This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File:                     c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier:          Qzb5oxxwA5JSEUkPSExGhYHy0DWREtasjxc7tKWCSUw=
Subject key identifier:   D2:05:D2:4D:D8:DF:6D:51:B2:E7:C4:FE:FA:CD:0F:AF:4D:5B:81:DD
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer:       /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial:       019C427D928F46623881691B334E774A4105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number:          0C24
Signing time:             Mon 09 Feb 2026 13:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:51 +0000
Files and hashes:         1: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: qMOabS13EmD3C8t25VlfjGS2yssgAdD8h0VBACAK304=)
                          2: xenNFJCmXjXG5F3kgOfPTRtR0L0.roa (hash: Rs1MjItgO+A6sueh9XicARxqQOJ7zkW0Gr1nwJ+Ebtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:92:8f:46:62:38:81:69:1b:33:4e:77:4a:41:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
        Validity
            Not Before: Feb  9 13:00:51 2026 GMT
            Not After : Feb 10 13:00:51 2026 GMT
        Subject: CN=d205d24dd8df6d51b2e7c4fefacd0faf4d5b81dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:80:53:35:bd:16:ca:f5:12:6e:48:62:8d:
                    35:1a:e5:6f:e5:fe:60:39:e3:bc:01:1e:09:6a:04:
                    37:48:6c:22:37:81:28:62:40:3f:86:cf:c6:5a:e7:
                    3f:23:56:cf:06:6a:36:51:78:5f:de:18:f7:78:e2:
                    c5:b2:3e:a6:c7:7d:f4:a2:00:ed:ac:ab:8e:7a:3b:
                    88:36:1d:b1:48:e6:db:36:02:e1:ec:cf:ae:48:08:
                    f3:8d:57:4e:ac:93:00:5a:2c:a4:87:ab:09:af:65:
                    cf:bf:98:aa:cd:f6:98:46:60:cf:fd:e5:83:86:e4:
                    ac:28:83:06:07:8a:06:34:b6:61:18:75:49:c8:2b:
                    c6:b8:31:08:fe:27:2b:20:a4:89:fa:05:cd:a0:6e:
                    ad:fa:39:2f:25:e5:94:84:4c:c4:d3:67:94:4b:ff:
                    c6:45:de:af:11:52:fe:f9:04:4c:1f:27:5d:5b:32:
                    c5:36:b3:a3:b7:e9:aa:6b:24:0d:53:ad:1b:39:62:
                    0d:19:cc:2f:8e:be:3a:a5:2b:43:90:3c:5a:22:8a:
                    81:fd:5f:70:04:1d:6a:53:ba:3c:07:a8:2e:f9:32:
                    38:62:8e:a4:09:20:16:fc:9f:44:30:4d:56:dd:40:
                    9f:d5:25:7b:9f:a4:ab:3e:b9:9b:72:fc:4d:4d:ed:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:05:D2:4D:D8:DF:6D:51:B2:E7:C4:FE:FA:CD:0F:AF:4D:5B:81:DD
            X509v3 Authority Key Identifier:
                keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:23:2c:6a:f1:b6:d7:69:3c:12:1f:b8:d1:7d:92:d0:72:7c:
         4a:d1:5e:39:a3:96:a8:f8:5c:c4:2f:b8:48:e2:9e:d5:31:d4:
         df:2b:bb:a4:de:45:bd:40:b1:a1:76:7e:e3:f3:a5:c7:fe:42:
         0c:0e:61:ad:02:26:fc:84:ca:c5:c7:31:9b:80:fd:07:c8:29:
         75:f0:7a:c0:f7:17:e9:c0:4c:de:a4:33:52:d7:5f:4e:0a:5c:
         bb:2f:05:1a:d1:6c:3c:e6:8a:26:99:d5:e0:38:6d:bc:76:50:
         07:af:c2:cb:d8:bc:36:6f:0a:9c:37:73:5d:d2:95:d5:c1:98:
         7e:88:2b:3f:c8:61:33:f7:9d:1a:74:22:b8:a5:33:64:be:d4:
         fd:49:53:18:13:9b:fb:95:7b:d7:d6:b8:80:8e:50:7f:14:e0:
         7c:22:c8:b1:9e:68:e1:09:24:dd:52:7f:5d:99:8f:11:13:07:
         d0:b4:9d:5b:61:3c:81:a0:27:6e:65:c9:94:bc:02:ba:26:09:
         fe:28:44:41:53:12:98:6f:e5:d9:9a:17:8c:6c:6c:7c:a4:50:
         c9:c5:fd:0d:09:a0:5d:5a:cc:85:cf:af:39:d1:ce:94:35:07:
         86:4b:fe:f6:73:82:c6:66:4c:8e:54:67:a4:28:ef:25:a8:91:
         8a:8f:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:57 2026 by rpki-client