This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          /PqxGNQpNBgIdpDSZpD1EC6V7YNK2s+QQfPDW9aDgAY=
Subject key identifier:   A9:95:A9:26:F0:E8:9D:98:F7:A5:02:E6:F8:1E:C6:3A:DF:31:67:FF
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       019C42B424D00B73343FE66383BB5017E774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:27 +0000
Files and hashes:         1: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: fQOzbSFRf9Ml8HhO2BRCCYPUPz/qaD7Z9EslCZ+BnAU=)
                          2: vHNaMxjl_jxvOB7TUQY7frZB4BA.roa (hash: tPeRf17Q/t/ooDmwNWzZrhi14ldaBDrCWvBhdfbsIYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:24:d0:0b:73:34:3f:e6:63:83:bb:50:17:e7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Feb  9 14:00:27 2026 GMT
            Not After : Feb 10 14:00:27 2026 GMT
        Subject: CN=a995a926f0e89d98f7a502e6f81ec63adf3167ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:9e:1a:4b:fa:43:69:7e:5c:b6:ca:32:00:
                    00:dd:ff:c4:da:9b:89:fa:96:1a:41:68:83:6a:74:
                    a0:28:5a:1e:69:e9:37:da:38:e0:b3:5b:54:e6:7f:
                    c8:7f:39:64:94:38:8a:08:f6:e3:22:12:51:e2:8b:
                    57:fb:55:1b:5b:50:ae:1f:30:b3:2e:b5:ef:de:54:
                    6c:10:f3:64:b5:80:0e:37:c0:7a:10:fb:87:09:83:
                    09:09:af:c4:12:d3:6e:f3:16:16:7c:6f:90:89:76:
                    35:64:86:51:a3:ca:e0:80:29:37:c3:4e:dc:c8:28:
                    c9:9d:1f:d2:83:2b:02:66:f7:a3:c6:d7:78:35:4e:
                    55:40:cd:3b:2f:08:d5:f4:c9:ea:b8:9d:61:ab:72:
                    ba:f0:36:3e:75:3d:d1:73:57:ae:85:90:97:a6:08:
                    fc:36:85:7b:7d:72:49:5c:40:5c:49:16:74:a3:4c:
                    66:fb:12:f9:b6:27:de:28:4a:dc:2d:eb:00:f7:79:
                    a5:24:7f:2e:9f:30:b1:cd:7a:42:69:bb:a6:29:47:
                    dc:67:59:cd:0e:10:c5:08:1e:f8:24:32:ba:1c:ae:
                    ab:0a:3d:10:bd:73:cd:ab:bc:5c:8c:cd:b0:7f:11:
                    e8:10:92:24:c1:c6:21:3c:39:01:55:19:fa:ae:bf:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:A9:26:F0:E8:9D:98:F7:A5:02:E6:F8:1E:C6:3A:DF:31:67:FF
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:33:f8:da:0d:9c:d4:01:b0:74:84:d9:d0:a1:25:b0:16:
         2f:57:eb:74:11:a1:4f:c7:23:a2:17:67:c7:9b:48:01:28:56:
         bd:17:c8:c1:f9:26:d3:ab:52:5c:99:b0:5a:f2:e9:9a:c7:a7:
         b4:35:48:f9:2b:ca:c5:29:96:e9:61:96:a4:bf:9b:42:b1:d3:
         c1:92:1a:8b:93:82:0f:b4:c1:40:db:b9:67:8f:b1:72:fc:9f:
         73:00:32:dd:1f:65:6b:da:48:5a:b1:80:65:2f:aa:2e:61:12:
         f1:15:9c:77:d7:18:15:44:3e:94:e7:aa:73:e8:98:b7:2d:fb:
         90:61:ac:f8:78:73:02:3b:0a:83:60:cb:01:4d:2b:eb:f6:68:
         4e:e8:fa:7b:2e:aa:4e:2a:e4:64:2d:8f:24:3d:46:0f:1b:9e:
         34:68:17:ce:77:56:cd:8e:69:98:ea:d0:50:3b:9c:02:88:26:
         f9:3c:86:6c:b5:b2:38:88:bd:d4:b4:4e:72:fd:32:e5:50:ca:
         11:48:97:85:fe:90:a2:07:28:6b:3c:cc:ff:74:3b:b9:25:fb:
         61:ea:c4:73:3c:59:78:99:b3:64:9b:f0:fd:3d:30:36:2b:cc:
         49:3f:75:d1:df:e4:d3:62:6e:bd:77:bb:e6:7a:92:41:cb:49:
         05:e6:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:44 2026 by rpki-client