This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File:                     CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier:          CMvjKhjKhGukt7m50r/n3vI42EyuOjhgOvMHw5D6L/E=
Subject key identifier:   0B:2F:0F:9A:71:35:E2:88:A6:E4:DF:DB:F8:47:95:5A:1E:9B:E9:FC
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer:       /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial:       019C40FCC96F7F4E7A416FEA43ECA60D23DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number:          15D3
Signing time:             Mon 09 Feb 2026 06:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:34 +0000
Files and hashes:         1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: 7uf+QfAcgNEyU9uafRNmkBqJSBwfVaaOUzKWHebghYA=)
                          2: xAAFr_8pM0qHutXKz5bJzNuOHSs.roa (hash: mrqi/YUBSl2ewfWvM3J/1CATw90lWobMjcJ1JqVQVtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:c9:6f:7f:4e:7a:41:6f:ea:43:ec:a6:0d:23:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
        Validity
            Not Before: Feb  9 06:00:34 2026 GMT
            Not After : Feb 10 06:00:34 2026 GMT
        Subject: CN=0b2f0f9a7135e288a6e4dfdbf847955a1e9be9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:77:45:ec:64:cf:ce:48:82:b2:9d:3c:d9:ea:
                    05:e5:ab:58:ee:4d:de:77:59:93:c7:b3:d0:52:e7:
                    48:56:2a:22:12:5f:ca:31:fb:04:fd:81:b3:83:f8:
                    d8:2d:f2:9c:e8:1a:91:b0:7d:2a:f0:f4:25:b8:66:
                    4a:18:45:a7:8b:46:c5:06:32:a8:be:e6:23:bf:ab:
                    90:49:08:aa:82:43:7d:c4:b4:c9:65:2a:22:7a:7d:
                    1e:41:86:9f:ae:c2:d7:50:8a:c4:c6:7a:bd:9f:10:
                    ab:43:a8:53:4a:03:05:b2:ad:fd:2e:81:8b:52:cb:
                    67:87:91:f7:38:9f:1b:e9:34:5a:f4:5f:94:f8:dd:
                    b4:ae:49:27:74:1c:02:9b:2e:ef:f6:f9:32:57:8d:
                    15:f7:68:fa:f2:a4:af:18:86:3b:bc:2f:ba:53:de:
                    4b:bb:e9:9f:a4:82:23:a6:37:ab:55:40:86:53:f1:
                    a8:16:83:a0:23:a0:52:3a:ac:40:0b:b5:f8:a9:4c:
                    ab:dd:b3:18:6e:d1:15:cb:c5:5b:4a:bf:98:83:f2:
                    5e:da:c9:33:44:0a:6b:29:a0:f1:ba:27:a2:6d:fa:
                    97:55:9d:ba:83:b2:9b:20:d5:78:a6:8a:d0:cd:c8:
                    76:13:6c:fc:a0:67:de:69:b1:48:1e:83:30:95:05:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:0F:9A:71:35:E2:88:A6:E4:DF:DB:F8:47:95:5A:1E:9B:E9:FC
            X509v3 Authority Key Identifier:
                keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bc:8e:cb:e3:b2:c4:78:28:ff:e2:f7:fb:19:76:51:f6:91:
         c6:d9:50:d6:81:2d:26:5c:ea:5e:f8:90:fd:62:e3:97:65:a2:
         b2:c1:87:21:0d:23:71:34:c1:09:5c:b2:67:96:16:22:dd:09:
         f5:5e:6b:08:06:7b:07:4c:06:58:0d:3d:be:a7:dd:0c:a1:b1:
         5f:95:c1:05:4e:3d:16:8d:53:52:e3:9a:5a:ff:b0:23:e0:c4:
         e2:69:71:19:8c:3f:54:7c:d7:5e:b2:1c:4f:a6:e3:aa:45:38:
         bb:21:0d:01:a8:c2:8a:36:af:18:0f:a8:c8:52:b0:c7:7d:0e:
         41:66:45:83:6f:91:4a:bb:97:f3:5b:9f:84:99:b2:3f:f6:b5:
         3b:d8:be:24:a3:ce:e0:cb:a3:e5:eb:19:3f:51:24:b7:c1:21:
         63:9d:a4:a6:0e:b2:34:7d:3e:17:0b:c9:bb:92:f4:6b:f6:28:
         46:d9:67:e2:8f:df:b8:96:cc:b4:2d:f8:4e:fa:6c:e8:2b:56:
         39:42:72:d0:bb:24:b3:e5:6c:75:39:c2:23:ff:d3:65:24:37:
         f3:9c:4d:4a:50:5f:53:11:94:d5:41:6d:bd:83:23:47:19:ac:
         20:3c:f1:45:f0:72:54:b8:43:26:5d:aa:52:9e:b0:4b:a1:3f:
         38:3c:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:53 2026 by rpki-client