This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File:                     32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier:          58JrZSrMgAmP5H8AXjYUt9K1WFU04/YkW6rJ9MKRiWM=
Subject key identifier:   00:C2:2E:10:79:98:F4:23:13:A4:4B:DD:8E:7B:06:33:99:04:4B:24
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer:       /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial:       019C45477A6B8543061BF31B0018D973DC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number:          06CB
Signing time:             Tue 10 Feb 2026 02:00:38 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:38 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:38 +0000
Files and hashes:         1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: OoUCmZb2R4r3Mp7YYhiU7E/wODjmBHieo7rfnJ+Is1I=)
                          2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
                          3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:7a:6b:85:43:06:1b:f3:1b:00:18:d9:73:dc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
        Validity
            Not Before: Feb 10 02:00:38 2026 GMT
            Not After : Feb 11 02:00:38 2026 GMT
        Subject: CN=00c22e107998f42313a44bdd8e7b063399044b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ab:e8:a6:78:d5:10:70:eb:0b:ff:85:5c:ef:
                    d5:b1:b2:9a:dd:f4:b8:4c:e6:ad:f7:1d:fb:39:44:
                    06:44:a4:f7:85:d8:b3:1f:1c:a6:b8:20:22:75:8d:
                    25:66:c7:93:f9:9a:ec:22:5b:78:93:4f:12:ec:ff:
                    ce:34:59:4d:a2:9d:1c:98:2e:fb:28:67:da:37:36:
                    f8:1c:3e:84:e9:e4:77:e8:66:4f:14:bd:42:7a:e2:
                    f6:ce:e1:27:b1:9d:06:08:a1:d7:c2:11:1d:bf:49:
                    54:14:15:51:3f:0b:91:2c:c1:31:ff:27:96:3a:f1:
                    d8:cb:b7:78:79:ba:00:b2:51:e1:bb:e2:21:86:e0:
                    70:13:08:3d:40:2f:85:e3:38:59:a5:e2:d5:a8:fa:
                    97:fb:3e:c0:c1:9d:77:b3:b3:4e:28:13:89:cc:20:
                    33:5c:22:18:e2:e5:b7:fc:40:f1:3f:b9:1a:81:cd:
                    3e:21:9a:8c:cd:f7:f2:2d:ea:1f:ea:78:26:5e:11:
                    de:d9:70:33:c5:af:f2:fd:37:18:36:4f:c4:28:10:
                    3f:57:43:db:14:36:e7:14:63:19:5f:f4:4a:14:e1:
                    e9:aa:48:7f:36:eb:6c:18:d8:3e:f0:0d:a7:31:f2:
                    69:c1:d1:02:6a:d7:4b:5b:00:fe:2b:3f:fd:f5:3f:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C2:2E:10:79:98:F4:23:13:A4:4B:DD:8E:7B:06:33:99:04:4B:24
            X509v3 Authority Key Identifier:
                keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:f5:80:12:39:fa:38:9a:da:e1:a8:4e:1a:b2:e6:2c:d2:
         de:f4:a1:49:0b:b7:af:0e:bb:bb:4f:32:55:a8:8d:3f:98:52:
         a8:d5:c1:07:20:51:6b:6e:47:89:94:3c:5e:cf:12:0c:7e:96:
         0c:9f:32:0d:2f:0e:72:23:50:6c:38:3f:2a:a9:f5:40:bd:f0:
         cb:0d:07:fb:db:ff:71:43:13:d3:be:f6:bd:4d:38:56:93:fa:
         0b:e3:b1:98:b6:9e:75:78:0d:7b:0e:06:0f:39:9e:a8:9a:d1:
         2c:83:99:f1:69:67:46:20:cd:dc:56:11:d4:e8:80:12:c9:13:
         18:fb:2b:b8:02:d0:fe:1e:e5:5d:33:d2:c3:ca:8d:c4:08:b0:
         58:a5:04:6c:ef:7d:dc:f6:aa:fb:4f:b7:4f:16:c8:b4:55:91:
         f9:5b:bd:7f:21:25:ca:c5:ec:57:7b:86:32:b2:85:4b:51:ea:
         d0:d6:6f:63:7a:53:c3:28:79:77:3c:a7:2c:70:aa:82:a3:a4:
         1e:b9:0e:ab:be:8c:7f:45:cd:89:5c:93:ac:90:3d:a2:4c:82:
         f7:b3:1a:c4:ed:f5:63:8c:73:88:56:56:5d:82:fd:d7:ae:e4:
         7f:62:02:7b:ac:90:95:58:9a:bd:df:d6:da:bf:35:95:6d:ae:
         30:c4:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:44 2026 by rpki-client