This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
File:                     aZp2B5KFHh535Yh8bQPnwBGg4UI.mft (raw, json)
Hash identifier:          uo9sXXYD+TsxzA9+Z+s6FggQEmCJUdyN3CZ1FW1eumQ=
Subject key identifier:   4B:E1:83:A2:F1:5B:53:83:09:F5:FD:2D:BB:19:F6:62:F5:FE:D4:2A
Authority key identifier: 69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42
Certificate issuer:       /CN=699a760792851e1e77e5887c6d03e7c011a0e142
Certificate serial:       019C42B44B2D84B4A3B00ACACDFFDEBE8061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
Manifest number:          57
Signing time:             Mon 09 Feb 2026 14:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:37 +0000
Files and hashes:         1: aZp2B5KFHh535Yh8bQPnwBGg4UI.crl (hash: Fm7dCFu+QPyd8iSi4jVxaNiZKurpunmlb+YtCBPqJp0=)
                          2: v6oU70HSaZm7ChbHXC90OpUzQj0.roa (hash: HL9qGgjJL2Z4Y+PfPmBcCOMraQco69+rsL+jpgTAVns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:4b:2d:84:b4:a3:b0:0a:ca:cd:ff:de:be:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699a760792851e1e77e5887c6d03e7c011a0e142
        Validity
            Not Before: Feb  9 14:00:37 2026 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=4be183a2f15b538309f5fd2dbb19f662f5fed42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:fb:40:38:19:28:45:0b:54:46:06:bf:0e:
                    1a:99:fb:3b:1d:ef:d7:b7:81:43:a4:44:8b:90:b8:
                    80:a8:ea:39:20:5c:86:8c:69:5d:08:ce:68:27:1e:
                    f7:2e:4e:8e:f2:53:b5:5e:56:9f:f1:71:23:bf:f4:
                    10:d8:ff:19:11:62:61:2e:a2:79:a2:75:f8:49:42:
                    ad:d4:c1:30:59:c8:31:3d:90:53:8d:d6:be:ca:a9:
                    12:db:7a:b6:74:8b:ee:98:3d:2a:e6:db:64:31:f2:
                    dd:b7:e2:4c:0b:41:95:82:30:03:8b:97:c4:f5:e3:
                    8a:f4:d4:7e:26:f6:c8:09:d1:28:da:c6:ac:50:3f:
                    e6:30:32:64:67:f4:a8:fd:37:59:d9:83:76:d5:27:
                    83:22:29:49:f9:99:f2:60:a5:c7:67:68:27:eb:90:
                    fa:97:eb:ca:16:db:67:fe:9d:a5:bc:4c:b6:c7:94:
                    94:c2:30:23:ee:cf:9d:42:61:6b:93:4f:ed:d6:e1:
                    30:25:a5:a4:c8:6b:7f:c4:64:87:2f:06:3b:77:27:
                    40:e6:f7:74:25:03:64:fb:e0:76:a8:cd:5d:9a:a8:
                    b7:ec:db:16:0d:83:7f:cb:fd:74:ea:b1:f0:a4:be:
                    c0:3b:5d:ce:e6:6e:c5:74:80:25:fe:64:5d:22:22:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:83:A2:F1:5B:53:83:09:F5:FD:2D:BB:19:F6:62:F5:FE:D4:2A
            X509v3 Authority Key Identifier:
                keyid:69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:cc:07:30:32:16:1a:a4:6b:f5:5f:23:ba:6d:13:c1:e6:
         b1:92:c6:db:18:43:18:9d:a1:c8:b7:b6:86:46:1f:ee:c6:6c:
         d1:ea:69:ba:53:45:f8:5f:86:24:31:72:22:17:a8:2b:f2:d3:
         dc:ed:b9:9a:be:bb:d5:ab:b7:a2:c8:95:23:8a:32:1c:d3:bc:
         69:b2:c1:20:9f:23:5b:72:71:e9:6f:67:7a:05:3c:59:53:7c:
         e8:a4:15:7f:bf:f8:fc:e8:ea:a1:6c:b4:25:dc:9a:0f:06:07:
         d9:78:00:3a:0c:d0:e2:b0:cb:ff:af:56:b8:60:b7:05:72:8f:
         be:ee:18:04:81:7e:09:8d:1a:14:e0:e8:d3:5e:d4:47:e3:97:
         8f:6b:db:77:ef:e8:f0:01:dc:4c:fd:53:6c:36:4d:72:8d:11:
         0a:1b:28:19:1e:b8:af:89:f7:c7:b7:e1:c8:39:61:21:20:01:
         0d:6b:64:02:c8:ac:62:e9:0b:b0:f4:d8:89:c4:cd:d3:c0:a5:
         8f:f4:8e:17:05:c0:0b:59:bc:4b:70:a1:2a:65:d2:ab:9a:b3:
         56:33:32:04:c6:a4:db:60:16:a5:a8:41:85:e8:64:5c:6c:47:
         0e:a1:2b:03:e6:12:ca:20:94:ed:56:5c:0d:e1:15:79:e1:20:
         05:0e:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:33 2026 by rpki-client