This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File:                     PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier:          qIZJMLI/ttaz1OxqJHB7/lbZnQb1z/B+3HkxTCDnidk=
Subject key identifier:   67:F6:96:8A:1C:2D:25:43:9B:4F:52:1C:9A:63:AD:C8:83:A4:56:3A
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer:       /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial:       019C427D0DF87B7E736F278603DF37B82EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number:          0D15
Signing time:             Mon 09 Feb 2026 13:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:17 +0000
Files and hashes:         1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
                          2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: 5pM+AT1YFjE8RstY9iaxwOSEOUE4Yunh88Buz3IO/vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0d:f8:7b:7e:73:6f:27:86:03:df:37:b8:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
        Validity
            Not Before: Feb  9 13:00:17 2026 GMT
            Not After : Feb 10 13:00:17 2026 GMT
        Subject: CN=67f6968a1c2d25439b4f521c9a63adc883a4563a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:f2:7a:d9:55:2b:96:6b:e2:a7:2e:0b:c9:
                    09:46:12:d5:47:a4:11:b6:62:0f:92:e2:70:de:8c:
                    51:b4:35:92:43:91:a2:54:44:b2:b0:4b:98:e5:af:
                    ae:d3:20:7b:e2:54:1d:c1:ce:b5:04:42:33:d8:84:
                    dc:dc:fe:9b:ac:3a:4d:36:33:ae:30:b3:36:d3:da:
                    3e:7e:84:a7:be:96:a1:2b:28:31:3b:ab:29:36:95:
                    13:55:0a:64:56:6e:db:fe:67:c4:3d:13:18:4a:32:
                    04:b7:4f:86:ee:f6:c1:b8:a4:cd:f8:6b:b8:b7:56:
                    49:e6:d2:3b:a1:f4:4a:44:a0:71:cc:4b:04:25:8e:
                    33:1f:1b:4b:a0:7c:da:a2:44:d5:a9:16:19:13:c4:
                    fa:2b:f8:28:6b:3b:d5:36:a9:1d:85:48:61:80:99:
                    22:3e:27:06:1f:57:b3:3d:84:a0:e2:c4:d9:94:05:
                    b6:bf:19:d3:3b:2c:77:f7:bd:9b:03:4d:0c:1e:07:
                    57:1d:bd:be:a3:cf:48:3b:7c:6d:e1:bc:3d:a9:2e:
                    7f:f8:3c:7b:7b:21:df:a8:b2:87:02:72:9a:47:b0:
                    e5:69:3b:ed:2c:59:d6:db:14:c6:ef:41:93:71:da:
                    da:6c:76:12:6b:ec:72:96:84:86:4f:bc:57:51:31:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:96:8A:1C:2D:25:43:9B:4F:52:1C:9A:63:AD:C8:83:A4:56:3A
            X509v3 Authority Key Identifier:
                keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:a7:87:40:1c:e2:9e:07:56:3f:d5:e4:19:c1:63:d5:26:
         23:0e:d3:bd:14:ea:a6:73:7b:0c:10:63:e7:93:fc:0a:c0:ed:
         75:ba:fb:74:04:fc:11:f9:e6:02:3d:f8:bf:3b:28:68:40:bf:
         5b:b1:2a:37:90:fa:c6:2e:05:3c:ab:5a:b8:7e:a6:2b:6e:b7:
         98:11:23:0c:c6:36:7b:41:0c:56:18:dc:8e:56:10:9b:9e:f3:
         82:1d:6a:a3:62:98:ac:c0:1e:f0:88:2c:04:3a:f8:0f:ed:0e:
         5b:48:ae:0b:c7:e2:04:b6:c3:e7:b7:a2:8e:1d:c5:1a:c9:b2:
         29:52:ca:4b:d5:e3:81:f4:7f:b8:18:11:73:ad:46:25:f7:95:
         43:0d:1b:a5:55:69:23:c1:e3:ad:28:70:95:ee:14:f6:f4:1a:
         cf:27:8b:07:75:b2:28:92:6b:bc:de:e4:10:59:eb:f1:8c:6c:
         94:be:a3:d5:5f:fd:23:b8:db:ee:f1:e6:2d:f1:64:cd:65:e8:
         94:56:51:46:14:d3:4d:a8:d1:45:9f:a1:28:3a:e8:ac:9e:19:
         c9:9f:32:f5:ab:54:45:bc:28:21:ef:50:6f:c3:33:46:51:b4:
         92:64:67:34:ed:f4:da:fb:8a:a2:e1:3a:cd:28:46:74:0d:d7:
         5f:e6:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:40 2026 by rpki-client