This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          2j4YnZ+39BfWJjYULwkkxbZ5q8GEiRra6BQM0HxxID8=
Subject key identifier:   07:72:C2:23:86:8E:FA:34:BA:76:F4:A2:2C:78:8E:A0:B8:FD:24:24
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       019C42466A392CBBE9FDB3D1BD6D610C644F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          1536
Signing time:             Mon 09 Feb 2026 12:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:36 +0000
Files and hashes:         1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
                          2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
                          3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: wcHgtJtUgODFKc3p7AVOHw241g9p42uPdBSGhzbLRig=)
                          4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6a:39:2c:bb:e9:fd:b3:d1:bd:6d:61:0c:64:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Feb  9 12:00:36 2026 GMT
            Not After : Feb 10 12:00:36 2026 GMT
        Subject: CN=0772c223868efa34ba76f4a22c788ea0b8fd2424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:65:22:75:cd:8a:de:63:d3:c9:f1:7d:04:
                    20:90:ab:7f:8d:e7:a9:74:e3:18:e3:65:36:3c:7f:
                    5e:64:7d:33:66:b7:26:af:58:42:84:f9:97:83:5d:
                    6b:a9:55:b8:c4:0f:41:2b:3a:71:22:68:7d:ef:c0:
                    74:80:e2:5a:60:43:a6:73:4a:00:54:70:2d:7b:a7:
                    3b:94:a5:52:33:13:4f:8e:15:58:11:54:b6:35:7f:
                    2a:59:8d:41:cb:e6:03:9f:95:11:50:f2:46:e2:17:
                    72:f0:b3:d2:9d:17:d0:4e:c8:9c:e8:9b:93:08:fa:
                    ea:af:4f:27:53:8f:d2:40:5f:b3:77:46:3b:23:56:
                    88:62:51:e3:05:03:fe:4d:bf:0a:e3:1d:63:a4:08:
                    db:db:06:06:01:fe:3f:0e:3c:e8:e2:d1:ee:c8:22:
                    4e:eb:0d:9b:e3:8c:2c:7c:92:3f:9a:6d:cc:8e:29:
                    b1:c9:0f:18:0f:ab:54:b2:27:de:85:be:18:8d:01:
                    a9:50:4e:01:dd:32:3d:26:97:80:de:b6:88:2d:14:
                    41:ae:49:70:2a:73:40:54:b6:47:e5:a7:a4:01:25:
                    2a:4e:d0:bd:83:c0:b5:93:2f:83:f8:43:26:2c:6a:
                    4e:dd:24:32:04:6f:ca:ec:28:9a:dd:37:a3:33:ba:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:72:C2:23:86:8E:FA:34:BA:76:F4:A2:2C:78:8E:A0:B8:FD:24:24
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:87:21:46:89:be:6b:dd:f7:4d:6c:80:85:b8:8c:94:56:99:
         a6:a0:b6:1f:16:7f:90:76:d6:99:94:64:b7:92:5e:7d:eb:4e:
         48:65:c3:11:fe:80:63:17:b9:7f:bf:19:c6:11:bb:10:f0:ab:
         16:b3:45:1f:66:0a:7c:fa:78:09:de:13:c4:1f:9a:3d:87:17:
         96:28:ec:a7:33:04:48:ef:7c:04:2a:05:f1:95:e9:68:0a:1b:
         c3:cf:40:f0:49:73:0d:f2:99:ea:90:d4:17:dc:0e:51:11:14:
         50:8c:f8:dd:78:6c:ad:fe:36:4a:ec:fc:4c:33:42:b2:a5:fd:
         e8:13:2d:af:59:46:48:c4:a7:a5:48:45:2e:64:77:13:39:36:
         8b:33:be:c9:67:06:6d:1b:49:00:f6:b8:2f:c8:78:10:67:2f:
         2b:1b:a5:13:bc:2b:63:12:71:5b:25:8d:51:0f:6c:6b:18:fd:
         7a:8b:c5:06:d1:29:ed:c8:8a:9a:1a:70:ec:ec:bf:ed:1c:55:
         ed:28:ac:6b:05:25:38:4f:21:c0:c9:f9:68:03:b2:27:a1:55:
         d8:a0:38:3c:fb:44:81:c6:08:d7:cc:09:86:04:27:db:47:16:
         e5:19:44:56:8b:05:e1:ff:ca:70:cf:11:86:80:9a:bf:32:bb:
         ce:29:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:06 2026 by rpki-client