This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier:          Ku0e+V63s0UQN0zdENwf2Kw+U9f31cB+7ppYVBQ2xCQ=
Subject key identifier:   26:25:29:A0:C7:29:A2:BF:23:84:5E:2B:D9:C5:A8:7F:BF:24:27:45
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer:       /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial:       019C4359514FA15AF8D0F87D5A240748C87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number:          035C
Signing time:             Mon 09 Feb 2026 17:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:52 +0000
Files and hashes:         1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: ikAKeS6Wls9JIrKqHiskj/pzSOSRa4dMWS1On9xsDNg=)
                          2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:51:4f:a1:5a:f8:d0:f8:7d:5a:24:07:48:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Validity
            Not Before: Feb  9 17:00:52 2026 GMT
            Not After : Feb 10 17:00:52 2026 GMT
        Subject: CN=262529a0c729a2bf23845e2bd9c5a87fbf242745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:b7:23:d6:b2:43:39:c0:1a:21:7b:66:46:
                    ab:2d:66:60:34:90:0a:80:2e:ad:ad:63:49:e7:36:
                    32:ea:15:8f:0c:b4:9a:44:56:31:82:f4:25:3c:34:
                    2d:df:95:52:01:10:af:60:18:fc:49:e5:1e:62:07:
                    71:3a:94:44:66:54:7d:04:dd:81:48:db:24:47:77:
                    8f:53:2f:84:93:da:be:8d:43:09:1a:fc:9f:eb:48:
                    02:35:c9:d6:a5:2f:52:08:cf:66:4f:68:53:89:60:
                    ec:b4:28:5b:c6:00:68:72:9c:8f:02:18:a9:85:aa:
                    73:d7:7a:3c:d0:48:32:a1:aa:7b:32:12:b3:32:23:
                    d3:71:11:d6:3a:d5:ba:e2:ca:55:13:93:b2:d1:55:
                    37:69:b6:da:35:a9:cd:07:fe:79:99:44:89:5c:55:
                    86:42:4b:fb:af:06:04:10:bc:4d:22:07:58:f2:3f:
                    42:24:db:44:51:8b:c9:fc:e4:41:94:8f:b3:2d:be:
                    f4:aa:d2:4c:b5:57:2d:e0:6d:e6:97:d8:0d:65:10:
                    42:e0:b3:ee:dc:1a:00:34:8a:88:02:5d:14:ac:f9:
                    f0:fb:bc:0e:76:c9:90:e5:df:2c:b4:58:d2:e6:c3:
                    97:5a:72:7d:78:32:23:e2:94:58:e2:87:5b:80:ca:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:29:A0:C7:29:A2:BF:23:84:5E:2B:D9:C5:A8:7F:BF:24:27:45
            X509v3 Authority Key Identifier:
                keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c9:8a:23:e0:ea:38:20:1a:f5:b2:8f:ab:cf:73:46:84:75:
         04:1a:d5:e9:78:ce:52:f8:09:a4:b2:2e:36:db:59:bd:4e:25:
         50:78:9a:f0:61:91:a3:bd:56:c2:d3:6a:b7:af:e5:e0:4c:59:
         d4:c6:21:57:d7:39:cb:97:c2:d4:6e:21:0d:e2:b6:0d:cd:d0:
         b0:2f:7e:54:ab:e0:ef:f4:4d:d6:98:8b:00:9a:5d:41:5b:0e:
         a4:19:6d:d2:6c:c8:45:36:eb:12:9e:60:3e:95:40:b6:44:a3:
         71:bb:8f:c6:b1:29:c9:4c:a6:ad:53:b4:c9:71:69:1d:5b:2d:
         be:51:54:c9:fa:b4:bf:6f:b7:bc:d2:51:e3:e4:5f:a6:68:6f:
         32:31:55:19:41:1b:aa:0c:5c:b2:65:97:21:46:81:37:90:41:
         67:1e:e6:57:bb:78:07:31:95:ba:46:76:c9:82:d7:bc:09:5e:
         46:b4:94:ba:aa:7a:a4:07:12:72:7b:62:c1:71:cd:bd:de:85:
         67:d3:6d:46:b8:f2:3a:88:f7:bf:96:fb:0a:3f:32:36:dd:5d:
         81:df:cd:fd:fd:a2:9b:07:7f:52:5c:bb:10:cf:95:d3:a8:cc:
         7a:5e:a2:93:db:79:9b:f5:ba:aa:c3:88:98:bd:ff:b2:d3:66:
         c1:73:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:25 2026 by rpki-client