This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File:                     CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier:          TiOODFuJCrkUbkmPgMTvxlXVvGLtahCBQTG3Kh98BCs=
Subject key identifier:   E2:10:19:D8:FF:E3:DC:AB:CB:40:99:83:A0:84:0B:41:37:E6:F6:5F
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer:       /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial:       019C41D8B2A076A2B219362911AA52C4B112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number:          155C
Signing time:             Mon 09 Feb 2026 10:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:46 +0000
Files and hashes:         1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
                          2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: 0bb9+mzQhk5UxdgBR+8MhpRNWgrg4xEg+MkYJouaCbc=)
                          3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
                          4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
                          5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:b2:a0:76:a2:b2:19:36:29:11:aa:52:c4:b1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
        Validity
            Not Before: Feb  9 10:00:46 2026 GMT
            Not After : Feb 10 10:00:46 2026 GMT
        Subject: CN=e21019d8ffe3dcabcb409983a0840b4137e6f65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:ec:73:e7:78:4b:16:b2:5f:b8:8e:8c:09:
                    00:5c:ab:fc:c3:ca:48:95:a4:c5:db:bb:24:e3:20:
                    a6:b0:6c:57:14:7b:2c:88:28:c8:62:32:f7:39:46:
                    bf:be:f3:d9:78:c6:4f:3f:05:1e:2d:b7:17:33:1b:
                    a3:13:82:76:59:05:80:02:92:49:71:4e:54:70:a6:
                    7d:1b:37:ba:8e:88:e9:65:5b:1f:fc:3b:39:03:2a:
                    94:f6:f8:15:cb:8a:2b:f6:ce:96:65:bd:4e:ab:c6:
                    a6:2a:e4:95:ef:65:b0:5f:83:bd:57:fb:c4:ca:c0:
                    bc:34:c5:55:eb:4b:84:f1:92:18:55:06:c7:ee:ee:
                    66:40:f3:50:df:5c:2c:b3:6d:9d:c8:f9:11:6c:ea:
                    fb:8e:0d:54:5a:be:77:c7:a1:04:27:d0:4e:41:91:
                    3b:1c:a4:cc:65:f6:91:83:2e:c3:7b:88:18:25:cf:
                    db:79:79:b4:0c:11:55:64:e6:17:7e:bb:c9:50:85:
                    f1:b2:d6:49:ec:74:7b:70:0b:f4:1d:09:2f:74:e6:
                    eb:4e:79:79:23:c8:70:13:6b:84:1f:b7:97:17:b0:
                    97:fe:ef:3c:30:8e:6d:0b:02:ae:e3:1d:4a:42:31:
                    e6:b7:1b:bf:df:c7:8b:57:e2:4e:ec:6e:91:06:f9:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:19:D8:FF:E3:DC:AB:CB:40:99:83:A0:84:0B:41:37:E6:F6:5F
            X509v3 Authority Key Identifier:
                keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:ed:24:4f:ef:3b:ef:18:e9:71:a2:26:11:cb:b8:e5:62:
         63:9a:88:a5:e9:45:7b:d5:db:dd:25:de:fd:78:85:c0:d9:68:
         56:c5:c2:f6:e0:d1:6f:4a:c5:04:de:6a:09:e7:b1:b0:45:5c:
         1f:db:15:50:e7:4e:33:58:30:b9:01:0d:29:6a:30:c2:f4:8e:
         eb:eb:29:a6:bd:81:0b:1b:9e:b5:e3:94:f3:b6:b2:dd:b0:0f:
         4e:79:09:7e:e2:dd:27:22:41:5b:c0:2e:ed:71:b8:27:d2:5f:
         30:75:3b:af:b1:f6:74:88:b1:e5:22:3a:62:1b:d1:5b:e1:4d:
         c2:6f:dc:ec:e5:f1:35:53:72:91:5d:92:8e:df:7a:65:51:88:
         9d:4e:48:a2:99:82:19:9b:e6:78:64:5c:ac:6c:42:c3:fe:b0:
         26:b4:79:80:a4:48:da:78:98:3f:b2:f6:cc:66:8e:7b:72:86:
         b7:fc:e5:cd:1e:34:23:81:ba:4a:2c:08:82:66:f8:df:ee:63:
         e8:07:bf:41:ef:14:55:fa:0a:fe:3e:30:c5:9a:de:98:7a:27:
         17:8d:c3:25:ee:ae:c4:3c:24:07:bb:c0:58:b1:62:0e:f7:91:
         00:35:92:fe:b0:f3:ac:66:9a:66:6a:4d:19:1b:de:17:a1:f1:
         e6:bb:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:55 2026 by rpki-client