This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File:                     2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier:          QCmLeIhFSDqnGYyBT/KSQVWeuLBeUzoRMNnuw0QzMnU=
Subject key identifier:   05:C8:5B:94:03:49:0B:FC:5F:88:5F:AD:B4:8F:F6:8C:EC:A0:90:DC
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer:       /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial:       019C420F38A705CA636D2CEA1D52F3F421A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number:          0DE9
Signing time:             Mon 09 Feb 2026 11:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:19 +0000
Files and hashes:         1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: dMgnj5IocPo9JBHqIbvPg5oEIFJ5tdyFWLvQQ5cs1E8=)
                          2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
                          3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:38:a7:05:ca:63:6d:2c:ea:1d:52:f3:f4:21:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
        Validity
            Not Before: Feb  9 11:00:19 2026 GMT
            Not After : Feb 10 11:00:19 2026 GMT
        Subject: CN=05c85b9403490bfc5f885fadb48ff68ceca090dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:04:96:0e:bd:30:f7:0c:4a:aa:39:33:64:
                    78:53:bc:8a:c8:a6:92:f9:8e:e7:c7:60:5b:ef:e7:
                    ad:40:6b:b1:ef:b8:fd:e7:47:b8:2e:8d:75:6b:b9:
                    38:ff:52:e8:4c:9a:72:0e:a8:56:c3:7b:26:fd:82:
                    d0:a4:14:fc:ce:28:ef:0d:30:80:89:f4:f5:7d:24:
                    0c:6f:5a:84:1e:0e:66:45:06:17:f1:fd:9c:09:0c:
                    80:5a:2c:44:29:03:17:14:b5:f0:8e:5d:a7:ab:6a:
                    b4:80:04:7a:02:3b:36:0e:1d:74:da:ee:3f:22:10:
                    85:5d:45:d5:e9:42:36:3b:55:4e:f9:7d:64:ff:7b:
                    da:18:2e:fc:07:be:92:b9:29:38:32:61:e1:46:01:
                    06:b7:95:76:71:12:ff:26:9c:a2:73:00:73:e8:a6:
                    f0:13:f2:f3:2c:0c:3d:a9:d1:ec:c8:a5:9a:af:78:
                    57:8b:aa:70:e3:25:bf:b0:4f:93:ac:e1:29:c2:26:
                    c5:29:0b:25:4d:ac:66:ed:6f:dc:75:6e:04:60:b2:
                    90:aa:c6:59:d9:ae:f2:92:0b:c0:3f:1e:19:99:d4:
                    c5:8e:54:34:8c:10:2a:cf:3e:1c:fd:e0:be:8f:98:
                    df:00:c4:10:64:a6:0c:a0:ec:52:56:b1:20:34:3d:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C8:5B:94:03:49:0B:FC:5F:88:5F:AD:B4:8F:F6:8C:EC:A0:90:DC
            X509v3 Authority Key Identifier:
                keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:66:9d:34:ac:81:a4:7c:ca:f4:cc:9b:9e:d6:69:63:18:d1:
         f3:1c:72:44:58:d0:45:d2:77:7d:d2:09:c9:57:9e:9a:fa:b4:
         0d:1a:05:1b:50:9b:22:9b:2f:28:89:4c:a8:fd:95:85:52:02:
         a6:a1:5e:af:09:36:f8:a1:8c:ff:46:f5:30:38:33:da:45:f6:
         d7:d7:be:fa:ac:18:ef:01:6e:36:3e:92:1c:25:5e:59:01:0a:
         bf:27:75:81:31:5b:2f:12:2b:5b:b5:af:f1:8c:6a:62:64:c5:
         da:8c:d3:a1:4b:9a:3a:6b:23:81:78:11:61:6b:05:a2:0f:a0:
         ca:e2:75:55:04:09:31:e4:f8:89:6e:ff:f6:64:31:79:b4:89:
         22:e3:c9:1a:aa:e5:47:79:20:a7:a6:7a:9a:a4:6d:ad:ab:d4:
         00:59:91:ea:2d:eb:3b:98:25:ba:93:30:61:9f:60:3e:0b:36:
         ae:bc:23:34:d9:72:56:e8:0e:63:67:e5:23:bb:84:c4:a8:8e:
         f5:70:d2:6d:f6:a9:f2:04:96:c9:d5:70:1a:8f:8d:4c:72:76:
         ba:d0:78:6a:bd:ab:a9:5f:44:b9:a3:43:5d:3c:f7:bc:fc:87:
         83:b9:10:80:fd:85:ef:29:84:a7:c5:f7:83:71:10:83:09:79:
         5e:f1:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:01 2026 by rpki-client