This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File:                     2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier:          F3UskVJTx7N66qdDaG6Y1QO519qHMtPhspJ5+FA7q6M=
Subject key identifier:   69:25:48:B5:62:BD:D9:7D:49:40:BD:BA:9A:DD:01:B7:BE:83:AF:5E
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer:       /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial:       019C44A29A29993D4560EE20AD533DE3FCF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number:          1324
Signing time:             Mon 09 Feb 2026 23:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:32 +0000
Files and hashes:         1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: l2l6qo6rbsvFWysY3GOuTvYMC9ANzVggOpJS8Cls/cw=)
                          2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:9a:29:99:3d:45:60:ee:20:ad:53:3d:e3:fc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
        Validity
            Not Before: Feb  9 23:00:32 2026 GMT
            Not After : Feb 10 23:00:32 2026 GMT
        Subject: CN=692548b562bdd97d4940bdba9add01b7be83af5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:47:ed:8c:13:6b:3c:da:64:28:26:9b:86:
                    6b:28:38:83:98:b3:8d:c4:3f:bb:7c:ae:57:eb:2f:
                    99:ac:86:da:0c:bd:37:b3:ca:e7:2d:a8:05:14:fa:
                    20:24:cb:57:2e:d2:5d:8c:31:1d:14:28:23:b2:df:
                    18:bc:65:8b:83:00:3d:29:f1:39:5f:65:f5:f9:ad:
                    ba:4f:a3:bf:c1:79:2a:d4:d5:81:b6:70:8d:bc:58:
                    4d:d9:51:81:68:5b:e2:a2:03:1b:00:06:70:1d:fb:
                    bd:af:6a:4d:6a:9c:95:77:87:b7:44:0e:eb:8e:39:
                    b7:3b:6c:25:f7:6c:2a:b0:3d:c5:04:4e:50:84:91:
                    d6:c2:f8:22:1d:ae:f9:65:0d:56:77:a0:d8:52:b1:
                    49:67:b4:fd:96:1f:b5:22:00:71:1a:a2:b5:b2:d0:
                    e7:af:90:19:c5:e7:5d:40:6d:93:7d:a3:22:63:11:
                    4f:53:b2:b3:ef:39:7a:62:ab:91:38:26:b6:c5:ab:
                    e5:e5:e6:75:91:31:1a:ac:6e:d3:ec:31:31:d2:a5:
                    9a:ac:1f:3a:59:4d:cb:1d:1c:e4:b0:eb:d2:05:79:
                    fe:ca:9f:4d:4c:2a:f5:61:34:86:bc:16:6d:cd:1a:
                    3b:2c:9a:90:15:17:ca:17:07:32:bf:30:1c:74:a8:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:48:B5:62:BD:D9:7D:49:40:BD:BA:9A:DD:01:B7:BE:83:AF:5E
            X509v3 Authority Key Identifier:
                keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:a9:af:62:14:e6:02:6e:4c:c8:79:3f:1e:e4:49:95:0d:
         67:af:3c:1d:df:c5:44:58:43:ab:51:dc:b3:0b:54:83:80:45:
         84:c0:50:1f:0c:d9:99:39:57:22:1f:e5:49:69:44:a5:29:38:
         cc:4c:28:ef:99:fc:df:ef:60:aa:42:c7:c6:b8:7d:37:f7:d0:
         ca:f9:57:fd:02:0b:24:89:54:1e:22:6a:5e:5c:e8:35:86:be:
         87:d9:44:7d:76:bc:8e:02:78:c3:01:64:1f:f2:fc:65:36:98:
         17:74:7d:12:aa:66:11:c9:c6:cb:3c:1b:49:dd:ec:1b:65:d6:
         bd:73:44:75:06:f0:d0:62:23:58:94:12:24:9b:6f:b8:13:03:
         77:bb:af:6c:56:39:c1:37:6a:af:a3:19:cb:2a:62:8d:ae:74:
         91:74:c4:f8:86:43:8f:e5:52:6e:df:db:9e:e0:ee:be:81:63:
         3f:17:67:6a:d2:29:ed:c9:5c:ac:dd:c1:52:b7:a0:df:56:ed:
         e5:f7:af:b8:05:71:bf:3e:8d:be:9e:b8:fa:50:5a:eb:6d:34:
         03:d2:71:1a:6e:10:b2:ee:59:e8:09:fb:f9:46:3e:29:d1:f6:
         40:c6:53:59:93:6c:cc:11:41:a9:5a:b2:1a:99:49:09:07:9c:
         c2:a6:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:58 2026 by rpki-client