This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File:                     rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier:          npFaLdYBj4Ym7C2Qxb3TO/5qeE6977G0L3APlVuJXdU=
Subject key identifier:   5C:A9:09:B8:98:8F:AA:15:4E:5D:5E:D4:6F:09:2D:CD:D2:3A:E0:76
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer:       /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial:       019C42EB21FE00942BB227256B7C3EF497E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number:          056F
Signing time:             Mon 09 Feb 2026 15:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:31 +0000
Files and hashes:         1: QogyvWPisdntpmICPJEytHpddn0.roa (hash: HNTYMpcwAwpgRtJkBvumc5GBtbLf8MOK6w7oCd2sY4A=)
                          2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: Pv0ze5mKtjSv8CTPQvZQB7fw7f2pBv1ziWOAy/fvURA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:21:fe:00:94:2b:b2:27:25:6b:7c:3e:f4:97:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
        Validity
            Not Before: Feb  9 15:00:31 2026 GMT
            Not After : Feb 10 15:00:31 2026 GMT
        Subject: CN=5ca909b8988faa154e5d5ed46f092dcdd23ae076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:e6:c2:a8:b2:1e:a4:76:f3:3e:05:de:5a:
                    16:0b:d2:a9:79:20:4e:e2:a8:06:0a:84:93:80:f0:
                    fe:0c:0a:3e:65:3d:38:23:37:16:f8:70:2a:fd:2a:
                    68:d4:40:b7:8e:59:d0:55:a3:19:3a:f2:0d:2b:db:
                    ec:a3:cd:e7:40:d7:0a:5c:e6:f6:97:70:70:c7:60:
                    d2:23:94:60:70:72:15:27:32:53:d9:5c:16:76:a3:
                    03:0b:4d:60:6f:86:fa:97:0f:1d:ee:73:43:e9:f7:
                    a9:47:77:44:07:5d:a3:77:d3:63:32:7f:c8:2e:bb:
                    e5:a8:77:49:ea:35:bf:17:4e:71:00:bf:5e:dd:7a:
                    c7:1f:73:3c:7f:44:31:fc:48:bd:5b:fc:65:4e:8a:
                    50:57:a7:6a:c3:d9:cc:84:ec:68:38:4f:1b:03:5c:
                    74:8b:db:10:4f:65:20:b0:d6:11:fb:56:55:7c:85:
                    d6:e6:89:02:56:7d:ca:e3:76:5b:d0:4a:a4:42:37:
                    dd:8a:6f:7a:92:72:27:d7:08:3c:ab:a7:6c:e5:0b:
                    65:a6:02:3b:cf:e7:23:b4:67:0e:5b:ad:2b:02:32:
                    fc:64:a4:df:17:a8:2a:27:4f:f0:4f:f0:84:67:ac:
                    a1:ea:63:76:a6:7f:6a:b6:9a:62:65:51:08:29:bb:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A9:09:B8:98:8F:AA:15:4E:5D:5E:D4:6F:09:2D:CD:D2:3A:E0:76
            X509v3 Authority Key Identifier:
                keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:6c:6f:f9:32:eb:24:34:9d:de:98:e7:0f:75:a9:d1:80:
         67:9c:37:ca:de:ec:6e:a8:6b:89:48:ab:44:60:97:b5:f9:ee:
         ff:a2:be:96:b6:2b:f9:01:ff:7b:3c:e6:e4:bf:01:41:4b:ed:
         d5:4b:5d:0a:e5:ee:87:f4:6e:11:9c:7b:9f:74:95:f6:7e:65:
         6a:bf:c3:f9:ca:f0:4e:be:bd:bc:6e:4c:19:b1:b1:0f:a5:22:
         50:33:bc:4f:b7:19:dd:48:27:8c:8c:f4:e3:2d:d2:9a:23:56:
         b7:9d:5e:6f:6c:cb:19:59:da:44:aa:68:bc:d6:8f:b7:71:08:
         30:0e:d9:e1:e5:2d:b1:3c:1a:06:f7:1a:57:e9:d2:70:ac:6f:
         13:67:7c:cd:93:c0:5a:6d:8e:3c:d9:46:5a:6d:94:9d:a2:bb:
         13:a8:eb:7b:63:66:53:91:f8:a0:70:a7:32:f6:a2:b6:90:d9:
         d0:4f:32:8a:a9:c6:fe:30:ac:e5:40:2b:57:0d:fa:17:cf:69:
         bc:60:cb:e7:ad:16:2c:0b:c3:cc:37:1d:94:d2:4a:c4:71:d9:
         fc:6f:6b:2c:11:92:35:b5:68:ea:9e:b8:98:6a:cf:59:11:55:
         00:34:f3:17:b4:2e:50:3d:b2:9e:a0:b3:45:2f:ab:2a:74:49:
         61:80:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:38 2026 by rpki-client