This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          E1w3JPZug3InPB4eXBf+XaO2gpD7G4MsB+44eUINQqA=
Subject key identifier:   7D:9A:B3:C3:6C:22:54:A1:62:1C:38:04:EE:ED:83:2F:68:B1:6D:9A
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       019C41A22EF4BFF669317755DA9EE3A3FB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          15C3
Signing time:             Mon 09 Feb 2026 09:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:13 +0000
Files and hashes:         1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
                          2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 1Jipx8f5JYcCGBf0T4QM8ybLVIGmk1bXnTnLgzZ99uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:2e:f4:bf:f6:69:31:77:55:da:9e:e3:a3:fb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Feb  9 09:01:13 2026 GMT
            Not After : Feb 10 09:01:13 2026 GMT
        Subject: CN=7d9ab3c36c2254a1621c3804eeed832f68b16d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:51:eb:b4:c7:bd:63:d6:1c:c1:cf:b9:d9:
                    fc:39:4e:e4:7e:63:ae:07:d3:0b:4a:f4:97:57:40:
                    56:5a:a5:b0:26:06:17:dd:14:21:07:e0:5a:77:23:
                    4b:1c:fd:9f:f2:6f:65:8a:2e:9e:43:ab:77:77:41:
                    b6:9d:a0:32:89:a9:4f:89:60:09:9e:7e:07:5c:aa:
                    41:01:7a:e6:b6:e4:3c:e2:0a:ff:d1:9a:4e:b2:52:
                    f8:b9:5c:fe:71:d7:b8:1a:eb:11:6f:cb:ce:64:9f:
                    78:36:50:d2:81:8f:7c:ed:e3:66:a1:3d:5d:ae:89:
                    99:89:69:36:47:29:cc:2e:3c:b8:07:63:a2:01:98:
                    55:f0:2a:5d:33:ad:5a:5f:bb:0a:6b:c7:3f:1b:a8:
                    c9:da:bc:d5:6a:44:9c:ed:e1:70:13:3e:e4:c4:81:
                    65:92:73:18:79:45:16:9e:04:8f:59:3d:ca:e8:6f:
                    b1:0e:ee:15:73:3b:f6:55:fc:68:99:3b:62:53:bb:
                    11:1a:8e:89:71:81:95:5f:ce:5d:13:84:13:e9:62:
                    7f:23:2e:b4:84:df:5a:94:c1:cf:22:31:f5:64:17:
                    66:3d:fe:d2:cf:09:04:d5:b6:e6:27:01:9f:16:53:
                    4b:8e:93:d4:8f:26:35:2b:b7:57:08:1e:fd:a2:33:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9A:B3:C3:6C:22:54:A1:62:1C:38:04:EE:ED:83:2F:68:B1:6D:9A
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:35:4f:95:ed:04:ba:f4:20:83:0c:ad:09:03:1b:6a:60:c5:
         e2:78:23:88:58:b4:43:1c:0b:80:9c:ab:8d:22:26:7f:ae:ed:
         3d:23:11:71:e7:98:eb:c6:90:15:46:20:05:d7:dd:e0:f6:42:
         78:a0:e8:f0:ac:29:fb:dc:51:78:8d:2d:9d:32:6f:10:69:54:
         7f:bd:e7:f7:94:9c:cb:fc:2a:52:82:00:59:13:b4:19:c3:0d:
         49:25:3e:65:3b:ae:3c:64:b3:22:a8:31:74:46:1f:0a:ee:27:
         d0:d2:10:44:7f:79:39:72:b8:3c:ef:65:fe:d9:fc:85:58:38:
         6f:12:8e:43:02:c6:f6:a8:de:55:8c:5c:89:76:7f:7a:57:ea:
         bf:51:43:bc:c4:fe:a3:6a:0c:20:ac:4f:80:6c:53:4a:91:a1:
         eb:c1:a5:43:42:f7:64:09:66:1e:8e:46:7c:bc:3c:bf:fb:1d:
         89:78:18:f5:a1:09:1e:81:60:8f:53:83:41:b8:0e:95:cb:84:
         bc:69:60:33:c7:8f:e9:8b:84:4c:0c:c0:04:dc:10:7d:9a:0c:
         03:4b:26:55:da:2b:ac:65:b7:80:74:5f:28:d8:04:8b:c8:72:
         b3:b8:06:6e:5f:6c:1d:8d:57:b6:03:b5:3b:c3:ac:93:30:01:
         92:9f:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:47 2026 by rpki-client