da:0a:3d:6b:77:76:18:d2:37:90:0a:
         5f:09:9b:dd:3d:07:62:61:94:7d:cf:cb:1b:c6:a8:9e:ac:7b:
         a9:ec:a0:d1:28:16:42:3f:3f:6d:b2:c0:2e:a8:3a:5c:76:d2:
         4f:0a:61:eb:ba:af:d1:40:f9:e7:77:89:69:0d:ed:c0:d7:28:
         ac:2e:ec:4d:84:74:b4:e9:14:ac:d5:f5:4b:4e:0f:9f:9c:a2:
         7a:19:0b:8d:e0:0c:86:8f:2c:9f:ee:89:37:9c:8d:99:fc:6b:
         74:5e:55:e4:7a:42:b8:d9:9a:66:3a:82:d0:53:b6:5b:3c:1a:
         ea:5e:92:5b:0e:90:71:2e:6f:1c:d2:1d:e7:29:bd:9d:80:a7:
         89:25:2d:93:11:1f:5a:21:45:16:5b:eb:4e:a5:a5:a7:6b:5f:
         2c:83:d9:9c:21:8b:db:21:74:40:0c:4e:2f:72:f6:05:2e:19:
         3f:a6:76:58:95:85:03:6d:0e:a7:1c:8d:0d:f8:1d:2f:b5:45:
         d1:2c:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:48 2026 by rpki-client