This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File:                     c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier:          XjuBbLqKsRC655ZpvKxprhJLPrjapn55CY9VaQ5ilQU=
Subject key identifier:   6D:57:90:80:B5:8D:40:8F:83:13:4E:FF:46:B0:46:9A:D0:92:EB:98
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer:       /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial:       019C446B9D6741D7FABC7A47B3A93BC6DED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number:          1012
Signing time:             Mon 09 Feb 2026 22:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:29 +0000
Files and hashes:         1: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: TTAUtkYoemYUjgPJKLWfuvkJ5S00fSysSXlVg+/rKUM=)
                          2: r5XWJBGKNAQjzKjZKPXr5PFoepw.roa (hash: ky24FBG3oozcNo49stCKjgR7t7k44RW8nw/ONOs9Mb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:9d:67:41:d7:fa:bc:7a:47:b3:a9:3b:c6:de:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
        Validity
            Not Before: Feb  9 22:00:29 2026 GMT
            Not After : Feb 10 22:00:29 2026 GMT
        Subject: CN=6d579080b58d408f83134eff46b0469ad092eb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:5f:9b:1e:90:39:d8:c9:64:a2:00:20:e9:
                    c8:32:b1:0a:49:56:08:ae:6b:fb:e4:34:46:15:9a:
                    ef:d6:43:bc:68:58:e2:1c:22:c9:ac:82:4a:c7:01:
                    b7:7f:16:09:7e:4a:50:1d:33:0a:68:64:07:fe:b3:
                    61:14:3f:2f:68:13:81:d5:f9:cb:c5:40:9c:15:27:
                    ef:c4:b1:9c:7f:e9:2d:16:11:e9:54:54:62:74:3a:
                    e4:b8:46:cb:d4:88:8d:63:f4:30:fa:9d:60:0d:7a:
                    5e:1c:0a:1f:b7:f1:c4:cb:83:9d:1d:ce:85:c2:00:
                    b3:db:1c:29:3e:e6:5c:90:7b:67:fc:39:25:a5:2b:
                    dc:c9:5e:6c:3a:b7:8b:33:dc:e7:43:99:2d:d3:0e:
                    84:0a:b2:5d:be:58:84:9b:ff:db:33:d0:82:39:f5:
                    30:48:ce:e5:b8:9f:71:56:bf:be:3f:f7:8d:31:61:
                    fb:a4:28:39:26:42:5d:51:1c:cc:77:80:50:f8:64:
                    bd:97:a6:11:2d:80:22:00:51:ac:7f:ce:57:c5:e1:
                    32:01:1c:4f:c0:23:e0:da:df:69:c2:75:a2:dc:3f:
                    37:16:a2:76:8b:8f:30:09:9d:7a:d7:ae:fc:57:b0:
                    7c:e6:8e:43:f0:6c:74:7c:6e:e7:43:10:f5:ac:d9:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:57:90:80:B5:8D:40:8F:83:13:4E:FF:46:B0:46:9A:D0:92:EB:98
            X509v3 Authority Key Identifier:
                keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:04:b5:8d:ac:b4:28:7c:e9:39:a0:67:fa:71:11:14:aa:a7:
         f9:f3:32:74:5b:38:b8:37:90:e4:4f:03:86:6a:10:43:e8:84:
         df:2a:07:ae:a2:82:5b:ed:c1:9a:0d:b6:c7:2c:82:91:3f:2a:
         41:67:d2:bf:b2:1b:ec:e8:27:c6:94:47:bf:06:5c:33:1b:d4:
         0e:0d:01:2a:37:55:80:c5:42:39:1a:80:3e:26:22:30:cc:d1:
         13:f1:68:38:dd:c3:18:58:15:74:46:8d:b9:a3:90:36:7e:9a:
         56:9f:9e:00:03:d7:7c:5e:bb:9c:4b:c4:27:64:4f:a3:5a:b6:
         64:7a:e3:5b:5f:4b:ec:b3:dc:bf:37:49:45:81:0f:d8:58:61:
         90:36:e2:25:be:4d:61:00:e6:ec:8a:a1:6c:5e:c6:bf:16:32:
         a8:07:a2:d8:a3:5d:a3:eb:ad:1f:55:81:50:cb:da:6e:4a:bc:
         f1:66:16:14:8a:68:82:72:90:36:0a:78:69:dc:22:c8:06:e8:
         b4:b2:2b:0b:cb:46:28:37:4d:59:66:4d:4d:57:d5:14:e4:d6:
         f6:a5:b8:4c:a8:12:6f:59:ae:74:c4:44:1c:cd:01:7b:4f:63:
         0b:12:85:28:72:16:cb:79:37:f5:db:9c:66:7d:ff:56:13:66:
         66:49:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:22 2026 by rpki-client