This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File:                     sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier:          VBsFWr3uffiCeJ4SdFmAauoAYTsIlI7RbvQMbpm1hDQ=
Subject key identifier:   80:F6:4C:9E:7A:54:CF:6C:AA:93:04:92:5E:21:61:51:F2:EB:61:84
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer:       /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial:       019C446C012D56581A6A1CA8B63DBCC2455E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number:          05E1
Signing time:             Mon 09 Feb 2026 22:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:54 +0000
Files and hashes:         1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
                          2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: NLENxxgbyJvbE8DK6Aedp1aZoNLQf9jKXrqFlVEgQ18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:01:2d:56:58:1a:6a:1c:a8:b6:3d:bc:c2:45:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
        Validity
            Not Before: Feb  9 22:00:54 2026 GMT
            Not After : Feb 10 22:00:54 2026 GMT
        Subject: CN=80f64c9e7a54cf6caa9304925e216151f2eb6184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:40:59:0b:12:e9:e1:90:16:d4:a3:aa:37:
                    9b:7b:82:cd:fd:c5:df:14:fc:b3:73:68:4e:04:22:
                    b3:ad:92:2b:e0:c4:e9:db:ef:f0:58:42:c1:f4:d7:
                    e9:6d:6a:2c:12:f2:fa:be:56:6f:d3:d7:e6:bd:5b:
                    7e:fd:93:2c:9e:9a:43:f3:e7:43:46:0d:a0:90:2c:
                    a4:12:31:e2:85:88:b1:1f:70:fb:fc:a7:18:e1:3a:
                    ec:ae:ba:ac:2c:91:fe:02:15:2b:1a:f7:7d:68:d1:
                    7b:3a:6f:b9:21:72:58:05:cc:36:dd:ca:9e:91:82:
                    e4:db:31:11:ca:f7:c9:58:23:8f:33:b6:5e:7a:4e:
                    87:f9:1b:4f:46:d7:82:60:1f:d5:1c:6b:e8:3e:b5:
                    f0:48:64:22:53:18:eb:ef:77:03:35:7e:b4:5c:aa:
                    fb:de:05:2e:ec:81:55:61:ee:db:17:ee:32:7a:fa:
                    ba:6a:1e:60:de:8b:f8:e6:26:87:d7:e3:1f:97:9a:
                    a8:f3:dd:c4:bd:40:70:6b:61:7b:1b:5a:18:0d:5d:
                    4e:ff:d5:21:82:f9:6a:d7:60:c3:fa:c7:33:80:11:
                    32:de:06:db:d6:47:8a:7b:b4:83:eb:6b:69:3a:0b:
                    e5:8e:ad:a7:ff:42:bc:a2:ff:85:78:40:93:36:48:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F6:4C:9E:7A:54:CF:6C:AA:93:04:92:5E:21:61:51:F2:EB:61:84
            X509v3 Authority Key Identifier:
                keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:87:3f:a5:c8:87:96:7f:4c:77:41:35:8a:24:b7:0c:c9:
         a2:6d:7e:e9:8c:10:18:0e:73:76:ee:12:8b:fc:e6:4f:4a:33:
         7d:57:37:c4:78:c4:8d:2c:42:79:45:31:77:f4:c2:4b:57:1f:
         23:9c:d4:76:b0:9c:0e:5d:9a:5e:94:c3:04:ba:c6:6b:12:8f:
         4f:76:9e:9c:b5:75:ee:6c:d7:60:cd:f6:ef:e6:6f:2d:34:b7:
         ce:ec:bd:15:09:9e:c2:51:db:fc:f6:62:3c:f2:04:09:b1:b2:
         86:7e:b2:bb:75:3d:c8:3d:47:40:6d:fd:5d:03:f0:51:0e:39:
         38:3c:90:8b:c4:7c:60:dc:98:76:77:43:e0:4e:1b:22:7a:d1:
         a9:ae:4f:24:90:bf:29:18:ed:f6:84:bb:fc:90:da:20:d3:bd:
         12:ea:10:79:e7:e8:b9:b7:65:b3:cb:56:11:02:87:ec:54:6f:
         4b:50:34:e9:e8:b5:3d:93:12:02:3f:f7:6d:13:b1:46:0d:9e:
         85:1d:52:ec:31:a8:aa:45:4c:74:1c:ea:d9:9f:52:53:33:b6:
         cc:da:7a:1e:f5:be:50:1d:95:ba:24:44:68:55:14:f3:11:f2:
         fb:35:d2:b4:ed:1e:da:0c:32:74:86:72:63:65:77:f1:34:2a:
         02:35:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:42 2026 by rpki-client