This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File:                     mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier:          XW0L9lUjRcBSR9xFoe5u7rq6TdvvOfZTIja0HicadZU=
Subject key identifier:   29:D3:FF:CF:07:C5:DD:14:24:69:80:15:EA:65:B6:A3:82:08:3C:FB
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer:       /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial:       019C432220FF592EB0327BFD79C03A659EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number:          053F
Signing time:             Mon 09 Feb 2026 16:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:35 +0000
Files and hashes:         1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: /epcKgEetyWeXv436LsBU0fo5YJlHTxLPFlviAUnv5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:20:ff:59:2e:b0:32:7b:fd:79:c0:3a:65:9e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
        Validity
            Not Before: Feb  9 16:00:35 2026 GMT
            Not After : Feb 10 16:00:35 2026 GMT
        Subject: CN=29d3ffcf07c5dd1424698015ea65b6a382083cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:ac:8b:78:56:e2:c7:60:6a:44:bd:ba:05:
                    18:06:0c:5b:15:c1:03:56:31:c3:d3:a5:49:3a:9e:
                    44:c3:2e:44:6e:75:79:8e:40:0c:dd:5b:10:27:f9:
                    37:c0:fd:33:62:18:4d:72:d1:90:c7:8f:ae:c6:57:
                    88:ed:5f:23:20:88:93:74:c1:7f:21:45:21:e5:ba:
                    dd:42:20:71:19:c1:62:14:c2:f2:6c:13:3c:62:f9:
                    fd:4a:5f:d1:c0:a3:98:76:29:38:cd:c7:5b:19:8a:
                    e3:3e:9b:b0:2f:bd:33:3b:2d:98:3b:38:fb:d3:79:
                    05:5c:d6:70:e4:0a:38:6e:af:55:7f:1e:0a:35:8c:
                    7c:d0:19:87:c7:3b:99:a6:3b:c4:dd:97:63:96:97:
                    31:0e:c1:33:27:82:6d:40:bd:14:92:da:f3:38:9e:
                    5d:50:99:8a:23:e5:58:03:ec:50:0e:6a:6c:82:5b:
                    5e:a7:4e:d5:aa:cc:2d:ce:a0:43:e7:95:0f:c0:69:
                    d6:09:b5:47:5f:5f:39:73:98:72:2d:aa:cc:bd:28:
                    4f:0b:d6:15:37:98:98:6a:da:c7:37:81:f1:01:0c:
                    37:12:f3:c8:9d:97:9e:b4:91:f7:a2:44:ef:0e:3e:
                    bf:49:30:97:f0:91:7a:bf:e3:ab:ad:8c:8a:92:65:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:FF:CF:07:C5:DD:14:24:69:80:15:EA:65:B6:A3:82:08:3C:FB
            X509v3 Authority Key Identifier:
                keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:55:f3:7e:9a:bb:fe:3f:5b:40:1c:aa:54:3c:66:25:3f:
         94:92:53:d5:f7:ce:a7:16:30:85:c4:41:94:1f:98:03:4d:4d:
         87:c9:a3:1e:05:a8:a8:95:0f:61:43:4b:1d:86:3f:a6:83:88:
         35:6b:8a:dd:f1:74:2a:61:ea:c5:8b:6d:68:b9:63:ab:dd:39:
         d6:e7:16:bc:c6:d8:4e:5a:19:ba:50:39:d0:c3:32:ef:26:fe:
         3f:f8:c1:1f:8f:e0:3d:67:27:6d:30:ec:0e:3a:9b:c6:9f:de:
         11:bb:23:64:4c:69:de:77:aa:c0:91:bc:54:ad:6f:38:00:60:
         9d:2e:01:09:fa:b4:33:61:45:7c:6e:87:00:fe:36:f0:b8:ad:
         ff:e6:b5:b6:07:6c:b4:28:ca:03:09:d6:c0:9c:2a:50:5f:d0:
         2b:d5:0d:8e:ff:68:e7:40:b6:12:e2:af:4f:46:b5:1a:19:41:
         11:2f:b4:23:a0:6a:15:f7:24:d0:15:07:19:74:91:d2:28:23:
         42:62:1a:87:64:d3:09:2a:b8:85:73:76:e3:0b:40:12:59:f4:
         c1:b4:54:59:c0:30:85:b0:bf:c0:2d:f9:a0:41:48:cb:b6:c1:
         e2:d1:7b:07:21:68:60:8c:88:58:14:14:f3:7f:60:25:f6:98:
         9e:80:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:15 2026 by rpki-client