This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File:                     CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier:          pLJLp4+gj79KtbrEHAcwfj27uM9vGqFTVgql/Ob+pN8=
Subject key identifier:   0B:5E:8B:AD:AD:35:4F:7B:B3:FC:EC:07:3B:B0:BC:86:69:40:0A:24
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer:       /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial:       019C41A14E7338E5ACEA3A2068CE4ED31E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number:          132B
Signing time:             Mon 09 Feb 2026 09:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:16 +0000
Files and hashes:         1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: ww5ubpmA1WhhNxysy0OxdkQh3LtYJu3NB+H34zLTLkc=)
                          2: eXexMnsXhpiwYKh6Uvz65hPWHAs.roa (hash: Sv4osXCj3qnFKewpXCIs6tgLO2bpxFbqyIwOzHIdMNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:4e:73:38:e5:ac:ea:3a:20:68:ce:4e:d3:1e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
        Validity
            Not Before: Feb  9 09:00:16 2026 GMT
            Not After : Feb 10 09:00:16 2026 GMT
        Subject: CN=0b5e8badad354f7bb3fcec073bb0bc8669400a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:f4:25:44:14:e2:2e:7a:8d:66:4b:f8:f6:
                    c3:72:bb:3f:f9:37:7e:64:1a:14:32:61:b4:74:db:
                    23:f3:22:ee:71:f4:4b:bf:ad:87:bc:1a:79:d5:c2:
                    ef:df:11:1b:b2:02:7b:9f:bd:13:fd:bf:eb:c3:12:
                    bb:3f:d4:07:11:d3:77:04:c9:4b:41:a4:37:5d:d9:
                    ad:d5:f9:d3:20:1c:aa:22:ef:4e:cc:5c:b8:8d:fb:
                    eb:94:42:ab:25:a0:22:42:8d:14:4f:66:ab:b9:a5:
                    85:40:22:86:ef:a9:ef:06:92:4e:29:e9:e5:d6:43:
                    06:f6:9f:42:26:f7:66:b2:eb:80:93:d1:07:2f:a1:
                    d1:4d:15:fb:34:7e:6a:ba:eb:6f:0c:d5:2b:75:de:
                    df:2c:77:cf:61:cc:aa:f9:2f:82:8c:54:06:3b:1d:
                    72:88:a8:59:45:c9:40:7b:04:90:21:6d:83:29:79:
                    c8:d6:77:d1:ba:7d:93:f6:0a:a9:a4:ad:32:63:d1:
                    7c:88:72:66:76:37:4a:68:37:45:4c:ed:7d:6c:7b:
                    5c:b2:f3:15:d7:92:d1:77:e2:a4:4e:b1:23:26:4e:
                    c2:4f:3a:b3:b4:4e:91:6d:76:23:10:23:4b:5b:c9:
                    b5:42:58:56:a3:01:a1:66:9f:42:ab:92:32:06:ea:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:8B:AD:AD:35:4F:7B:B3:FC:EC:07:3B:B0:BC:86:69:40:0A:24
            X509v3 Authority Key Identifier:
                keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:12:dd:94:6f:3a:81:e8:9f:81:2b:e4:6d:0e:87:55:20:c5:
         5a:b6:df:13:dd:4f:6a:1a:7f:74:5f:7a:6f:58:91:b2:38:87:
         31:70:cb:c1:10:a5:97:d0:5d:cb:d9:0c:85:dd:41:2d:ab:ac:
         c9:87:3f:89:cf:d9:bd:c6:a0:d4:4a:c6:1e:f9:18:b4:c5:3c:
         72:80:89:bc:ea:2a:fc:ce:a3:20:c5:35:0d:5a:be:85:df:9a:
         b4:5f:57:3f:aa:dd:e4:5d:5c:82:57:a3:25:d8:da:bb:a2:d4:
         45:20:98:5f:30:f1:61:a1:00:16:54:05:fd:2e:86:80:b0:15:
         85:c2:40:ef:2c:f2:f1:fe:e7:18:87:c1:14:b0:77:3f:76:8a:
         df:83:1b:f0:f2:f8:65:ff:36:30:f3:db:5e:d9:2d:01:71:38:
         29:7f:03:27:15:92:38:81:52:c5:21:89:c0:8f:9b:ce:1a:9a:
         ff:1d:0f:04:f4:cd:a1:89:c5:34:81:16:a3:f5:89:c1:90:60:
         46:8d:fd:1b:04:74:59:ac:2a:0f:94:10:3c:50:a2:21:cf:74:
         c2:19:eb:2d:c0:ac:25:56:96:17:52:fc:3c:22:5a:79:e6:83:
         82:da:48:b7:3d:9c:54:3c:29:1a:8a:43:e7:8a:6c:5c:4b:65:
         9c:31:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:49 2026 by rpki-client