This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File:                     2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier:          UHmZC5FeOFdge92WwlQFvavzidUbH5+9A6ZdSs53ctQ=
Subject key identifier:   62:D5:A8:CA:07:B8:4E:E5:AB:EC:FD:C5:FE:EF:B0:E6:4E:72:1C:D5
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer:       /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial:       019C43C729A92252E06C34593B53A9491484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 19:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:51 +0000
Files and hashes:         1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: Wr/0ky7fEGiTsrFD/oP7fny2l4fJbQIX62DwysGwIwA=)
                          2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:29:a9:22:52:e0:6c:34:59:3b:53:a9:49:14:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
        Validity
            Not Before: Feb  9 19:00:51 2026 GMT
            Not After : Feb 10 19:00:51 2026 GMT
        Subject: CN=62d5a8ca07b84ee5abecfdc5feefb0e64e721cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:d8:f5:f5:68:66:08:f9:67:15:5c:3b:21:
                    ba:a5:69:ab:e8:c4:1f:47:44:03:fa:86:e5:f3:fa:
                    3d:34:8d:b4:cf:e8:1c:96:ee:99:74:0c:c5:a0:79:
                    0f:55:cb:c5:80:8c:25:fd:72:c6:52:26:7b:62:04:
                    38:0c:d6:1d:5f:89:28:7e:4d:54:af:3d:cf:14:6c:
                    1b:61:2c:55:44:26:37:cc:35:ba:fe:eb:78:99:07:
                    e5:f2:d4:2a:2a:b0:83:8f:2d:18:25:10:df:b9:a3:
                    79:3a:04:6b:52:3b:27:20:31:ba:b3:dd:68:45:fd:
                    b0:c7:71:7c:d8:c0:9e:ba:52:f4:f8:0d:80:ae:b8:
                    82:ae:c8:0d:30:0f:18:54:2c:9f:d2:90:fa:99:d1:
                    dc:1b:ff:24:9a:67:ea:58:e7:21:29:63:53:10:2c:
                    6f:c3:c3:e2:b8:2d:4d:e6:88:fc:6f:41:e9:10:7a:
                    47:b8:68:18:68:0d:3c:9d:14:40:08:aa:0f:42:d7:
                    5f:0a:8e:2b:e7:f8:07:5d:8e:27:e1:2d:f0:6d:44:
                    5b:7f:31:e6:4a:d4:b1:b7:15:2a:0b:a0:f7:97:b2:
                    d0:fd:1f:87:6e:8f:5f:fc:8d:c1:2c:e0:b8:69:8c:
                    5d:83:91:13:4e:7b:9d:ea:1a:64:87:92:aa:9d:65:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:A8:CA:07:B8:4E:E5:AB:EC:FD:C5:FE:EF:B0:E6:4E:72:1C:D5
            X509v3 Authority Key Identifier:
                keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:09:64:84:76:c5:5c:83:23:2b:63:1b:aa:8b:5f:75:74:
         c8:ba:d3:dc:4c:91:06:97:9b:d0:9b:76:10:e2:69:d3:2a:f9:
         0a:99:64:65:3b:0f:f6:5b:eb:88:05:c6:0f:ea:69:84:ae:3b:
         71:c7:a0:cf:07:b6:0f:5e:e2:b6:28:94:51:38:fd:69:d7:56:
         8a:7b:f1:e8:1a:05:e0:44:fa:ca:92:61:1d:44:fd:b5:12:37:
         8f:f2:0b:f2:ee:9e:39:21:c5:9e:9d:c0:bc:41:ad:36:4f:d8:
         16:34:0d:d1:0a:fa:21:a5:8d:c5:9e:6a:cc:ca:da:f9:1e:6d:
         7b:47:ac:5e:1c:07:ba:5d:9c:4d:8c:71:91:ff:cd:68:b0:cd:
         78:49:9b:0e:62:07:35:3f:24:64:bf:84:b7:2f:67:50:2a:39:
         d8:17:9f:e1:ba:96:4c:61:2b:57:0d:bc:0b:43:30:60:46:c3:
         eb:a1:e1:27:59:0a:e0:b8:49:03:96:01:b6:94:8c:d2:da:44:
         45:cc:95:34:ac:05:28:79:84:9d:fc:56:07:f2:b9:45:b9:ea:
         53:d7:0c:26:10:d3:1d:df:fc:70:11:ea:92:c2:12:b6:aa:7a:
         c7:fd:aa:29:dc:eb:e3:be:06:63:ea:e2:f8:93:0c:ff:ff:b9:
         cf:9d:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:18 2026 by rpki-client