This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          M8Pa/s8EGyyftVpsFlK2v4RAsGT+HYyKkv3J5tJfhdQ=
Subject key identifier:   F6:DC:E0:2A:E8:10:B1:C7:01:AF:33:66:06:BC:83:47:4B:D3:8C:F7
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       019C427DADA6100036CD86567E249048F627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 13:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:58 +0000
Files and hashes:         1: cuuVCevCVUzGr-kAkN3m1WE9FDE.roa (hash: D4SsZHbQIEHtfRHXbg7otJ679eXTgRTgVgeBr6U9wDI=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: tpLyBOC5W2bZ+RX6dE6IEm6fBK74xOsAu8w5T7y+c9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ad:a6:10:00:36:cd:86:56:7e:24:90:48:f6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Feb  9 13:00:58 2026 GMT
            Not After : Feb 10 13:00:58 2026 GMT
        Subject: CN=f6dce02ae810b1c701af336606bc83474bd38cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:8e:b1:ec:2c:17:1e:68:fa:c1:07:40:97:
                    61:39:34:d0:cb:1a:ff:ed:1c:1c:e2:02:a2:8f:1e:
                    ee:ac:f6:ce:db:39:13:c0:58:bb:d5:f7:ad:20:bf:
                    3b:58:e8:92:68:00:5e:26:39:e1:83:d1:31:77:ad:
                    da:27:37:b8:3e:3f:f9:ca:e8:f1:3c:58:d5:11:45:
                    25:07:91:51:cc:d1:44:f2:17:85:1b:95:45:b2:7f:
                    99:17:1c:ff:de:4c:c1:fa:50:21:bd:b1:cb:bc:69:
                    9a:d6:53:57:57:64:1b:c5:59:7b:f3:3c:2e:e7:26:
                    9b:ce:11:d3:71:71:94:d1:ca:1b:ed:6a:53:93:c2:
                    ad:f5:51:81:11:85:fa:87:17:c6:9c:92:84:32:53:
                    cc:47:be:a6:a7:76:0e:09:87:ea:4b:5c:16:64:13:
                    ea:02:cc:b0:58:76:19:d6:a7:36:98:0e:6a:8e:9e:
                    76:50:7c:d3:f9:bd:b5:27:bd:aa:dc:c8:ee:d2:df:
                    73:eb:0e:e1:fd:75:c6:ee:a5:ff:f4:d3:d0:80:97:
                    24:2f:8b:c3:9f:38:45:57:12:80:90:35:5b:4b:7b:
                    66:12:8f:98:45:01:3a:55:46:6e:71:e1:e7:a2:0e:
                    04:bd:9e:86:5e:fc:a0:92:5b:6b:36:1f:be:60:76:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:E0:2A:E8:10:B1:C7:01:AF:33:66:06:BC:83:47:4B:D3:8C:F7
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:54:a3:88:aa:e9:fe:34:47:98:a7:d4:00:dd:c6:14:63:63:
         0b:32:9f:13:75:92:7d:11:2d:7b:b7:35:ed:57:67:ab:3c:f2:
         ab:d6:62:15:9a:d3:f0:0d:3b:ed:87:1b:b2:1c:9c:81:a6:54:
         45:e2:cc:6d:ff:77:75:51:c5:72:5b:4e:c5:bc:6f:4b:d5:81:
         75:7f:3c:8f:3c:ff:16:fd:a8:a9:00:09:fa:5f:ba:70:d8:d0:
         24:4a:50:9d:b3:83:df:30:94:06:ed:ae:32:2d:be:58:a0:33:
         0d:d4:b9:92:55:0b:d3:ed:8a:f8:af:ad:c2:62:10:9b:2b:7d:
         d1:95:89:46:66:19:0a:73:2d:92:d9:b7:08:0c:6c:fa:70:bb:
         66:b1:f6:a9:f6:1c:59:ac:6d:e3:11:1a:9c:15:21:cc:93:7f:
         db:b0:c9:a2:7a:f8:a7:0c:8c:4b:c5:74:5a:6a:26:45:4f:e9:
         7c:85:dc:00:c6:98:20:99:71:03:76:be:60:7f:9b:07:39:d0:
         83:15:49:ab:bc:f4:ad:af:01:88:21:19:16:0d:74:9f:84:44:
         f7:56:0c:fa:68:15:2c:8a:2d:fc:44:31:19:92:d9:87:2b:36:
         af:9d:7d:c8:02:73:12:da:79:53:81:41:f5:03:1f:22:1c:0c:
         36:e3:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:44 2026 by rpki-client