This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          9ZMBRZXYWjdO4HepiYprlg+dU7bekrodIluy6fXdx30=
Subject key identifier:   75:F0:2D:7E:3D:42:27:BD:53:01:8E:C7:EC:C9:D4:E2:52:07:E9:01
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       019C42EB9B03DA8DB9D1F5930D8092902094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:02 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: jBV3IWi5QC81yYstggzN1jBNSlCsvLNXb89l4Zg9r18=)
                          2: bxelCDFcvnlj3q_RHWvXRa9LBvo.roa (hash: 3ikPYI75wofgR7u+U2mor2EPydTGzEdXUY4L1ZgdpHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:9b:03:da:8d:b9:d1:f5:93:0d:80:92:90:20:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Feb  9 15:01:02 2026 GMT
            Not After : Feb 10 15:01:02 2026 GMT
        Subject: CN=75f02d7e3d4227bd53018ec7ecc9d4e25207e901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:1c:6a:9b:9d:11:77:9c:ce:5e:e5:03:03:
                    4e:48:92:fe:0e:c9:33:95:59:1a:0e:13:a3:8b:b1:
                    66:bb:fe:91:9c:c8:05:5e:b5:38:a6:9e:cd:eb:4c:
                    15:4c:98:40:1d:6f:49:51:ac:f4:7e:30:d5:30:b2:
                    b3:08:cf:b0:7c:38:f2:65:a9:87:dd:e9:dd:6f:e7:
                    62:16:e6:9a:1e:8d:05:b6:67:ec:c1:a2:ab:b7:fe:
                    bf:86:4f:25:57:5c:7c:4c:a4:f3:f2:11:43:8a:8d:
                    68:56:ee:95:f2:12:21:56:5b:3f:08:a4:2e:ba:23:
                    93:ac:63:72:74:92:5d:91:ab:30:32:c2:8b:a2:c1:
                    3a:f0:ed:8d:ae:36:ce:6d:d7:82:18:aa:92:ce:84:
                    7c:8d:6f:35:65:dd:ff:1c:4c:59:38:6e:1c:74:29:
                    65:63:74:27:61:fd:92:57:77:8b:e1:1d:ac:6c:f3:
                    79:6c:b1:18:af:01:aa:03:81:70:92:3d:e7:fc:39:
                    10:f3:9e:99:1c:2f:1b:31:d8:37:b5:47:10:ba:c5:
                    6d:74:e0:21:ce:22:fb:dc:9d:48:2c:18:e8:ac:d4:
                    1c:73:9b:64:f7:a7:92:56:a4:a0:0e:88:b9:8c:5a:
                    66:ec:f1:f1:67:de:fd:42:fb:29:62:2c:d5:5c:d1:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:2D:7E:3D:42:27:BD:53:01:8E:C7:EC:C9:D4:E2:52:07:E9:01
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:25:61:ed:c8:77:bb:cc:e9:47:12:5c:16:0a:3b:e9:37:cc:
         17:c1:a1:69:e9:37:83:b1:fd:e3:92:4c:c1:dd:47:25:42:c2:
         90:72:44:2a:82:be:26:6d:6a:df:89:df:22:36:d4:79:7f:f3:
         21:85:d3:9e:ae:a5:c9:34:30:be:0f:1a:0e:b7:2a:1b:ae:1a:
         76:4f:39:8f:af:34:7f:a5:c9:34:8e:46:5e:c9:68:39:78:df:
         4e:12:9b:ec:fa:82:f4:42:14:70:b3:6c:52:a2:a6:52:1d:3e:
         8e:bd:60:e1:f4:2c:5d:f3:b8:9f:c2:c9:06:fa:04:98:d2:c7:
         45:f5:b6:8f:aa:05:0b:da:cd:b0:f4:e2:06:22:8f:32:c8:0b:
         64:6f:85:59:b3:97:bb:d4:2f:1b:d7:84:25:8d:5e:0f:5e:44:
         ea:7c:a6:4f:b8:6b:42:8a:bf:c4:b7:16:bb:bd:96:df:d0:98:
         ac:ca:e6:35:ba:bb:ca:17:38:98:d2:07:60:3b:2c:80:fd:18:
         3f:76:83:38:36:4d:45:0f:fa:fd:e4:e2:00:ec:55:f4:e3:91:
         16:54:71:30:4e:04:be:68:40:56:35:34:60:9c:3c:91:b9:7a:
         ee:b9:54:2a:b8:48:ad:28:70:3e:c2:c6:23:fd:ce:0d:a7:67:
         b4:c8:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:09 2026 by rpki-client