This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          I3ipaRJmUik2+X35BB3/kfz2xU3TFuIUXjmar/iL6Eg=
Subject key identifier:   D2:95:32:98:E6:32:4F:10:B9:23:F3:44:89:12:E6:DD:F7:7A:83:9D
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       019C432217FCA2170CAD4B9E8B97DEE15FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 16:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:33 +0000
Files and hashes:         1: BXc4TLN2CmhRJ2yOY8M4OZ5D4Ho.roa (hash: 4HtwLPKM/gPNWVp+9ccMF2LmMtM+RFcuZfWJ7xzFuic=)
                          2: Exw5qyeOsmaTxkuI-TVnrQ12bNY.roa (hash: 5anMOhWc/Hz9I+7ZHBfOzmKMYIxEdwwqXzXF5HG055M=)
                          3: _NBJFnlrLjlxU-NkUZtiAj1J8qo.roa (hash: HyoiSLaZjrIA6KdMeiHJErPb4cCaz1fssEroy13+1F0=)
                          4: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: m1LGiTjn4D8hQqa0ZLPpvas+cO25FXlw7dkd8o8orF4=)
                          5: e3iOXt4kN0x8sNUsLzYrx2gh1uA.roa (hash: wihWRQC4V6tMHjFES8yjsPfSZBAFUkTbgCOxUXuLKJQ=)
                          6: g4p9tyK55FRpeCWOSuZ8Bmz5xrg.roa (hash: hjRNfDC3YP5pXhjMmniTuNmauo3ts39PcOEU3dAW+7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:17:fc:a2:17:0c:ad:4b:9e:8b:97:de:e1:5f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Feb  9 16:00:33 2026 GMT
            Not After : Feb 10 16:00:33 2026 GMT
        Subject: CN=d2953298e6324f10b923f3448912e6ddf77a839d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:df:5a:d6:4e:9a:c7:e8:b7:00:83:fa:b7:
                    7c:62:05:c0:8f:27:18:fa:f0:8a:6e:4a:ed:ca:c8:
                    68:56:5a:96:54:9c:77:96:32:e3:50:bd:04:8e:8b:
                    3a:d8:91:78:ac:e6:f0:34:64:2a:52:2d:c6:ff:c0:
                    3f:14:12:28:11:fa:0a:46:fe:51:d9:e7:7f:11:ab:
                    5f:5f:46:13:f6:f3:a8:0a:b9:03:b4:9a:96:4a:0d:
                    8e:52:a3:ea:11:6e:f5:06:e5:07:64:e0:fb:52:4b:
                    04:5d:b0:e2:b7:25:99:c5:1f:84:90:66:80:b3:af:
                    7b:36:ba:a6:ef:76:11:34:7c:a5:f7:af:81:3e:72:
                    28:2c:7d:a5:56:7a:22:42:cc:00:c3:15:f1:1e:37:
                    0d:bb:d3:c8:26:b0:d2:9a:d3:e3:3b:cb:52:bd:c7:
                    f2:31:35:dc:02:ca:b1:08:f5:6b:2b:f3:e2:1a:6d:
                    f4:9d:b8:44:57:63:45:21:30:c6:f9:35:30:a2:ff:
                    e1:c7:99:ac:0d:9c:88:f2:0f:b7:92:91:27:ba:3d:
                    43:c6:14:e8:c2:99:18:b9:d6:a5:96:d4:b7:34:ad:
                    c8:29:31:de:51:0c:c4:74:11:26:dc:15:20:b3:c7:
                    25:1f:c1:c5:c5:65:7d:3b:58:26:8c:eb:a9:8d:3c:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:95:32:98:E6:32:4F:10:B9:23:F3:44:89:12:E6:DD:F7:7A:83:9D
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:21:05:6c:ed:2e:15:27:f6:74:ed:f6:2b:81:92:ae:9c:5b:
         ee:93:ca:24:b4:dc:2a:25:d4:5d:c5:5a:0c:68:d9:b7:bd:1a:
         d6:60:ff:92:a0:87:9e:79:10:aa:e2:70:4b:3f:c7:0c:70:77:
         cf:93:4d:82:bd:bb:b6:c6:55:52:7f:50:f2:07:b6:53:e3:01:
         ba:26:f2:90:37:6e:bb:50:f4:80:f2:29:c7:22:9c:46:20:af:
         39:7a:08:ad:14:b1:45:89:e9:a8:9f:e9:dc:85:57:e2:ab:95:
         85:a3:37:19:ae:b5:88:5e:ca:2e:2c:d2:ee:d2:9b:40:8e:34:
         81:dc:fd:d2:ab:81:d1:2e:53:b3:30:a5:9f:33:c9:b9:fa:a5:
         d5:6a:3e:f5:0e:90:48:7e:8d:51:20:48:a6:0c:dc:80:32:3c:
         81:82:82:43:7b:61:2a:a6:77:9c:84:e1:cd:62:b5:2d:cd:7a:
         bc:f4:2d:c7:67:59:75:a1:1f:22:50:e3:c4:ec:c8:7b:84:76:
         9a:67:2d:f3:e6:e7:67:2c:96:a6:4d:bf:13:e9:bf:4d:41:32:
         54:e2:cd:91:ee:b4:14:8d:60:db:d6:77:93:f0:3a:00:29:75:
         a1:f6:fb:d6:64:06:ff:8a:ff:09:c1:cb:8e:30:90:0f:10:14:
         c9:a5:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:28 2026 by rpki-client