This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File:                     cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier:          TxdWM3FBkKm/lijmJE8FopjB+SddwEE/EfjdVJLhQMU=
Subject key identifier:   FA:38:C2:DB:43:97:83:4C:29:5A:03:B2:24:88:23:B6:60:DE:51:F0
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer:       /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial:       019C42B43D66F93DF774E6A81000DA31C027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:34 +0000
Files and hashes:         1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
                          2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: sTK/h6q7gDjcxQlUZ0hKZneDjXoOAHaAcsuRX62YsO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3d:66:f9:3d:f7:74:e6:a8:10:00:da:31:c0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
        Validity
            Not Before: Feb  9 14:00:34 2026 GMT
            Not After : Feb 10 14:00:34 2026 GMT
        Subject: CN=fa38c2db4397834c295a03b2248823b660de51f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:50:cc:e5:1e:60:4d:9c:ba:84:7a:03:4a:
                    25:43:23:af:71:39:01:88:3b:41:fb:5b:d9:d8:c9:
                    08:6c:1a:4b:a7:99:b3:2a:9b:2f:7a:84:36:dd:a8:
                    55:07:98:5a:2b:de:57:4e:5d:e8:37:01:8c:60:8a:
                    29:0f:be:ff:e8:0f:fb:e6:40:4d:ba:f3:44:9c:84:
                    e0:a2:ec:f8:74:49:dd:a6:18:26:10:a6:c1:2a:70:
                    5a:74:39:b8:9f:ec:b4:e2:83:01:82:ec:7e:9a:02:
                    cc:c7:03:86:59:ed:a5:73:b5:17:36:d4:65:83:57:
                    3d:24:b8:0c:c0:c9:c9:89:40:f9:d2:f9:fb:08:30:
                    64:21:3e:d2:a2:3e:0c:a8:14:20:26:04:ba:41:36:
                    1a:e3:59:7b:5d:54:01:a5:74:5a:41:ef:ae:36:93:
                    99:ff:67:9e:bd:53:66:d6:cb:4c:87:64:83:1f:41:
                    3b:77:5b:32:7e:8e:4c:99:f5:5c:c0:51:c8:db:82:
                    5f:58:bd:af:94:a4:8c:34:88:f1:f2:e1:80:dd:2f:
                    e8:c8:9d:1b:35:9a:54:05:d8:7f:51:5b:d4:f7:a7:
                    e6:2e:c2:a7:13:8e:bf:b8:42:64:31:03:b6:9a:ee:
                    76:f9:a0:6a:9d:03:50:20:ae:61:44:af:3e:1d:2a:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:C2:DB:43:97:83:4C:29:5A:03:B2:24:88:23:B6:60:DE:51:F0
            X509v3 Authority Key Identifier:
                keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1f:a3:35:3a:01:f7:c2:5c:57:f1:32:fe:62:15:1f:5c:de:
         cf:4e:2f:52:72:4d:2c:35:5e:48:2e:95:dc:3b:66:6a:5a:ad:
         a7:ff:f5:76:c8:59:25:43:65:c5:2b:a5:b6:e7:5a:ac:f3:9b:
         f2:22:03:c3:b2:c9:a3:ad:01:fc:96:a5:32:21:85:f2:3b:51:
         21:5b:fa:76:70:db:07:3b:43:a9:a3:04:81:a0:4d:1d:64:86:
         1e:d5:a9:2b:cb:5f:4c:07:95:8a:1e:6c:f5:39:59:e7:6f:3c:
         7e:14:15:36:57:0f:2c:e2:76:38:76:41:2e:12:d1:5c:44:ca:
         24:03:6b:b3:1d:b9:c2:af:5a:7a:8a:23:af:7d:f8:18:f5:18:
         92:8f:92:01:a3:7f:3c:22:71:35:b2:50:9e:6e:27:35:12:01:
         2a:e1:84:cc:38:f2:26:ca:eb:d8:4f:fe:ae:06:f7:33:4e:ec:
         57:41:02:14:1c:12:ad:01:51:5d:6a:15:80:1c:2c:a4:2d:33:
         a7:3c:21:5f:8e:62:ae:0d:25:1f:fa:9b:b4:84:4e:57:df:cf:
         f3:10:de:97:51:fd:db:3a:96:28:7f:d4:21:c0:a9:23:65:25:
         31:95:70:1e:8e:ec:d1:fa:29:fb:0a:68:35:52:59:fe:4d:2e:
         2c:5b:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:03 2026 by rpki-client