This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File:                     cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier:          Po4BqeHEwbUM3XB9ec6kNKvgJX3lOkmHmsKbBRhe/UE=
Subject key identifier:   37:60:99:AB:15:2F:BC:44:4F:F2:AD:22:E7:CA:F2:B9:23:70:42:01
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer:       /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial:       019C420F7D03DC493054F5A7574B5450019F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number:          0B53
Signing time:             Mon 09 Feb 2026 11:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:37 +0000
Files and hashes:         1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
                          2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: WjNlNuhCtLWxGbqflPaocb715qWkApCfO1iZKrFE3co=)
                          3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
                          4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:7d:03:dc:49:30:54:f5:a7:57:4b:54:50:01:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
        Validity
            Not Before: Feb  9 11:00:37 2026 GMT
            Not After : Feb 10 11:00:37 2026 GMT
        Subject: CN=376099ab152fbc444ff2ad22e7caf2b923704201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:e3:cd:42:a3:09:f1:90:61:71:cf:5a:ae:
                    a5:ef:62:1a:e8:7f:2f:d4:fd:ad:ae:ab:74:81:a9:
                    27:66:c8:a1:fe:6b:1f:ab:2e:b0:80:80:ce:6d:40:
                    9a:08:9d:97:90:5e:41:6c:ac:3c:86:2e:2a:ac:1e:
                    48:5b:d0:7e:c8:f8:c7:6a:ca:b4:8e:a8:72:c1:fd:
                    17:7b:6a:37:6f:f1:9a:64:22:96:fd:13:20:5c:45:
                    ea:17:a6:37:44:53:20:f2:1a:e0:b7:e9:29:14:ad:
                    b9:93:cc:98:e2:23:0c:89:e8:32:26:b8:08:8f:98:
                    e5:a0:89:35:1c:2f:76:66:70:3f:41:bb:d2:51:7a:
                    8c:30:6b:f7:fa:eb:36:86:f6:7e:55:a5:16:4c:3f:
                    3f:f0:7c:dd:1b:a5:6a:42:3a:e4:e0:c1:fc:b0:0c:
                    4e:53:49:cf:f5:b0:61:d0:3f:4c:8c:e7:da:46:a8:
                    6d:c9:64:ad:fe:9b:28:9d:87:bc:40:f1:79:33:55:
                    92:78:05:40:ab:e1:b8:e7:ef:ac:bf:67:55:25:53:
                    07:98:a0:e8:74:fd:d4:cf:95:78:68:a6:7d:8f:83:
                    76:b0:e1:7e:e4:f6:f2:fd:42:07:02:b7:ac:6b:03:
                    ca:3a:1c:7a:a5:e4:06:c3:ac:9d:2a:93:e6:e4:ed:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:99:AB:15:2F:BC:44:4F:F2:AD:22:E7:CA:F2:B9:23:70:42:01
            X509v3 Authority Key Identifier:
                keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:cb:0c:ae:93:24:d1:c7:e0:b6:68:92:09:0b:25:09:05:
         ea:87:0e:6c:94:0a:65:2c:88:f9:5a:a4:11:5c:43:6e:5f:ec:
         7a:cb:b4:7a:67:22:1b:63:d2:bf:af:f3:31:e8:1d:00:ff:a0:
         fe:2c:01:9d:eb:de:9f:2b:9e:37:94:d2:fa:ba:ef:13:1c:88:
         f3:da:e1:81:95:60:e1:c6:8c:12:f5:76:b9:b3:d8:2e:b8:7f:
         fe:79:39:f1:1e:2b:70:69:ab:0c:22:85:7f:ac:37:97:69:96:
         b4:f9:7e:19:19:af:1c:46:ec:f4:dd:f2:85:40:75:f6:de:39:
         4e:e3:22:04:28:a0:16:da:38:56:65:19:b0:cb:51:79:42:d3:
         55:c4:b7:d1:aa:07:3f:8d:06:82:7c:0e:71:02:03:81:e0:43:
         94:cd:0f:e5:92:ca:8b:92:09:c4:00:d6:4e:fa:06:61:e8:e4:
         84:9b:76:69:3b:2b:97:09:9a:06:8a:7c:0d:12:53:fd:35:20:
         50:22:16:9d:32:52:d4:dd:c1:80:d2:f1:7d:84:36:ea:84:b8:
         7e:a0:47:e3:92:08:ac:be:b3:5a:33:95:cf:f3:6c:47:0b:74:
         cf:f8:52:66:61:40:94:f3:15:09:9b:b6:09:de:73:79:9d:64:
         ba:12:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:15 2026 by rpki-client