This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          9L+dZ5U81bGle03HyZmxB9R2qiNNqkt+n9TvEH2/Ec0=
Subject key identifier:   ED:BF:72:3D:D7:40:A2:4B:B0:41:DC:4F:02:4E:B5:5D:78:85:23:BC
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       019C41D89C52C9E8D61F0279CCF295BD9E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 10:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:40 +0000
Files and hashes:         1: TW2-9DzFOuohPs1xj6I1jkzuZzI.roa (hash: IdQKbJvB7AT8M3FZo1RjBrLT4XNU6TgjC9b0dCsoz+k=)
                          2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: WqjZovKore8ci4bSMiBteIjgTIIuE7tZyRRvVOmrKQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:9c:52:c9:e8:d6:1f:02:79:cc:f2:95:bd:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Feb  9 10:00:40 2026 GMT
            Not After : Feb 10 10:00:40 2026 GMT
        Subject: CN=edbf723dd740a24bb041dc4f024eb55d788523bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:13:c6:cd:57:57:dc:f1:11:35:a0:9b:2b:
                    d7:1c:c5:0c:61:ab:96:4e:1e:fb:f9:af:2b:47:22:
                    ba:fd:28:0f:33:68:f5:ae:d7:ca:32:b9:f3:73:2f:
                    fb:6b:8c:05:71:17:d2:1b:e4:74:b3:e3:bb:70:bb:
                    c1:8a:6f:6c:28:6f:1c:08:c0:80:fd:42:38:2e:e0:
                    91:44:11:86:fc:76:f3:10:e0:31:23:ab:33:dc:bb:
                    c0:b1:06:27:17:dc:80:20:e3:d7:76:6a:67:ed:5f:
                    5a:68:85:9e:3c:d8:0d:b9:ec:c0:9d:55:ac:93:77:
                    88:76:9b:d4:b5:28:68:a8:cf:05:a4:61:85:bd:a1:
                    9f:0b:f6:e6:18:a9:40:c8:d5:30:69:42:67:0e:46:
                    69:00:6a:ff:2c:7b:54:16:bd:55:58:f1:ba:ce:94:
                    3b:e7:95:64:88:06:62:aa:67:f2:bb:ff:23:88:2d:
                    4c:93:c6:be:b4:0e:a4:dd:63:46:5a:ff:31:85:64:
                    eb:f7:5e:f0:bf:f3:de:29:08:d5:8f:cd:51:13:d5:
                    81:07:0f:18:14:fa:46:b6:91:45:51:6e:81:3d:48:
                    2b:29:50:3b:b2:c3:e2:fe:60:7b:3c:0c:23:68:d4:
                    f5:c4:ba:04:64:34:9c:59:8f:c5:5c:17:da:ab:32:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:72:3D:D7:40:A2:4B:B0:41:DC:4F:02:4E:B5:5D:78:85:23:BC
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:3a:bc:95:44:15:a4:d3:10:c9:f3:07:3d:69:f7:14:b4:
         5d:cb:8a:db:5c:7b:6f:05:8a:a7:fb:48:b2:5b:56:e2:7d:a8:
         cc:6f:64:a4:b4:44:fd:36:38:08:67:17:3d:a4:19:59:09:fa:
         19:7d:69:11:ed:17:63:c5:5a:e1:48:66:7f:44:7d:42:ea:d9:
         80:da:8c:f2:9a:bf:f3:21:b0:b1:c9:52:9d:82:2f:7d:0b:23:
         e4:51:49:2b:39:89:c3:0b:48:73:d5:76:d9:20:8b:4f:00:53:
         1f:ac:16:b7:93:bf:8d:c0:cc:27:22:c0:66:67:b4:3b:18:4b:
         1a:ee:2b:fa:d7:1a:e1:2f:c4:a6:8d:70:dd:86:94:8b:34:fc:
         dd:4e:5f:b4:5c:00:c0:9a:2f:43:b9:a9:62:38:96:b5:5f:ed:
         8a:cb:0a:d4:b6:71:ae:6b:94:e6:7d:73:93:47:bc:d7:2f:58:
         dc:1a:77:fd:49:68:0a:e0:96:19:24:e4:6c:2d:cf:8c:40:76:
         3f:57:3e:35:48:6f:f1:9d:d5:38:a4:d3:0c:5d:f9:27:b5:07:
         26:af:75:5e:a4:19:83:66:82:29:ed:31:7d:25:7c:df:1c:b2:
         4b:d2:d9:11:80:55:1d:13:d7:91:f8:65:fe:57:36:60:7c:a2:
         ce:b8:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:25 2026 by rpki-client