This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File:                     R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier:          zCeQTv2pkvc4hCCA9SmUKe+QScg5glS6gopNxqRUJPk=
Subject key identifier:   69:96:1B:7E:34:6B:C5:25:89:CC:E0:06:CB:7B:4F:77:C4:38:C0:55
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       019C42468DD45DD43030A3572E15AF80463E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number:          0FEB
Signing time:             Mon 09 Feb 2026 12:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:45 +0000
Files and hashes:         1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: IFzvOakdguba1OeCitw5JUET4GCYR3+ozlUsIEo4tS4=)
                          2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:8d:d4:5d:d4:30:30:a3:57:2e:15:af:80:46:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Feb  9 12:00:45 2026 GMT
            Not After : Feb 10 12:00:45 2026 GMT
        Subject: CN=69961b7e346bc52589cce006cb7b4f77c438c055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:61:90:2c:48:eb:a6:0d:6c:1d:d6:20:8a:
                    df:4c:55:d3:ba:a2:31:9d:8c:e1:8f:12:a7:5c:1b:
                    d8:59:e0:fd:0d:8c:66:27:2f:15:67:da:43:08:f8:
                    0b:45:9e:25:49:3c:1b:43:ba:c9:fa:4d:24:11:b3:
                    40:e8:1f:14:1a:29:64:1a:a6:02:ac:32:ab:04:68:
                    55:e2:d5:b6:32:e1:12:f5:ea:39:84:47:5b:50:79:
                    ba:e6:c5:a8:a1:48:30:0c:8c:ee:be:c3:6e:53:be:
                    e3:56:13:f6:0f:ae:82:58:56:53:d1:a7:ae:f1:ee:
                    3e:89:b6:c2:5e:d4:98:5f:01:48:c3:37:c4:45:2c:
                    7a:52:be:9c:74:81:07:3e:c1:5c:fa:42:07:6f:b2:
                    dd:ec:6e:cc:71:ac:e7:ae:01:a6:a0:31:09:78:65:
                    22:1f:44:b8:21:3f:2b:0a:de:45:89:ae:a4:06:d4:
                    63:dd:46:dd:cb:49:e1:c0:22:95:72:ae:bb:0c:d6:
                    95:c8:12:f2:de:46:a2:62:ed:8f:50:1d:34:6a:1e:
                    59:83:74:2f:2d:85:4f:1b:bb:6b:2d:ec:52:8f:e8:
                    dd:4b:b9:e5:c0:8d:9f:ee:78:d4:61:76:ef:b0:86:
                    0b:dc:1a:6c:e9:42:8d:d2:a4:c6:90:69:41:e4:5e:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:96:1B:7E:34:6B:C5:25:89:CC:E0:06:CB:7B:4F:77:C4:38:C0:55
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:15:8a:67:26:dc:8a:d8:34:f6:51:05:74:6c:2e:2c:21:6a:
         bb:9c:f9:0e:62:3d:2a:12:1a:65:63:6b:11:bc:7e:dd:e0:b4:
         3e:5d:33:c0:fe:c1:5a:19:68:87:cf:4e:cf:5e:1e:32:a5:c4:
         a7:7a:bf:64:0d:69:09:7c:9d:36:ac:14:80:c1:ad:89:e9:8c:
         41:52:98:f5:fc:1c:cc:c5:56:32:06:39:38:4b:9f:d6:98:5c:
         d8:2c:65:9a:aa:b4:df:ad:ed:72:ef:c6:fa:e1:2e:f3:bc:45:
         73:30:ba:73:94:e2:f1:cf:bf:5e:ed:a7:a2:7c:9f:3e:77:72:
         b7:97:d2:52:3a:73:4f:fe:fe:9b:b9:17:6f:78:71:97:c1:fc:
         2a:68:b0:57:4c:0c:5d:88:0a:35:c1:12:e5:b9:3f:06:53:1d:
         9e:80:e6:eb:5b:58:87:09:26:12:6b:78:39:40:fc:18:44:2e:
         4f:d8:bb:5d:4c:b2:88:a8:e4:06:08:cc:fc:af:8e:f5:5f:24:
         79:be:8e:b7:84:b0:b3:69:d1:30:46:5c:43:8a:2f:cf:96:d2:
         cd:52:2f:18:30:d9:08:6c:a9:78:4b:22:5e:8e:1c:b7:08:b2:
         a6:6c:3a:1f:fb:81:7e:af:7e:53:76:7d:12:06:9d:34:8a:97:
         c6:40:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:40 2026 by rpki-client