This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
File:                     AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft (raw, json)
Hash identifier:          ABMN+CA5He1ENuIW8qkVr30533I8rbnHm0BoIGW6OOc=
Subject key identifier:   8D:97:8A:75:12:DE:6C:29:C6:89:9A:F2:FD:5C:AF:8D:26:5C:12:DE
Authority key identifier: 02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
Certificate issuer:       /CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Certificate serial:       019C42B45BD33A11B1159AA7B9E11E253366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
Manifest number:          2F
Signing time:             Mon 09 Feb 2026 14:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:42 +0000
Files and hashes:         1: AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl (hash: 9T5ur9a+CU51SjXQiXYyh+7/ESLhivt5rdlkYWYIvdU=)
                          2: PSP80WvoeTaK8qKEzf5_rBtjRiA.roa (hash: LuMRxihjGgulFR1nfBGt4wCkEt33UifqQX3zhBk0Gig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:5b:d3:3a:11:b1:15:9a:a7:b9:e1:1e:25:33:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e5ee3fdb169535419e794ee8c813d9293581ca
        Validity
            Not Before: Feb  9 14:00:42 2026 GMT
            Not After : Feb 10 14:00:42 2026 GMT
        Subject: CN=8d978a7512de6c29c6899af2fd5caf8d265c12de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:02:dd:94:50:0a:bb:73:15:e9:57:2a:6c:
                    01:70:2d:83:1f:14:de:76:45:19:f6:1e:50:bc:5b:
                    ff:24:c7:ec:8b:78:0d:c2:2a:19:7d:f7:38:43:ed:
                    ec:2f:b7:b7:da:8d:8c:8c:78:9b:9c:0e:d0:e1:95:
                    30:6b:bb:62:e4:16:f8:ce:2e:40:25:13:17:57:a1:
                    cd:2c:94:a7:37:26:df:6b:0a:0d:78:00:8c:69:10:
                    89:1b:50:b3:ab:13:60:89:32:06:cc:f3:2e:6b:62:
                    df:9b:c8:ff:d7:3a:52:3d:f9:ae:c6:30:fc:29:c1:
                    fe:61:1d:be:58:d9:a5:2e:92:97:8b:54:41:44:83:
                    3c:e3:36:05:04:02:4e:75:8a:0c:9f:2c:e6:c8:ea:
                    49:f6:1c:eb:dd:fe:0f:35:fc:b0:1c:24:6c:31:fe:
                    0f:2e:c9:2d:a7:c9:53:c7:10:79:1a:b7:a0:ad:ce:
                    48:23:42:79:6f:f5:29:25:4b:8c:99:58:25:1d:ac:
                    54:ea:5c:14:ae:c7:a9:94:23:d0:ab:28:af:41:c3:
                    9a:1e:af:37:1e:4d:2b:1d:35:1d:9c:7c:c1:ca:ff:
                    46:d5:d8:7a:4c:4e:26:56:5a:40:5f:46:15:bf:cc:
                    e2:ea:33:c8:67:70:68:65:c7:de:bb:da:67:b0:d5:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:8A:75:12:DE:6C:29:C6:89:9A:F2:FD:5C:AF:8D:26:5C:12:DE
            X509v3 Authority Key Identifier:
                keyid:02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:51:f3:63:e9:8e:45:5f:37:da:01:10:e2:ad:9c:e0:fd:
         93:08:9d:cc:b8:d1:2e:84:d4:04:d6:e1:56:12:ea:89:83:9f:
         43:a2:d3:f1:18:72:17:fa:da:88:fd:54:d6:5d:94:a1:83:75:
         1c:fc:d8:8a:0f:6f:b7:a5:43:d3:e8:ae:38:de:ca:8d:68:d2:
         ae:50:c5:c4:66:87:2d:ac:39:7c:fb:a1:1d:0a:1f:4b:e7:ae:
         67:24:78:ca:cb:7e:0d:ef:71:e9:1d:69:93:77:25:96:2c:2b:
         61:63:b0:95:95:cf:b1:26:db:98:fb:ad:dd:dc:f0:58:ca:70:
         d8:3a:af:81:93:56:72:ce:8e:82:c8:31:b9:e6:ac:7b:64:f8:
         3b:a0:13:93:77:98:ce:8d:5c:56:e3:b5:71:2c:6b:10:84:e1:
         f0:84:0e:c4:c7:17:4b:df:1e:e2:f7:88:85:b4:7b:bf:48:7d:
         3c:0c:58:d6:05:4e:bd:91:c6:9e:b4:5b:c7:ff:9a:2b:4c:a3:
         a7:f6:88:2b:76:a3:84:03:87:c9:aa:c2:de:9e:09:dd:5f:97:
         92:a6:8e:7b:6f:4f:25:f2:7f:65:b9:33:b7:ae:86:ec:90:52:
         d3:f5:37:90:aa:b3:94:b6:65:04:df:e2:ee:14:c6:98:c9:7b:
         ee:9e:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:11 2026 by rpki-client