This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File:                     pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier:          HNOceW2OgsYdnTj/NMYc8PU3LnklM/c8W4Qv5RQyPak=
Subject key identifier:   D4:A0:FE:E3:02:5A:56:A5:6C:85:80:69:92:85:15:D2:80:F1:DE:AA
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer:       /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial:       019C41A17CBA838E5E7759FF4135973E8F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number:          057C
Signing time:             Mon 09 Feb 2026 09:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:27 +0000
Files and hashes:         1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
                          2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: /4J/3UCw9cm0bICl8EfcDbf3bS7vfGNxBRH7B4dQkVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:7c:ba:83:8e:5e:77:59:ff:41:35:97:3e:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
        Validity
            Not Before: Feb  9 09:00:27 2026 GMT
            Not After : Feb 10 09:00:27 2026 GMT
        Subject: CN=d4a0fee3025a56a56c858069928515d280f1deaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:7c:3f:80:e6:85:fc:8a:f4:81:b7:0b:ca:
                    fe:9a:7b:d2:ed:3b:c4:c2:18:d6:53:fb:b9:17:18:
                    e5:54:ab:54:c9:50:c5:02:df:d8:2e:e8:21:be:c4:
                    47:59:85:d2:6c:78:a4:6b:6c:9c:b9:76:f1:98:89:
                    4c:14:be:97:99:2b:17:0f:b9:24:f0:a8:bf:21:5e:
                    8e:b3:67:cb:1f:bd:df:cb:41:48:86:9d:ab:f3:56:
                    5a:9c:d8:af:41:cc:81:c5:c3:71:09:c9:c5:c6:2b:
                    d0:e1:63:0b:fe:e6:83:57:e6:d6:db:8d:a7:be:4b:
                    12:95:b8:15:ba:09:f9:63:5c:8f:3a:59:e6:9f:f6:
                    27:f4:2e:d1:4a:af:2e:8e:1d:e4:be:06:f0:49:34:
                    30:aa:95:11:45:b3:bf:19:71:e9:8a:1a:60:4e:9f:
                    71:ff:ab:ff:c8:1c:61:99:00:94:02:2f:1c:7e:8f:
                    c4:4a:3d:e4:5e:aa:fe:e1:a8:2b:76:cc:a7:ee:98:
                    d2:8a:27:e2:cf:0c:2c:59:5b:08:9f:54:05:75:cc:
                    12:4f:a3:3b:c0:d1:14:66:2f:1b:73:dc:5f:89:24:
                    65:09:55:b9:8f:a5:7f:e3:2b:be:c1:f0:01:ca:10:
                    bb:60:20:a6:e3:11:a7:11:fe:6d:85:81:e4:53:14:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A0:FE:E3:02:5A:56:A5:6C:85:80:69:92:85:15:D2:80:F1:DE:AA
            X509v3 Authority Key Identifier:
                keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:a3:2d:65:3d:4d:cf:39:d1:10:51:34:bd:b0:a9:79:24:
         d1:82:d1:41:d9:a8:07:02:b2:d1:12:bf:bf:fa:2f:8a:78:a7:
         08:1c:bf:20:bd:9d:9f:f7:bc:66:49:ae:28:62:d0:2f:f3:a3:
         bb:72:c4:ef:b6:df:01:00:70:b7:fc:91:f2:57:f9:11:66:be:
         ec:a9:5c:92:ef:9b:a7:a6:b2:fa:e1:2f:6b:c4:79:40:51:8e:
         ad:bd:8d:74:b7:81:08:b9:cf:a3:d2:e7:66:62:4c:19:12:78:
         d8:8b:34:fd:1b:86:f0:1d:1e:c7:6c:5f:16:44:9d:ed:97:64:
         9d:a3:9f:54:5c:8d:9f:1e:c9:47:31:7f:1d:fa:4a:5b:52:15:
         13:2f:c9:6c:1c:71:ac:2f:a1:56:41:a2:d4:ec:7a:fd:04:79:
         14:7e:cf:f1:fd:36:4a:c1:97:80:23:81:f2:3e:1f:a2:69:e5:
         c6:54:5d:fd:70:0c:8c:ac:33:3f:a0:1a:1e:62:fc:d3:cd:42:
         e9:c5:15:b4:27:85:fa:7d:27:92:6b:91:b8:63:99:30:b1:ad:
         eb:40:bc:53:96:cc:ed:18:b5:e1:49:43:aa:09:dc:36:ce:75:
         24:43:c0:37:fc:48:21:40:7b:4e:b0:bb:15:6c:b5:92:01:f8:
         03:0a:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:12 2026 by rpki-client