This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File:                     2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier:          g8ooStyJPZYPtBwBrYglRzNmdbbhHoArPwzxRIzbHoE=
Subject key identifier:   2C:54:FB:62:D2:2A:08:74:F5:19:22:2A:50:42:7A:45:17:30:7B:82
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer:       /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial:       019C446BD6D42D47FF8BA34FA2A432CD3D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number:          1404
Signing time:             Mon 09 Feb 2026 22:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:43 +0000
Files and hashes:         1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: hwXjYVDXGVwkznKVC21hC5oOD6QDshQMWDVJgn2CQeY=)
                          2: URzbRc-qYA-jqGN2INzPGr3qGIs.roa (hash: pdWeMvzH737tn0fqVYH1dvD9WQjSjaeJBSWYN+4lA3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:d6:d4:2d:47:ff:8b:a3:4f:a2:a4:32:cd:3d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
        Validity
            Not Before: Feb  9 22:00:43 2026 GMT
            Not After : Feb 10 22:00:43 2026 GMT
        Subject: CN=2c54fb62d22a0874f519222a50427a4517307b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:7b:81:89:f2:12:3e:45:42:91:39:08:87:
                    b6:3b:4d:22:53:99:c5:37:94:6c:5f:26:46:d9:62:
                    98:35:e5:4c:0d:bf:46:85:40:d5:49:df:a7:7a:e6:
                    81:e4:63:09:a8:f2:7c:f5:ab:9c:47:1a:5c:fa:84:
                    98:f5:37:fa:1e:9b:38:e5:b6:43:62:78:b8:80:96:
                    5f:8e:46:1d:8b:ff:cb:31:43:5f:16:bb:88:4a:44:
                    54:cb:51:1d:f2:8a:16:58:53:1c:ed:41:4f:d9:e1:
                    7d:61:e1:d7:a0:58:5d:0a:ea:5e:e0:1f:cc:8b:2d:
                    dd:27:67:9e:e2:e1:ab:49:94:f3:b8:57:fd:5b:50:
                    f9:fb:1c:d0:53:d6:b0:73:e4:93:2b:76:78:4c:8d:
                    71:92:2f:21:a2:07:6c:69:32:32:e1:d1:6b:77:b9:
                    ed:2b:ce:49:bb:32:03:84:fe:e3:d8:64:e7:f0:0e:
                    87:3c:bb:4d:79:98:e7:24:ca:88:26:c5:11:1a:71:
                    27:97:ea:40:ff:54:4b:c1:6c:99:ac:50:d2:07:91:
                    76:37:ab:f3:c6:03:83:e1:ae:58:01:d2:91:1b:78:
                    b5:77:bc:f2:d8:11:97:47:2d:ad:16:06:06:91:e3:
                    56:b2:e1:02:4e:fb:3f:45:18:19:c3:c9:dc:ff:24:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:FB:62:D2:2A:08:74:F5:19:22:2A:50:42:7A:45:17:30:7B:82
            X509v3 Authority Key Identifier:
                keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:b1:c1:ca:c1:b2:cc:7b:e0:fd:9b:23:39:3b:e1:c9:02:
         15:15:77:4e:44:ff:bd:34:ea:c1:94:0d:96:a7:36:56:db:37:
         2c:4f:35:e2:79:62:b0:3d:a5:ef:8a:c3:5b:c6:f3:20:1d:45:
         1a:16:cf:2b:be:7c:0c:a5:96:bf:7d:63:12:a4:d9:a9:be:5e:
         a1:06:94:45:14:f1:d2:6c:3f:41:dd:e3:86:5a:c2:92:d0:99:
         4a:40:30:81:4e:df:54:b3:48:c5:e7:10:16:d0:6d:a4:f4:12:
         3a:c8:3e:12:f4:58:57:78:9e:e6:e2:c1:67:25:2f:3f:84:e8:
         b9:f2:6f:68:bd:dd:56:5c:6e:94:8f:cb:b1:1c:a3:db:53:0c:
         42:31:aa:cc:0f:b3:1e:c6:5d:88:c0:96:d1:08:24:69:29:8c:
         85:0e:82:fa:37:a8:93:b0:38:62:ce:0c:a9:35:10:0e:3b:19:
         7e:cd:9a:68:e7:0a:91:a0:3e:55:1a:f9:34:c8:c8:5b:42:3c:
         f0:21:d2:34:7c:b3:92:9d:f2:db:b2:65:5d:3b:87:c7:33:de:
         6b:7a:5a:e7:07:b9:a4:70:e1:cc:18:3f:af:61:26:c2:3c:07:
         d1:2b:28:9f:bc:59:bb:eb:5a:1c:cb:9e:5f:97:0a:8f:c9:b9:
         70:0f:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:34 2026 by rpki-client