This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          /MKTwjQ65Z+l0dLJ6qer9ipqc8K/RvfgXerHh2NTty4=
Subject key identifier:   EC:F8:73:85:70:27:7A:61:A9:DC:E8:29:C6:43:A3:03:A1:21:1D:F4
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       019C42EB8ECF903749D99A63152CCC5C31F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0585
Signing time:             Mon 09 Feb 2026 15:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:59 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: Es3c1bLRr9HgtKPvQzZASOhS79p2RTJ3AuDrBjeXQbI=)
                          2: rDbD36OC2clR1VcH9ybYG4X8bCg.roa (hash: KScj6dQC600LiAKS+yk/LqkmCh6S5faudW7dbCKNdtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:8e:cf:90:37:49:d9:9a:63:15:2c:cc:5c:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Feb  9 15:00:59 2026 GMT
            Not After : Feb 10 15:00:59 2026 GMT
        Subject: CN=ecf8738570277a61a9dce829c643a303a1211df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:19:12:07:8f:16:a5:d4:bf:38:41:57:4c:87:
                    81:1a:6e:ac:ce:68:2a:a8:54:5c:bc:f8:81:f5:56:
                    b7:0b:55:39:bc:92:03:67:33:bb:2d:7e:6f:9e:66:
                    06:d9:81:dc:18:22:52:78:07:f5:c6:58:05:41:30:
                    65:a4:4a:33:05:14:23:ee:ab:e0:fd:55:ce:e4:45:
                    ba:7d:7c:64:6d:14:51:38:e9:d0:0c:a4:4b:29:6a:
                    4e:81:7d:3a:cb:50:e5:8d:68:6f:e0:11:e6:75:a7:
                    2d:8d:d3:7d:1e:e2:f4:cd:20:f9:74:8f:e4:4e:1e:
                    17:69:4f:d1:a6:e1:6e:54:89:0c:22:a9:20:a9:ea:
                    4e:6e:ef:fe:34:e8:1b:68:4b:fa:2f:db:e7:a1:4a:
                    eb:33:4d:83:ba:27:39:a4:0c:08:43:ac:41:8c:02:
                    a1:b0:57:c3:1d:d5:a3:cf:e9:fa:80:01:77:6e:c4:
                    47:55:55:8b:17:68:5e:9a:4a:b5:47:04:66:bc:0d:
                    83:50:6a:c6:11:dd:50:76:35:b2:0d:9e:e1:71:fb:
                    43:60:49:b6:2d:16:0a:79:37:bc:58:15:f7:66:42:
                    49:4f:7c:de:75:ec:df:6d:7b:ab:b0:38:81:21:c6:
                    e8:b3:14:a0:1b:7a:c6:58:11:2f:14:03:9a:ff:10:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:73:85:70:27:7A:61:A9:DC:E8:29:C6:43:A3:03:A1:21:1D:F4
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:bf:47:c0:1c:73:0a:52:88:54:cc:0d:ea:4c:ef:67:c4:
         74:2d:d5:51:91:b3:00:14:75:35:ce:e5:a0:7e:ef:a9:8f:dc:
         43:7c:c4:2b:2c:51:1d:74:fb:31:85:fc:31:89:31:22:3f:67:
         82:bb:3a:6f:bf:fb:d2:f2:7b:1b:e9:a7:49:7a:05:6e:f9:5d:
         a1:cf:2b:e8:27:0b:c6:f0:8c:87:35:72:63:d7:38:97:0e:78:
         9a:09:2a:70:85:8a:43:5b:2a:5c:1c:66:75:2d:cf:fa:03:e5:
         6e:47:44:5c:12:af:3a:b2:6e:f2:83:77:0c:96:6d:e1:46:23:
         03:38:49:a8:98:d8:f5:06:48:05:35:d9:16:a2:f3:bd:7b:1b:
         36:c6:bb:40:a6:2e:2f:b0:1a:0e:e6:7b:cd:5a:79:82:c9:bc:
         7f:40:b9:ab:7e:b2:ef:cf:72:cd:5e:32:cf:70:5d:44:32:f4:
         f9:f0:6e:56:5d:1f:84:93:fb:12:3d:d1:51:78:48:d9:e3:cc:
         4d:05:02:df:a3:1d:f3:9e:26:17:30:0c:fe:5d:e2:6a:11:af:
         23:26:3b:5e:e4:13:98:4b:63:8d:e7:12:76:16:a3:9b:d0:43:
         7b:f6:ee:62:f3:a0:c8:29:ed:c0:2f:31:cd:da:3c:3b:ae:8e:
         21:97:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:45 2026 by rpki-client