This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File:                     Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier:          IyFhTeTK8zjPj2j2FPxHS+rDoDN5D4gNUXSAtyWjl0M=
Subject key identifier:   07:45:AB:77:0B:82:88:2C:4E:49:6B:4F:D0:FD:5F:20:BA:4F:BB:8B
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer:       /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial:       019C40FD75D02A9DE363CAB85D0C3297824C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number:          0288
Signing time:             Mon 09 Feb 2026 06:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:18 +0000
Files and hashes:         1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: I/3TnPILI+UPSwnucmhsVOP2ngaUP8HztrFJaFZzXro=)
                          2: r87aSMlTcvbfUcNgDrz01QCPAQA.roa (hash: 4IqazvlvJ1xS+3jpTJGpmr9Z+5iN7AeI5Qg7WLedfSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:75:d0:2a:9d:e3:63:ca:b8:5d:0c:32:97:82:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
        Validity
            Not Before: Feb  9 06:01:18 2026 GMT
            Not After : Feb 10 06:01:18 2026 GMT
        Subject: CN=0745ab770b82882c4e496b4fd0fd5f20ba4fbb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:3b:c6:79:b5:81:5c:75:98:66:c6:33:a0:
                    db:be:1f:4a:91:e0:57:44:12:97:0d:cc:f9:15:85:
                    7c:bb:83:cf:e8:9d:92:42:52:3b:69:a7:c3:52:b5:
                    78:d7:02:2e:00:74:f9:9e:f3:fc:b8:69:d4:1c:0b:
                    98:2d:60:52:09:15:a1:3d:89:41:67:88:f9:32:59:
                    eb:e5:a3:74:d6:98:01:4f:69:c6:a8:0e:18:e7:c8:
                    91:69:4f:be:84:c4:a9:fd:14:1a:d2:ad:2e:49:a4:
                    e2:10:17:6c:ce:6e:63:60:c1:ae:4c:ff:8c:26:6b:
                    b0:81:04:73:3d:44:ac:67:e7:e5:78:9c:49:64:71:
                    f7:07:90:7b:44:d2:e2:fd:5d:b2:3a:fa:90:2f:52:
                    f6:58:e1:ac:37:28:30:cb:a0:52:1b:98:07:18:b2:
                    f7:d2:3d:fe:c4:64:e1:47:ba:41:e8:06:2a:5c:5c:
                    8a:a2:73:44:7c:7f:e0:a4:f4:9e:b5:87:10:55:af:
                    66:dd:1f:74:71:92:3a:5d:25:a0:a8:05:e9:55:90:
                    ec:37:c8:55:1d:35:5e:7e:ac:b2:52:f9:06:e9:ad:
                    83:34:41:a6:49:45:c1:66:d0:7e:f9:e6:8a:5d:a4:
                    dc:5d:3d:b4:d6:44:a6:70:93:c6:e6:76:ac:1c:12:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:45:AB:77:0B:82:88:2C:4E:49:6B:4F:D0:FD:5F:20:BA:4F:BB:8B
            X509v3 Authority Key Identifier:
                keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:ab:d6:06:44:19:96:df:ca:91:3f:a4:fc:24:d9:bb:56:
         e2:a3:b7:ad:30:4b:1b:8b:22:98:63:46:5e:b1:f4:3d:2f:47:
         d0:ea:92:c7:ee:6f:f6:1b:f4:96:75:59:ce:9c:7a:8a:ad:cd:
         53:58:1d:83:98:3b:25:11:79:c1:81:4b:f8:a3:4c:f4:7b:62:
         d2:3c:56:53:84:c1:27:89:b6:1a:df:7d:71:27:ba:c6:50:9e:
         e1:e4:e5:62:05:4f:d8:7c:45:19:25:f3:1d:ef:51:6a:8d:30:
         fe:01:28:b8:07:0d:76:e3:23:52:a1:2e:cb:2a:49:4e:97:42:
         3c:0f:53:3b:77:da:86:50:7d:d0:1b:f5:be:8e:06:1f:b6:51:
         89:4c:ef:ab:31:53:ca:b2:16:1c:da:a4:9e:ad:d4:de:cd:a3:
         71:b5:81:e8:22:4b:0c:51:e2:9d:34:77:1a:d6:cb:0c:47:91:
         52:bd:59:19:e9:e4:10:63:1c:db:5b:bf:bf:c1:98:b8:87:4e:
         43:70:36:2e:6a:db:58:47:4d:69:40:5f:7a:1d:f0:c4:fa:ca:
         78:16:0f:eb:2b:52:87:ab:e1:a3:ae:ca:1f:6e:f4:b2:d8:75:
         72:8d:d7:4b:ce:2e:b4:2f:f1:f6:e8:64:c1:f2:68:79:be:51:
         7d:76:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:29 2026 by rpki-client