This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File:                     cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier:          ny19hg1tr4szCtGxjC3Zkq6PiJbimcPzJuVcvZGm/jM=
Subject key identifier:   28:65:1A:7E:1D:E5:13:12:20:AA:D1:9A:43:C9:05:AB:23:11:46:7E
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer:       /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial:       019C43FE3FFCF7436B9C7C81D15ABBD73E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number:          01B8
Signing time:             Mon 09 Feb 2026 20:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:01 +0000
Files and hashes:         1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
                          2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: 8CnQT129N/yP5UtUkTW9BKvvwsAMsqS/CIYMUyyNC7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:3f:fc:f7:43:6b:9c:7c:81:d1:5a:bb:d7:3e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
        Validity
            Not Before: Feb  9 20:01:01 2026 GMT
            Not After : Feb 10 20:01:01 2026 GMT
        Subject: CN=28651a7e1de5131220aad19a43c905ab2311467e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:6f:38:13:26:ff:9d:15:34:55:a2:03:fc:
                    26:67:ce:26:d6:16:92:ab:34:87:09:64:cc:e6:55:
                    67:09:37:b2:47:4e:5d:12:ca:e2:61:22:da:4e:e1:
                    d1:41:66:8e:02:e6:8f:5e:3f:0d:52:78:3f:70:86:
                    7c:57:34:72:d4:03:72:a8:78:de:22:f7:fb:7d:2a:
                    e1:85:88:31:ee:bd:8a:4b:dc:40:11:af:d0:e5:54:
                    5c:7a:88:41:f4:9c:72:3e:cd:68:60:de:40:68:40:
                    5d:f3:2a:1a:b7:bf:ee:eb:c1:81:fb:07:85:38:07:
                    21:b3:b7:64:69:f4:c2:0b:93:6d:4b:e4:36:9f:0e:
                    8a:b7:69:d5:a3:b0:66:56:a9:3f:30:59:49:83:cb:
                    9f:6d:08:21:b9:09:7f:c6:dc:b3:df:45:69:f7:45:
                    fc:46:8a:88:bd:06:f1:ed:f4:ec:ea:97:d7:56:0a:
                    06:8e:8f:cc:d9:35:a0:fc:94:a0:07:7d:1e:c7:80:
                    94:29:b6:91:c8:12:e5:67:c8:6f:ce:bf:97:bf:dd:
                    c8:d8:a8:fe:d9:a7:b3:82:38:a4:a7:e7:1b:a0:d4:
                    db:12:8f:34:72:e9:2a:ad:1c:08:58:59:2c:b8:8d:
                    c4:01:b9:a1:3e:82:7a:1e:4d:9d:fa:8a:51:77:6b:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:65:1A:7E:1D:E5:13:12:20:AA:D1:9A:43:C9:05:AB:23:11:46:7E
            X509v3 Authority Key Identifier:
                keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:58:5c:75:60:18:fb:ab:0d:c5:98:33:fb:b5:9f:fe:98:18:
         6f:6e:2a:84:97:41:d7:48:57:31:95:09:4d:ce:34:aa:fa:93:
         ef:ec:c2:b5:af:38:3a:f3:1b:54:d6:2b:16:c5:48:b2:e5:d6:
         d9:2b:2a:a9:f6:d4:4b:09:8e:2a:be:d6:96:92:5a:2e:87:ca:
         c4:8a:0f:6f:64:02:31:58:32:21:32:b4:3f:f7:18:24:ff:a5:
         de:7f:03:09:8e:4b:a5:b3:41:21:0c:40:23:bf:e1:87:69:a6:
         21:f8:97:27:da:87:a7:12:b1:54:23:90:f3:e1:a5:af:7e:47:
         62:11:a6:78:2c:4a:ad:49:3a:cf:22:50:ce:a8:92:58:a4:fd:
         b1:11:ef:25:2f:4e:7d:de:c6:f0:5b:79:16:79:1d:88:ed:c1:
         51:8b:4f:98:73:84:60:af:3c:79:37:9c:10:45:83:f2:4f:cb:
         de:e7:68:a4:c3:45:e9:07:8c:08:46:42:0d:01:12:8e:38:17:
         22:31:4f:86:62:aa:21:4f:89:7b:c7:d9:2b:cc:7e:e8:11:6e:
         ca:1f:95:f7:1b:ed:2c:fe:2f:f7:4d:0a:20:e0:4b:56:76:b9:
         f6:57:5f:0c:90:72:e1:83:86:14:f2:04:54:40:68:f2:16:bd:
         0b:1b:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:58 2026 by rpki-client