This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File:                     RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier:          EvCbBbVJjZRs3iRCM94JOOX7ctZ0YJz6A6rFys6vnN0=
Subject key identifier:   A9:E9:C4:A7:F9:CC:8F:CB:1C:F0:A2:DA:7A:80:22:7E:24:5D:0B:FB
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer:       /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial:       019C43FE924EE6AF04FC0B5431AE190B7CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 20:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:22 +0000
Files and hashes:         1: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (hash: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE=)
                          2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: tMmaltlRiresvftBUPt+niJR66DXD/v5GcNIRyQipCg=)
                          3: q3LGHpKLwXhUXQy5N3eUog7IGnE.roa (hash: ny31WBuWDPbRs/tDie0hbkT18Zoj64Zy4OoqbPqJ5zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:92:4e:e6:af:04:fc:0b:54:31:ae:19:0b:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
        Validity
            Not Before: Feb  9 20:01:22 2026 GMT
            Not After : Feb 10 20:01:22 2026 GMT
        Subject: CN=a9e9c4a7f9cc8fcb1cf0a2da7a80227e245d0bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:c4:89:b0:41:03:8a:78:2b:62:f6:07:57:
                    2e:9b:ac:63:a2:58:ca:64:ec:a4:e0:01:73:62:20:
                    f1:85:e1:00:0b:15:56:fd:9b:d6:81:07:8e:20:af:
                    ea:ba:40:89:b8:4d:24:ef:f9:18:68:c1:c1:d5:f5:
                    e1:d8:cd:4c:84:9e:4c:5a:d3:37:b5:8e:c6:d5:44:
                    f6:84:6b:e9:33:65:32:e3:0c:b8:c0:d5:ea:9e:c4:
                    b3:af:3d:51:58:ed:91:ac:8b:b6:6c:36:44:a5:7a:
                    08:6b:9d:a1:b3:0c:8b:0c:62:ab:aa:34:15:1c:e7:
                    58:05:b2:2c:58:a8:54:d0:c0:94:20:07:cc:f6:4d:
                    e8:23:ff:87:91:bf:41:12:c6:a0:63:1d:f0:22:e8:
                    c7:32:96:20:f1:c6:3e:9a:d8:04:e5:5f:c1:80:a6:
                    50:74:66:c2:00:ae:f0:61:6d:0f:86:57:19:3b:98:
                    34:0b:04:49:f2:95:19:15:06:38:de:ed:f3:c8:7f:
                    6c:fc:ff:02:aa:e0:e9:19:50:d8:59:f3:58:fe:de:
                    9b:60:03:95:b1:b4:c9:8c:42:96:07:bb:23:18:24:
                    4a:fd:87:5a:e7:6b:3f:84:e2:dd:d3:a1:99:8d:bd:
                    95:2a:12:b8:d8:5c:f7:2e:6e:85:40:ba:21:80:82:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:C4:A7:F9:CC:8F:CB:1C:F0:A2:DA:7A:80:22:7E:24:5D:0B:FB
            X509v3 Authority Key Identifier:
                keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:fa:bc:ad:be:03:02:be:c7:8c:83:ef:37:2e:a2:af:c0:
         6e:6a:b7:61:5d:ad:7b:1f:61:97:eb:fa:c1:ab:23:95:9f:a1:
         42:19:1d:1e:9f:66:aa:a1:84:96:7d:42:73:80:2c:2f:fd:9f:
         17:72:6c:e3:6f:2a:77:0b:75:7f:b4:a0:f0:5c:c3:3a:de:31:
         55:7b:9f:46:ca:6b:8f:10:2b:c7:1f:20:81:aa:a7:c4:43:5f:
         ee:67:71:05:d8:fb:e6:d0:43:10:5c:fa:ac:45:f1:cc:27:90:
         86:9f:ef:b3:3c:fe:1d:06:ba:b4:9f:25:b0:77:db:d0:e2:04:
         d4:72:91:85:42:2f:fb:59:96:ac:75:b7:0a:89:2b:a9:d0:b4:
         38:78:d4:b0:86:45:33:00:e7:12:b1:da:20:9d:df:17:44:5e:
         9e:36:be:e0:43:d2:cb:a7:2c:22:3b:0a:bc:73:2f:17:32:0f:
         19:5c:3f:d3:3b:a5:c0:d1:51:3e:63:6b:af:5e:bc:0c:75:a4:
         84:3d:f6:43:96:81:61:e6:c9:fa:09:e4:c2:ff:22:f0:62:33:
         ee:26:df:ac:7f:5c:17:75:5d:6e:bf:bb:8a:55:bd:2c:05:c9:
         a9:ad:0f:db:4c:32:23:4f:1b:8b:a2:a8:2b:1f:9e:c2:90:2a:
         da:76:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:53:35 2026 by rpki-client