This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File:                     2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier:          Ra9oMJHxCLfKsokY4Hn3Ij3OpnzesZ2gC8sowCYraUg=
Subject key identifier:   2F:1D:A1:C3:C6:96:73:97:19:3E:CE:A1:AD:16:E1:1B:72:1E:A3:41
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer:       /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial:       019C4246303B20A1A5D006314B7AC1EA2067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:21 +0000
Files and hashes:         1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: H7Imb/8U9qj9d+iOMlUOoMYrRI1ZSKv8guaowouTieM=)
                          2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
                          3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:30:3b:20:a1:a5:d0:06:31:4b:7a:c1:ea:20:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
        Validity
            Not Before: Feb  9 12:00:21 2026 GMT
            Not After : Feb 10 12:00:21 2026 GMT
        Subject: CN=2f1da1c3c6967397193ecea1ad16e11b721ea341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:66:92:0b:b1:6a:d8:b7:e8:63:f5:ac:9d:
                    7e:d8:da:7b:06:97:2b:12:06:09:ff:96:8a:2f:9d:
                    c1:85:81:06:e8:4c:7c:e5:01:f9:bf:6f:85:52:ba:
                    b8:01:1c:02:c7:d6:24:cc:57:c6:7a:2a:25:ba:81:
                    46:33:61:79:ea:44:c9:d2:cb:ed:92:aa:45:0a:3c:
                    fc:26:12:1f:78:eb:d6:6e:dc:5f:32:93:5f:5b:c3:
                    2f:d9:28:b4:db:bc:53:cf:59:41:59:72:39:06:60:
                    a0:07:05:8a:19:5a:ca:a7:d3:d5:e5:27:b0:ef:d1:
                    d4:10:e3:3b:cc:64:5a:6e:ab:38:ae:b0:57:73:93:
                    35:09:5a:23:10:2e:7c:9b:bc:36:b4:04:ff:21:c6:
                    a3:3c:b3:b1:3f:c0:ab:01:24:71:28:73:5d:1c:17:
                    74:9b:d9:4b:b3:2c:26:e9:1f:0f:24:cf:91:2d:4c:
                    ab:18:f0:9a:ca:85:69:e5:c8:84:ae:1c:9e:45:da:
                    97:20:c0:25:7f:ba:dd:9c:8b:0a:65:7a:ba:e6:80:
                    ae:a5:2b:4b:55:6a:8f:35:eb:a7:71:4e:7e:66:a9:
                    c4:1d:02:54:f0:eb:ff:9b:a7:f7:34:c3:f2:d5:90:
                    85:6c:66:87:01:70:12:25:a3:13:b2:df:82:9e:25:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1D:A1:C3:C6:96:73:97:19:3E:CE:A1:AD:16:E1:1B:72:1E:A3:41
            X509v3 Authority Key Identifier:
                keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:df:da:2f:fb:53:dc:52:ef:df:df:db:e0:cd:ff:bc:69:
         e9:06:b3:55:78:44:78:9c:20:c4:b4:ea:ec:ce:7e:21:0b:08:
         dd:8b:96:03:b0:56:2d:e7:c7:6f:f7:7c:3b:3a:cb:6d:3a:d3:
         c6:67:61:c3:0b:40:16:fc:db:5a:7d:7f:0a:29:74:0f:f2:82:
         42:36:be:81:9c:9d:11:06:89:a5:3c:74:c9:c9:ce:59:83:3a:
         04:52:02:73:a4:ca:26:99:46:e1:57:55:39:49:01:88:84:10:
         a8:5e:4c:31:f5:b4:48:75:84:41:f4:4d:2b:72:96:8e:21:2a:
         23:51:46:04:31:bd:3b:9e:9f:18:26:40:37:67:6e:62:32:67:
         6d:41:68:1b:90:3a:38:bb:59:32:9f:45:0e:f8:f4:96:d1:59:
         f4:5a:5c:f7:17:a7:20:24:15:b0:41:f2:96:64:10:24:c2:bb:
         8d:37:ad:52:e0:82:5f:0c:01:c3:31:b1:c7:27:b9:b2:c6:c6:
         4f:8f:0b:14:e6:39:5f:a7:4c:ed:7c:0d:c9:1c:c4:11:d4:3c:
         31:b1:27:be:fe:c3:60:d5:cc:b1:6a:ab:f8:9d:c2:55:d4:2f:
         41:4f:b9:2e:2d:fb:f3:ed:cf:91:50:03:b8:b5:3d:7c:9b:c3:
         22:c5:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:47 2026 by rpki-client