This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
File:                     bSID7B5abCZsyjm5rxq-LLILGVo.mft (raw, json)
Hash identifier:          nG76mWlvePA1qKMpBEuwiP9HRTKAUkCIfQKW7Pqf4+8=
Subject key identifier:   D8:DF:67:45:CA:51:F9:B1:15:88:B0:72:5B:29:CF:81:8E:0F:1E:B8
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Certificate issuer:       /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial:       019C446BA1D420CD54CF49097B6973F457D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 22:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:30 +0000
Files and hashes:         1: KEjUQVlN-kYa2GK1u7oIUmkIKDw.roa (hash: XXTQdFb/FE8pQqJgVu712tdHVCXz3R+MnP7POS5nFQU=)
                          2: bSID7B5abCZsyjm5rxq-LLILGVo.crl (hash: +ThTE4+AyxGjlzvuSKbTpzcJwnyj5ww14eSaFK501zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:a1:d4:20:cd:54:cf:49:09:7b:69:73:f4:57:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
        Validity
            Not Before: Feb  9 22:00:30 2026 GMT
            Not After : Feb 10 22:00:30 2026 GMT
        Subject: CN=d8df6745ca51f9b11588b0725b29cf818e0f1eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:e2:60:1e:41:4e:6a:4d:56:fb:08:06:36:
                    b3:79:80:33:4b:25:4a:e0:1a:6b:88:89:8a:65:a2:
                    bc:4b:b6:d0:7c:08:8b:ac:00:f1:14:6c:f6:0e:56:
                    ce:91:da:85:23:31:8e:ad:06:09:49:72:7d:82:5c:
                    98:bf:be:9c:06:c0:5e:e6:b9:88:8c:46:74:37:fc:
                    74:36:bb:8b:e7:66:27:79:40:88:92:db:a2:f0:d9:
                    fb:ec:0a:43:f9:d1:08:20:3a:5e:04:95:c0:4a:ef:
                    ae:0a:7d:63:ae:87:28:4f:f3:64:81:4e:7f:ab:66:
                    48:22:2f:e9:0b:60:c9:78:e1:34:be:3e:e0:3d:3d:
                    45:c1:09:e1:6d:a4:fc:c6:76:75:83:1e:54:63:d7:
                    35:ca:df:04:17:9e:d2:47:c3:15:72:c8:cd:2f:08:
                    fc:79:fd:45:b9:86:02:59:36:d0:89:bc:74:68:aa:
                    7f:d9:7c:09:6b:8f:7e:cb:8d:4c:01:c2:fd:40:36:
                    eb:c4:f7:53:86:e2:e3:7a:60:1f:0f:bc:ec:2e:d8:
                    c0:c1:56:03:cb:8f:e0:c9:ac:30:d0:63:60:f7:de:
                    74:9d:34:96:f9:67:97:c0:a7:21:2b:0f:56:6c:97:
                    47:14:7f:a1:51:3d:07:54:06:d3:c8:1f:02:ad:59:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:67:45:CA:51:F9:B1:15:88:B0:72:5B:29:CF:81:8E:0F:1E:B8
            X509v3 Authority Key Identifier:
                keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:ac:67:d3:70:1b:35:ed:43:27:ed:0d:67:cf:9e:c2:e9:
         ab:6f:04:9e:27:af:82:16:90:51:29:ca:7a:80:16:92:40:8f:
         17:35:88:5e:e2:10:a3:d1:c8:c5:85:50:8b:ae:5e:72:58:e3:
         a1:c8:71:ef:9a:3a:19:07:ce:f2:39:65:cf:74:ae:11:bf:78:
         f3:90:31:89:a9:0a:47:3a:62:a5:54:42:e3:7b:3e:b0:e3:c2:
         bd:9c:60:b4:ff:cf:47:4b:9a:13:2c:d8:0c:2b:ed:cc:07:c4:
         13:25:c2:42:d6:2f:45:c4:6b:d3:80:30:bb:02:4d:da:de:66:
         80:58:89:3c:6c:6a:90:0f:85:1b:9a:2c:77:dd:ff:47:d9:1b:
         98:2c:9e:bb:68:79:64:87:a6:23:a4:99:b6:60:6d:3e:6d:07:
         93:f1:e4:18:7c:bd:08:47:a8:0b:28:b5:28:2f:15:fe:f6:02:
         ef:28:96:c7:5a:49:d6:27:2c:42:a7:77:73:07:6f:cf:e6:2d:
         21:70:f1:23:f6:5a:94:42:00:22:b1:90:da:4b:8f:41:a3:94:
         53:a2:6d:3e:d8:91:c1:61:3d:4c:81:78:90:97:93:e3:d2:21:
         62:05:2a:f5:85:97:b1:2d:2d:2b:fc:f6:c1:ed:e0:d1:38:f9:
         b8:11:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:29 2026 by rpki-client