This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File:                     d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier:          7FCdCfwSAHCq1BcN4OcxMEexAJMk1w/y0iXZ3UDN0G4=
Subject key identifier:   2B:22:5D:80:E4:C7:5C:33:05:2A:98:49:DA:14:DC:BC:5C:BC:6D:DB
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer:       /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial:       019C2C9A5B485A6E4C65F68A485E468F0C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number:          1808
Signing time:             Thu 05 Feb 2026 07:00:39 +0000
Manifest this update:     Thu 05 Feb 2026 07:00:39 +0000
Manifest next update:     Fri 06 Feb 2026 07:00:39 +0000
Files and hashes:         1: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
                          2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: Ty3Q/4SDqm232ok+fMBSCCasa4aXNWnn/tDXpY7Mw7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:9a:5b:48:5a:6e:4c:65:f6:8a:48:5e:46:8f:0c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
        Validity
            Not Before: Feb  5 07:00:39 2026 GMT
            Not After : Feb  6 07:00:39 2026 GMT
        Subject: CN=2b225d80e4c75c33052a9849da14dcbc5cbc6ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:f6:eb:22:84:a4:ee:4a:51:1a:43:06:75:
                    ef:77:b1:e5:a1:bc:65:92:69:bd:c5:ae:be:50:74:
                    fd:ed:d6:ec:10:ef:63:32:b0:fc:25:ca:5b:01:3d:
                    b7:11:dc:45:0e:e0:33:0c:1d:45:06:e8:30:53:f9:
                    6e:c2:b1:7d:bd:6c:4d:9e:f8:53:38:7a:29:98:30:
                    25:16:9e:33:e6:91:61:04:3c:02:1b:77:00:3b:a0:
                    78:5f:0b:59:29:52:5b:b1:76:fc:1d:f2:0e:f9:db:
                    d8:4f:88:01:00:03:28:8b:6f:24:85:a3:4b:3b:45:
                    25:1c:18:81:2f:37:fe:69:a9:db:11:2b:f0:07:87:
                    0c:45:a4:21:f9:14:42:f8:a0:2f:60:5e:d3:2c:95:
                    bc:5c:1f:6b:b7:67:fa:c7:73:1c:2d:fc:f7:54:22:
                    14:23:96:52:4b:b1:84:70:87:5b:4c:f3:b3:54:c0:
                    e5:b5:dc:a3:0f:fb:02:81:6c:b5:e6:f8:5c:44:ea:
                    9b:5c:62:fa:0e:03:2c:59:d4:2f:9d:fe:60:a7:92:
                    be:04:bb:b9:be:1f:8f:0f:14:0d:c6:ee:da:ac:d1:
                    ea:88:93:5f:e9:a6:33:b7:05:cf:4c:f0:ff:c8:74:
                    69:cb:4e:af:ce:9d:97:2e:83:1c:ac:15:de:4b:ef:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:22:5D:80:E4:C7:5C:33:05:2A:98:49:DA:14:DC:BC:5C:BC:6D:DB
            X509v3 Authority Key Identifier:
                keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:11:e3:92:cb:2f:0d:1a:87:1a:35:c9:9f:20:61:2f:27:8c:
         83:92:35:7e:8f:bd:a4:19:4e:cc:ff:05:60:53:79:4d:29:4e:
         6f:1b:f2:12:17:16:8b:18:20:40:80:24:2d:8c:81:a7:d4:0b:
         83:e7:2c:8b:7b:91:d7:85:f8:a8:15:3c:45:89:34:9d:07:a2:
         86:e3:d8:35:e9:da:3e:9c:da:91:c0:aa:6e:8a:d6:f4:49:17:
         1d:7a:1c:68:50:ab:2e:5e:0d:51:30:21:6a:e3:08:a1:15:a8:
         e5:7e:4c:74:58:7b:0d:fc:ba:fa:95:c2:ae:65:bb:68:10:3f:
         13:c3:48:b2:45:40:63:a4:c3:26:57:09:2b:d3:33:95:bb:69:
         04:c7:53:3a:99:00:6e:81:08:62:72:10:84:aa:68:d9:90:f5:
         a0:2a:36:dc:da:ee:58:2b:d0:4c:c6:9c:3d:b4:7b:c8:ed:48:
         3d:4c:8d:fe:75:03:0b:c4:ef:8f:17:b9:c7:bd:b9:be:cd:5b:
         4c:e1:83:df:7e:6a:f7:9b:c4:e0:9e:33:78:49:b0:7a:50:7c:
         10:bc:54:7a:ed:66:e9:e8:af:af:5d:90:53:3f:b8:d1:cd:ca:
         ae:44:2b:00:2a:94:59:6b:c3:ca:23:75:2a:c7:1e:71:5b:80:
         fe:01:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 15:05:51 2026 by rpki-client