This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          PR6XYIzRVFuWqleDkJmJ7T7VMjJ4TtiEv21U+Ey10j4=
Subject key identifier:   23:6E:08:9E:D7:49:D2:BA:A1:57:EE:1A:7C:65:7B:F8:26:03:9A:C6
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       019C41A17EEABBD9B4D44F90C922BE77D0C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          1131
Signing time:             Mon 09 Feb 2026 09:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:28 +0000
Files and hashes:         1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: AOrkI2GrLX8B4HFuuklBCHJx9pmXef8SsNy8JB67V0Y=)
                          2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:7e:ea:bb:d9:b4:d4:4f:90:c9:22:be:77:d0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Feb  9 09:00:28 2026 GMT
            Not After : Feb 10 09:00:28 2026 GMT
        Subject: CN=236e089ed749d2baa157ee1a7c657bf826039ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:c7:d9:af:02:d3:21:4e:5a:1d:5f:63:81:
                    36:32:41:2d:1e:39:60:59:a3:ca:ec:b1:f6:a1:8f:
                    d7:e9:33:10:90:de:8d:f2:fe:32:ef:dc:85:e5:24:
                    f5:58:c8:c7:8b:d5:52:dc:10:f5:cb:68:23:43:ea:
                    27:14:35:21:a6:d9:88:ab:f0:6b:4d:a9:4d:9e:a6:
                    4c:aa:c5:f4:9d:52:af:46:1c:15:8e:46:fc:d9:48:
                    c6:41:24:2c:e4:42:e0:be:ba:85:dc:da:5c:df:75:
                    6c:a5:f1:df:e1:b6:65:9b:1e:40:e8:f2:83:23:db:
                    2b:ef:1c:23:94:8c:15:cc:79:10:12:88:6d:f8:e3:
                    ad:41:b9:07:c3:9f:4a:40:e6:45:02:3e:ce:2f:54:
                    d8:b5:bb:76:09:80:24:a8:7d:d3:81:86:e8:88:19:
                    c8:10:f2:e2:07:3f:10:10:22:ea:05:d3:bf:24:5f:
                    7f:f1:9a:6c:bd:80:6f:3d:24:dd:8c:4a:18:18:96:
                    2a:fa:4e:2f:36:e6:cd:cb:50:21:e1:c8:52:e5:a4:
                    72:10:90:8d:e3:43:cf:d0:95:68:cd:db:b0:86:df:
                    40:77:45:59:7b:6f:f8:35:c3:dc:d5:7a:c2:77:23:
                    b7:d4:7e:a0:29:82:b1:cf:3b:70:c2:1f:88:ce:e5:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:08:9E:D7:49:D2:BA:A1:57:EE:1A:7C:65:7B:F8:26:03:9A:C6
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:7a:c3:49:9a:14:bc:74:12:43:0d:39:30:b1:8f:93:d6:
         89:d2:24:25:c4:26:90:c4:7b:f4:c4:58:e6:f5:ea:c4:ca:dc:
         9d:f2:53:a6:e0:77:e1:68:4f:39:a8:5d:9f:d0:3b:07:b9:99:
         1b:77:57:48:90:ba:e1:bb:fc:73:c7:01:f3:64:80:f6:e8:19:
         88:3d:93:ff:ab:aa:5c:16:9f:f7:cd:4a:60:b4:99:69:e3:4d:
         92:33:8b:5d:d9:5f:23:e7:eb:a1:2e:1a:29:b6:fa:bc:2b:d3:
         fa:a4:43:59:27:4a:98:29:b2:09:f5:6b:ac:16:7b:36:33:a5:
         f1:98:2c:82:34:66:b0:1a:15:a4:33:6a:b0:0a:6c:91:5f:b8:
         59:a9:37:8f:ea:0d:91:21:3d:d5:24:3d:35:24:e2:04:30:be:
         8e:ba:c8:69:c1:cc:4f:cd:19:e8:f9:da:1e:b7:b3:eb:2d:49:
         18:d2:0b:26:0b:57:ad:25:ec:3e:62:6e:38:f0:55:08:c3:ce:
         19:19:df:06:e5:3f:ba:9f:c9:33:94:95:9f:db:46:6e:73:6f:
         1a:80:30:44:87:93:ef:04:2c:5e:f1:58:93:9a:bc:87:4a:b4:
         e3:8d:d1:46:ab:dd:f5:ee:28:d6:63:79:2c:54:ee:40:73:62:
         6c:4a:4a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:08 2026 by rpki-client