This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File:                     S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier:          IBXOpEMSGKzNHj1f5/qFQacdIH4/lmuRiXDYt0Zr2Q8=
Subject key identifier:   95:77:07:AD:6B:C7:D9:D2:88:A0:07:30:20:97:81:63:00:5F:EC:A6
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer:       /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial:       019C438FDDF6105A1262D6211F9C53D9CE1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number:          0396
Signing time:             Mon 09 Feb 2026 18:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:27 +0000
Files and hashes:         1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: iNrnH8ikaVbn9vSS81F5L/3JemagT805o+2NiO47tek=)
                          2: stwCeWMzGL7ZQca28YuX50xe0DI.roa (hash: UrA8IbR6QSjufOgIOzy59dzg6O9c8YCged1nYroTzqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:dd:f6:10:5a:12:62:d6:21:1f:9c:53:d9:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
        Validity
            Not Before: Feb  9 18:00:27 2026 GMT
            Not After : Feb 10 18:00:27 2026 GMT
        Subject: CN=957707ad6bc7d9d288a0073020978163005feca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:f6:2e:ea:77:00:7c:e0:af:44:d5:3b:34:
                    b6:76:fa:1d:43:25:2a:e5:43:b1:95:71:41:13:c3:
                    d2:75:58:92:e7:11:c3:de:73:42:53:ab:d4:75:33:
                    3e:b7:b8:63:82:f5:83:ca:aa:36:0d:13:9d:66:3c:
                    04:24:4e:8d:84:a8:88:df:85:e4:f9:5e:18:d0:fc:
                    92:cb:d9:aa:ef:f4:40:c4:50:39:96:49:0c:97:30:
                    c3:0c:92:c9:0d:61:ca:eb:40:44:0a:98:b7:6a:01:
                    83:cc:a6:3e:2a:df:9c:0f:4d:9b:66:7b:91:f1:bd:
                    f9:91:bc:d9:3c:c4:f6:23:62:aa:36:7b:64:43:30:
                    e5:2d:7f:87:49:37:03:93:54:a9:b1:84:0c:f7:cb:
                    d6:6d:d2:75:1d:37:bd:39:d5:2b:95:a5:e0:3d:b4:
                    cc:bb:0b:aa:20:ca:33:ed:fa:47:7c:a3:84:dc:da:
                    5d:64:03:42:c3:4f:b7:0e:5f:7a:52:9e:3f:c9:ed:
                    c4:03:f3:6f:7e:74:24:3f:ff:d2:d9:2f:54:56:0d:
                    2c:8c:96:fc:39:24:26:df:02:31:5e:8c:2a:1c:91:
                    72:20:f4:49:ad:70:96:43:e5:49:8b:93:25:04:92:
                    f5:ec:03:af:9b:dd:e0:aa:98:ed:f8:63:a4:a2:5c:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:07:AD:6B:C7:D9:D2:88:A0:07:30:20:97:81:63:00:5F:EC:A6
            X509v3 Authority Key Identifier:
                keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:c0:4e:47:81:89:de:01:2c:55:52:82:7b:9b:90:50:be:
         f8:04:4a:48:47:ca:e0:30:5f:b1:26:6e:eb:0e:37:2f:e1:87:
         01:ed:c8:2a:38:b5:1e:ed:3e:72:fa:28:d9:f8:88:4f:72:77:
         42:bb:c4:d1:c1:04:51:b2:f0:e8:66:f7:9c:95:41:62:03:7f:
         d9:24:c4:06:f7:57:bb:bb:88:9e:40:74:a3:7d:92:c1:e6:aa:
         9e:35:65:8b:18:17:8a:85:69:c3:b1:0e:f6:a7:c4:10:d9:1e:
         79:e4:64:44:d1:0d:d0:d9:43:87:fa:d1:e5:cf:97:3d:21:14:
         fc:3a:61:7b:c1:59:54:3a:0a:6f:5f:c1:98:52:a3:d1:d4:48:
         cf:8b:cd:75:29:e9:03:a9:b3:dc:00:f3:78:53:1b:31:a2:a5:
         73:dc:b5:59:d0:e3:84:fd:4c:53:e9:26:52:ee:7b:80:b7:0c:
         67:ca:46:ea:7c:cc:24:45:f4:77:37:72:99:04:ca:94:c9:e3:
         41:e6:a6:32:ae:19:00:1a:77:88:e7:b9:4b:a0:20:ae:f2:ff:
         21:67:c9:fb:78:f3:68:d4:27:2f:64:10:85:cc:fd:0c:73:28:
         ef:57:92:f8:12:05:d5:f3:44:68:7c:07:19:7c:da:79:d1:28:
         a0:1f:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:06 2026 by rpki-client