This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File:                     1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier:          a+Qm6Pom4lDh+Qj1i8TjJu1iw1NNTKEMuLYA9tmkNew=
Subject key identifier:   A6:E6:95:BC:4B:13:C4:5A:C5:D1:6D:C7:EA:FE:0B:24:9B:A4:3C:75
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer:       /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial:       019C42EB2BD3025A714BF0EE3365C807A22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number:          22
Signing time:             Mon 09 Feb 2026 15:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:34 +0000
Files and hashes:         1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: JVc4YSvw1hnHazslCAOMy3XR8TQjZz7osgqk0e3ZJAc=)
                          2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
                          3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:2b:d3:02:5a:71:4b:f0:ee:33:65:c8:07:a2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
        Validity
            Not Before: Feb  9 15:00:34 2026 GMT
            Not After : Feb 10 15:00:34 2026 GMT
        Subject: CN=a6e695bc4b13c45ac5d16dc7eafe0b249ba43c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:be:e8:1e:a6:ff:fb:94:c4:bb:7e:3b:56:
                    f8:33:89:69:19:aa:7e:7f:97:33:20:54:56:6c:cf:
                    6a:0d:59:52:e4:cf:ec:06:eb:b1:c9:06:c7:c8:44:
                    fb:81:d2:d8:d2:23:2d:2b:4e:0e:c3:09:04:dd:85:
                    e6:fe:6c:4c:38:12:17:5b:28:58:27:e9:63:f0:59:
                    68:08:2b:17:32:a4:74:44:88:0a:c2:5e:ce:73:c2:
                    e7:82:cf:63:7f:87:ac:3a:d4:d3:ee:78:aa:ca:a0:
                    b1:35:bb:f3:be:a2:f0:e9:aa:7f:f7:43:46:19:7a:
                    a5:35:61:9f:1f:f4:88:13:b8:11:92:09:23:b1:ca:
                    ed:9f:02:5c:30:9a:93:55:00:92:65:c2:e3:3d:66:
                    b3:b0:71:be:cd:60:66:77:cf:f0:7d:a0:f2:ef:59:
                    66:c3:6a:c6:a1:60:5a:66:10:fd:3e:12:87:17:7d:
                    4b:4d:da:7f:09:27:63:af:7f:72:d6:7a:cc:9d:77:
                    56:8c:17:68:25:71:9b:08:fd:52:5d:2d:0e:2d:5a:
                    0b:6c:4e:f7:66:a1:f7:8f:e5:9e:b3:b9:e0:7e:8b:
                    8c:83:53:f8:e1:49:f6:b9:66:54:0b:a0:23:ac:68:
                    60:1d:45:86:ef:19:57:79:d0:06:69:b2:92:56:07:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:95:BC:4B:13:C4:5A:C5:D1:6D:C7:EA:FE:0B:24:9B:A4:3C:75
            X509v3 Authority Key Identifier:
                keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:35:9c:7d:59:a7:3f:42:91:ee:b3:f7:18:8d:a8:24:2f:9a:
         5a:2d:1e:1a:e9:0f:f4:97:81:71:28:32:48:09:0d:73:ab:1c:
         96:47:3a:94:50:d6:91:4e:27:eb:d9:03:9b:d9:5d:22:21:3d:
         33:03:77:bc:18:ab:d9:94:04:7b:f8:7a:0c:c1:ee:e1:e3:b2:
         6b:d5:74:b0:9e:23:35:c9:92:88:4c:2f:87:5a:97:52:b3:e8:
         46:72:82:5d:d4:8f:c2:03:28:17:d1:c1:fc:68:27:a4:fa:f1:
         dd:49:d4:50:2a:43:fb:0b:37:c9:d5:25:6a:98:67:21:c8:67:
         fa:98:23:9b:05:a5:f7:eb:f9:75:f2:52:18:32:cb:10:1a:4c:
         75:1f:01:e2:c4:a0:96:01:8a:0a:87:8d:82:dd:9a:d0:5c:2d:
         0c:89:fd:6b:e5:68:18:4e:65:b0:ad:a6:8f:15:46:64:d3:4c:
         53:06:fa:3f:7d:73:1f:e1:a0:9a:03:7f:46:c1:3c:ab:20:ad:
         03:c4:93:15:40:78:a3:cd:98:b0:b4:05:4f:4e:ac:2d:d2:db:
         7e:2c:43:c2:23:63:18:47:92:7e:ff:d7:22:41:d7:64:91:70:
         43:d9:78:8a:1a:a7:d1:a9:22:0c:e9:ad:f1:37:73:68:98:ae:
         ef:83:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:24 2026 by rpki-client