This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
File:                     cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft (raw, json)
Hash identifier:          VbMNcZtFhSkf0uXR4C7pgSuXOh4z5gpSJatoh85O6BU=
Subject key identifier:   D3:4B:1F:FA:00:A4:79:98:A8:45:DE:15:8E:DE:68:63:21:2B:CC:ED
Authority key identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05
Certificate issuer:       /CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
Certificate serial:       019C427D3D69C6FFA11E288649E6F3C83622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
Manifest number:          0170
Signing time:             Mon 09 Feb 2026 13:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:29 +0000
Files and hashes:         1: MavU-BpK71I0RuG6BWQyo5A4rwE.roa (hash: DgwXevlFtsD41Y9+x94lj6YCu7nKmCUlDawGbPcfkb4=)
                          2: cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl (hash: KWwRejQ0Pr2ulYNNB8hv+Ed3/MCzhjNTGGWnN5RepD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:3d:69:c6:ff:a1:1e:28:86:49:e6:f3:c8:36:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
        Validity
            Not Before: Feb  9 13:00:29 2026 GMT
            Not After : Feb 10 13:00:29 2026 GMT
        Subject: CN=d34b1ffa00a47998a845de158ede6863212bcced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:34:73:59:35:26:60:1c:60:10:ac:f9:94:
                    92:14:c2:60:59:d3:ff:78:a2:b6:ea:e1:96:3a:a8:
                    4d:6a:05:02:f8:e9:01:fb:63:0c:28:2c:1c:e1:9a:
                    d2:84:c3:9a:b4:6e:f7:a7:6a:d2:ed:89:9b:2a:26:
                    f4:0c:4a:29:96:4a:16:8e:10:4a:45:5f:68:48:69:
                    e0:49:e6:9d:35:75:5e:2c:af:c7:71:fc:15:8c:65:
                    ad:1d:07:35:6e:eb:05:ba:af:b4:51:11:d0:a2:f8:
                    eb:b9:d9:e1:3a:62:1e:20:c2:24:a4:91:e1:f5:be:
                    97:2f:1c:07:8e:f0:ff:64:b9:f8:15:da:a3:55:4e:
                    3e:4f:89:1c:ea:04:18:a1:30:62:0e:ad:b7:5f:75:
                    23:0b:57:3a:3c:c8:41:fe:98:52:2f:77:a8:37:ca:
                    37:ad:67:8a:c9:c3:70:c0:98:c2:42:04:dc:f9:99:
                    03:a3:be:d7:37:f3:81:3f:26:3e:2c:ad:32:a8:4e:
                    1b:1e:61:02:4c:23:29:97:ee:f1:7e:a9:ff:a8:a3:
                    1d:14:c9:9d:1c:8c:4f:1c:3b:e0:74:88:29:b0:f3:
                    de:91:be:b3:fd:95:16:e1:14:05:5f:ba:5e:83:15:
                    7c:a5:8b:60:4d:ac:be:12:09:64:96:0c:f5:fb:31:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4B:1F:FA:00:A4:79:98:A8:45:DE:15:8E:DE:68:63:21:2B:CC:ED
            X509v3 Authority Key Identifier:
                keyid:70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:11:63:76:21:b1:1f:2b:1c:0d:a0:e2:95:d3:12:75:b3:
         ed:d2:7a:4f:bc:0b:8e:a5:0e:f6:f7:c2:3e:a3:31:40:7b:8d:
         2c:77:00:9c:7d:be:78:db:18:48:3e:99:f7:1f:dd:7e:a7:f5:
         84:6f:47:ff:d4:47:e2:f0:a7:89:03:4d:80:52:7d:b2:dd:c1:
         1c:bb:f0:71:1f:f1:0f:30:bf:5e:c1:a7:4d:23:44:0a:0d:6c:
         d2:9c:25:34:79:e0:da:ec:86:bc:22:54:a6:80:76:67:bc:0b:
         f0:4a:77:d2:dc:5e:5a:ac:9a:5e:b2:ab:db:25:95:ee:6f:9d:
         67:08:01:57:e5:d9:2c:77:1b:56:33:6f:d5:0c:57:40:03:ae:
         6a:aa:61:66:cd:22:9c:e1:66:0c:e7:31:a0:c2:f9:0d:19:18:
         a4:d1:f2:3b:9b:ac:ba:3f:db:6a:cc:53:6e:2e:e4:23:33:a9:
         6e:f3:ca:1e:11:3e:ef:04:5f:10:9b:20:52:cb:50:d7:8d:60:
         28:5f:20:55:f3:5e:e6:a3:17:7f:a5:03:c6:38:4b:58:ff:f3:
         fa:34:de:32:e6:22:6c:50:5c:c2:a5:f9:98:b7:4c:6b:c5:14:
         c3:c1:81:26:c4:62:68:d1:3b:61:ef:11:42:dc:9a:d3:7e:0b:
         90:4a:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:16 2026 by rpki-client