This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          ISHz7xMQ6mXzL/Y6MFuHZktRz5ZLa2vvrzh87jsEFCk=
Subject key identifier:   ED:B5:FD:1A:EE:B2:15:AF:77:01:EB:AF:DB:9A:B7:1B:94:04:F0:CB
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       019C4390C4ADE21AEB3D8119BDB06E65F9C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 18:01:26 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:26 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:26 +0000
Files and hashes:         1: Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa (hash: DuYV9Jw3WnzlLPMbHeqIhbHSehBiGNJ5e+2xEYBYW3w=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: aKCQEbIk/8LUIZto+cfQidTK2B9kwTgG/f7FN+QX9vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:c4:ad:e2:1a:eb:3d:81:19:bd:b0:6e:65:f9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Feb  9 18:01:26 2026 GMT
            Not After : Feb 10 18:01:26 2026 GMT
        Subject: CN=edb5fd1aeeb215af7701ebafdb9ab71b9404f0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:c4:7f:ae:71:c1:9c:4c:04:2e:76:51:2a:
                    83:75:a1:40:33:7e:e6:d7:17:e2:11:28:05:4e:82:
                    8c:40:f7:83:d7:63:a7:4e:11:40:9f:f4:21:09:5c:
                    81:30:9b:8e:41:83:e2:cc:76:59:c9:5b:d5:fa:7e:
                    61:de:c2:78:6c:16:6e:62:5e:64:98:d1:82:93:a0:
                    5f:40:43:de:84:a6:17:04:c2:84:8f:08:83:3f:62:
                    0b:d5:82:f5:72:74:66:0d:67:1c:29:41:9d:ec:76:
                    f1:3b:16:85:4d:16:8e:82:5f:ef:eb:cc:da:60:ba:
                    5e:72:cd:e2:67:1a:33:b9:4d:63:42:f7:f5:a2:5d:
                    1d:19:05:51:e0:fc:fb:aa:bd:b7:49:c6:01:f4:05:
                    6e:a3:b6:c3:4d:0a:69:d0:e7:4c:4c:e0:9a:42:cb:
                    a4:16:af:f9:a2:6f:05:39:69:d4:68:4f:be:2b:88:
                    3a:d7:e2:a2:68:68:b9:18:1e:c9:d7:d9:8e:ac:54:
                    12:0e:67:76:b0:03:32:70:f0:c5:ff:ba:76:11:8a:
                    af:ac:37:d2:85:d0:9c:8c:18:fa:ba:49:1d:f9:de:
                    f2:bf:24:45:77:c4:e6:cf:98:3e:e0:cc:c7:4d:64:
                    fd:8b:eb:f7:ed:a4:21:d3:32:b6:44:d9:2e:41:e6:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B5:FD:1A:EE:B2:15:AF:77:01:EB:AF:DB:9A:B7:1B:94:04:F0:CB
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c6:b9:cd:9e:15:2d:80:e2:b2:ab:01:9d:f7:f3:9d:c8:ec:
         bf:0d:4e:5a:3c:ec:4a:02:f7:b7:be:3f:dd:2f:91:04:a3:47:
         6b:7a:8e:ad:a0:fa:13:47:b6:53:6a:c2:d3:6c:03:29:8a:a6:
         68:f5:b2:57:2b:d7:3a:21:76:89:d0:30:be:b2:4c:ff:2c:55:
         99:bc:1b:18:b7:db:3b:f6:ed:af:c3:55:b5:31:37:a1:29:86:
         92:b8:aa:df:30:32:ea:ff:67:7e:8a:e3:9f:36:0c:3e:03:40:
         de:96:cb:b5:84:00:e2:ff:76:6e:7c:1f:79:b0:8f:16:9b:30:
         6c:b1:0a:2a:23:ea:f4:37:ea:41:3b:54:95:e1:51:86:c8:5d:
         c0:b5:4f:8f:53:5a:99:c1:90:dd:18:0d:2b:0c:38:59:38:0e:
         2f:9b:ed:cb:9a:3a:0a:5a:86:0a:8e:46:c2:cd:51:aa:c0:51:
         d4:79:6f:24:a4:3a:92:b1:ba:9e:4f:e6:ec:a7:e3:c5:72:5d:
         2e:b0:4e:65:cf:9c:50:ee:9c:c0:41:9c:62:2d:f4:b8:f1:a7:
         ee:9d:7c:08:1a:10:32:c0:7e:25:81:33:a3:3f:3c:ef:1d:33:
         60:af:54:b5:ee:e5:35:3b:ca:06:d7:40:97:1a:e0:10:5b:b7:
         7d:e6:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:11 2026 by rpki-client