This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File:                     coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier:          3ecwtDmAvXOmLVq0JQUT5dUpYx5zqo9WFB1tAMblkZY=
Subject key identifier:   F9:4A:95:A9:81:60:9E:71:96:C0:D5:55:F6:E9:A7:0A:32:99:0A:DB
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer:       /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial:       019C427D902E5135E17F2883805059378F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number:          0C1E
Signing time:             Mon 09 Feb 2026 13:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:50 +0000
Files and hashes:         1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
                          2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: 2Zlntp/fLa2cowTCbOPTy5qxkkq/Bf2tshAFYkPgYII=)
                          3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:90:2e:51:35:e1:7f:28:83:80:50:59:37:8f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
        Validity
            Not Before: Feb  9 13:00:50 2026 GMT
            Not After : Feb 10 13:00:50 2026 GMT
        Subject: CN=f94a95a981609e7196c0d555f6e9a70a32990adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:a6:c2:76:b4:04:10:42:88:a6:6d:6f:47:
                    80:7a:b1:71:fc:55:e1:1c:65:5e:8a:c3:a4:00:2a:
                    b3:7d:f0:b8:b4:b9:ef:f9:f0:a8:c3:d0:d9:2e:cf:
                    8c:e5:1a:8c:99:ed:a2:95:f2:36:3b:82:81:9a:3e:
                    1d:d3:0d:d2:8d:78:3a:64:1c:e3:82:ad:a6:9b:34:
                    55:a2:66:b2:68:c8:14:02:df:d3:bf:86:2a:f0:83:
                    c4:1f:b8:dd:78:77:9e:3a:2c:27:05:ad:eb:6e:ef:
                    65:d3:20:36:17:33:a7:b9:15:ac:5a:55:57:5c:6e:
                    30:a1:a2:0a:cd:98:1d:03:9f:e6:b8:87:a6:54:5f:
                    e3:5e:29:a9:5d:52:b1:fd:93:11:d1:0e:ec:ec:b7:
                    03:09:a9:7e:fe:dc:22:9a:ea:6d:6c:c0:80:e9:e9:
                    f7:0a:25:02:2c:5a:48:ed:05:eb:eb:32:67:8a:fb:
                    f7:ea:fb:a0:5f:d3:19:65:6c:3c:39:c7:32:ef:02:
                    f5:4c:df:56:94:f9:49:2f:5c:db:77:e3:f2:fc:1f:
                    ec:c3:b6:05:9c:e1:12:ef:eb:62:69:b9:ec:2a:fc:
                    ac:29:cd:94:ec:79:7d:46:d9:1e:12:0c:f0:d1:20:
                    ee:9a:07:21:9e:6c:16:d7:14:e2:68:2d:9d:5d:84:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:95:A9:81:60:9E:71:96:C0:D5:55:F6:E9:A7:0A:32:99:0A:DB
            X509v3 Authority Key Identifier:
                keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:40:05:64:09:ca:99:74:ca:b9:dc:b3:bf:8f:1f:23:89:
         1b:a4:ae:64:b6:c3:55:75:bc:7a:59:fa:9b:e6:b8:4f:ee:9a:
         e8:9a:9e:86:21:28:2d:7e:3b:df:dd:90:51:c2:12:e5:b6:58:
         15:62:ab:c3:40:c7:d7:94:95:d9:fc:c3:d2:1f:01:3d:fc:60:
         ef:f8:3e:e4:f3:4b:93:70:63:ad:f7:65:0b:c1:3f:a6:41:82:
         73:2d:3c:05:31:76:42:6b:5b:0f:13:9b:7a:78:ab:40:86:93:
         7a:d2:43:de:bd:1e:2e:55:50:b4:83:30:04:7b:2c:37:46:1f:
         28:df:e4:d9:84:97:dd:b9:fe:51:ef:9f:02:05:49:0e:2b:f0:
         8f:3a:71:7a:33:77:d4:ad:b2:5c:d1:69:f7:15:ad:19:1e:e4:
         2e:67:38:65:37:26:e4:f1:64:f4:17:c1:20:3a:dd:ab:a7:c7:
         56:a8:d7:e1:74:d2:6c:27:16:bd:41:1b:fc:a6:6d:bc:51:0b:
         8a:d4:a9:a1:51:35:e0:f4:ff:34:26:56:b8:a5:78:1d:c1:40:
         61:76:a2:cf:18:65:1c:b5:5a:01:1c:65:5b:c6:a9:65:e9:bb:
         36:08:4d:20:5f:99:78:88:ed:bb:6e:0e:47:83:a2:dc:27:ba:
         20:59:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:41 2026 by rpki-client