This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File:                     _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier:          jbzBK3niAWcsnWHoPrjXJcjWoCYUal7/9iUAy9miBRU=
Subject key identifier:   E9:1E:66:3B:63:EA:CF:E0:2B:45:4D:8F:AD:7B:40:64:1C:8A:0A:BF
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer:       /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial:       019C420F2F4D66D7BA28A79ACE9572B264C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number:          0BF8
Signing time:             Mon 09 Feb 2026 11:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:17 +0000
Files and hashes:         1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: PhZtkVI1yMnsLeufULTgg+ZPpeKaa6OAjMhiPmQNlAY=)
                          2: qm9g69jYnWNc78LF3m9f86Ep1QU.roa (hash: M/tK1MAFQ93LFa0QgLHnChdjSMrNpdZDpgg6UVG6Za4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:2f:4d:66:d7:ba:28:a7:9a:ce:95:72:b2:64:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
        Validity
            Not Before: Feb  9 11:00:17 2026 GMT
            Not After : Feb 10 11:00:17 2026 GMT
        Subject: CN=e91e663b63eacfe02b454d8fad7b40641c8a0abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:80:81:9e:94:84:98:e6:45:92:87:ce:b2:
                    20:fa:3e:e4:e3:e0:41:74:84:62:0a:e5:11:11:e1:
                    7c:39:f1:cc:56:6d:ad:77:a9:14:20:1b:9a:33:ff:
                    1b:7f:7f:40:51:a0:38:f1:0a:84:34:29:28:10:8c:
                    c9:ef:fb:35:60:41:c7:4f:63:39:14:ae:ab:32:bb:
                    17:e5:67:2f:26:b4:46:eb:ee:3a:3a:eb:ca:5e:fc:
                    7a:25:ed:ac:39:ed:4f:a4:02:a2:3c:50:a8:26:c1:
                    64:1b:f7:b0:1f:06:79:21:78:51:ef:8a:50:43:8b:
                    af:00:ea:ec:55:31:c3:54:46:9e:65:26:c1:f6:d6:
                    88:b8:a4:13:6b:75:64:1d:2b:6e:79:bf:7a:2b:3c:
                    b7:ee:f2:b7:fd:ef:d8:1d:7f:f8:80:90:96:2f:cd:
                    56:88:cd:cc:2e:99:7f:7d:c0:78:3d:57:b6:f5:42:
                    f9:05:f5:ce:9e:f2:f2:90:ec:d6:ab:c2:c6:fe:c6:
                    66:be:34:bf:a5:ab:1a:db:a4:f0:60:9b:9e:79:06:
                    3e:4c:b8:61:4f:06:be:6c:0b:f8:e8:f3:33:30:3d:
                    4a:bb:1c:16:81:36:18:b4:0d:7c:06:66:30:76:32:
                    e5:90:2d:62:2e:de:d0:80:df:5e:59:bd:32:ec:62:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1E:66:3B:63:EA:CF:E0:2B:45:4D:8F:AD:7B:40:64:1C:8A:0A:BF
            X509v3 Authority Key Identifier:
                keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c8:3e:d5:5c:ed:2a:2a:c2:69:07:3f:9f:47:7f:23:51:12:
         13:83:36:a9:d9:e1:76:a6:7f:cf:e6:b7:29:07:2c:97:24:02:
         4e:db:8b:65:01:ae:16:37:e6:e1:bd:0b:7c:4d:59:09:51:04:
         50:9c:06:d2:1e:22:96:ff:d5:4b:6b:5b:04:50:e0:54:d2:70:
         57:00:32:0d:ef:bc:ae:8f:68:ea:4c:1c:65:53:a1:9e:9a:16:
         59:56:e3:99:65:46:62:02:97:a9:ee:44:57:69:44:59:db:ae:
         2f:f2:b9:db:3d:70:21:19:ff:06:1c:ad:81:e9:64:cc:89:22:
         be:e0:ca:cb:b5:26:39:83:c0:68:b6:85:2b:2a:7e:e4:c0:00:
         28:9d:a4:67:63:1b:26:77:cd:74:83:54:de:53:9c:9d:36:ab:
         dc:4c:5a:c3:05:cd:a0:69:ae:d0:0f:f1:56:c6:02:a9:0d:78:
         26:19:e5:ab:bd:64:5c:42:13:82:e1:98:32:5b:e0:a4:64:e8:
         9b:93:fd:2d:c7:15:aa:03:84:47:ea:53:8e:45:34:f1:d6:08:
         04:66:ba:52:5d:68:0b:00:80:d0:85:71:91:8c:de:97:0c:b0:
         91:f3:a0:48:7c:f2:66:77:9f:82:79:80:9f:88:be:c9:26:1a:
         98:49:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:39 2026 by rpki-client