This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File:                     v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier:          U0UDsPS1m5RmWEjSUQIx91OsyaO+QBElVRU4w8hTAhA=
Subject key identifier:   D8:89:C4:61:60:9B:0E:46:B6:C0:5D:5F:3E:1E:0B:76:CC:28:D2:BC
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer:       /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial:       019C4246A96FDB7CB89D0D25C3A583C77DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number:          124B
Signing time:             Mon 09 Feb 2026 12:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:52 +0000
Files and hashes:         1: 2Wp3YnKolCKlk8ttOD4thTqnK8s.roa (hash: AqwDEsgdXjCQtmMemZbnyoQLvLWRfHb/l/ITgYIXcT0=)
                          2: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: P15kTuybqEiK16bf6KQFdjYnn8qFJUHwzA53H9cuddA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a9:6f:db:7c:b8:9d:0d:25:c3:a5:83:c7:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
        Validity
            Not Before: Feb  9 12:00:52 2026 GMT
            Not After : Feb 10 12:00:52 2026 GMT
        Subject: CN=d889c461609b0e46b6c05d5f3e1e0b76cc28d2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:23:3f:2d:16:2d:eb:12:d0:38:4f:e4:20:
                    c4:56:b0:08:5e:f4:7b:fb:e2:fb:cc:73:84:c2:17:
                    7c:5b:52:47:8b:dc:46:2a:a8:db:16:4f:61:ae:a5:
                    5c:01:54:11:76:76:37:45:9c:c4:7d:0c:11:a6:c6:
                    ca:60:7b:46:92:a8:6c:ba:2f:81:fc:85:10:76:46:
                    4d:3f:43:ab:29:e5:32:29:87:da:2f:34:c4:61:88:
                    40:a3:85:56:3e:47:1b:27:09:55:99:6d:1c:74:a6:
                    dd:d2:68:82:b8:33:9f:04:8a:61:da:8d:29:d5:2d:
                    e7:00:49:ad:8d:03:61:63:73:36:2a:1c:a4:61:56:
                    20:5a:72:87:f9:e1:f6:61:b7:cf:03:12:f4:7b:a0:
                    bc:a4:cf:06:cd:62:3c:72:ef:f4:a1:12:33:23:ff:
                    19:0b:ee:9f:6b:3f:82:d2:d7:3d:9d:cd:af:cf:0f:
                    1c:ab:f8:21:a5:28:b0:5e:5d:d9:e9:c6:34:5f:1a:
                    54:3a:fb:79:43:f2:b6:81:4f:80:c1:17:4e:5e:d2:
                    e7:e9:ad:ac:ec:9e:f8:b5:85:9d:bd:50:c5:e3:54:
                    f4:26:be:36:14:56:2d:53:87:7d:5b:bf:d1:bc:3b:
                    e6:d1:41:5a:df:99:95:ce:fb:f6:77:13:d1:28:3a:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:C4:61:60:9B:0E:46:B6:C0:5D:5F:3E:1E:0B:76:CC:28:D2:BC
            X509v3 Authority Key Identifier:
                keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:eb:7d:be:c2:7c:6d:f8:d7:44:17:f2:73:cc:02:e1:a2:
         e1:77:4b:48:cb:d5:7e:a0:e8:bd:11:39:89:f1:15:2d:97:ea:
         9d:93:79:34:92:60:f5:8e:5e:48:e2:64:28:53:3c:b0:c2:ce:
         21:92:97:b0:94:70:40:31:e1:48:d6:ad:0a:43:0e:62:a9:bd:
         2b:ff:0a:a4:29:55:53:3a:0e:1f:1c:46:1e:6c:f0:80:1b:c5:
         3e:83:b5:38:35:f4:c3:51:0b:7a:2c:7f:db:a0:2d:49:7c:db:
         eb:9a:1d:3f:16:78:57:00:9c:b8:66:d8:b3:05:0a:82:03:bc:
         11:db:18:27:b5:90:78:4a:7b:be:06:fb:fb:bc:4d:f6:18:6b:
         9c:47:4d:72:76:47:64:aa:99:40:f7:6a:e6:33:58:02:09:fa:
         bf:e2:8d:34:02:47:8a:7a:af:04:eb:84:fc:66:76:c9:8c:2c:
         0c:ac:de:a0:f2:d2:64:a8:b0:55:69:31:9c:e4:70:9a:3b:9d:
         e0:0a:00:eb:15:e7:15:af:1d:7f:85:80:d8:99:6f:45:0c:fd:
         cf:f4:ab:c9:af:bc:b6:8a:69:c7:cf:ac:02:ca:45:3a:21:d0:
         49:85:20:cb:ce:ed:be:c2:cc:70:08:79:cc:29:78:1d:5b:2b:
         1a:69:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:30 2026 by rpki-client