This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File:                     Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier:          Q1AAITihe2InmUIDw9hUOrIvmE/u+URU/GjFeKiVLok=
Subject key identifier:   7B:C1:92:75:8F:95:E6:1D:36:5D:79:5F:DC:B3:96:48:D4:26:5C:84
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer:       /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial:       019C420FCFDF027483280354EBE0DFB56DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number:          0827
Signing time:             Mon 09 Feb 2026 11:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:58 +0000
Files and hashes:         1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: DhG1xaGgNm51drB4OqqIRbPEObx88RwaI1CCCMQh+ss=)
                          2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:cf:df:02:74:83:28:03:54:eb:e0:df:b5:6d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
        Validity
            Not Before: Feb  9 11:00:58 2026 GMT
            Not After : Feb 10 11:00:58 2026 GMT
        Subject: CN=7bc192758f95e61d365d795fdcb39648d4265c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:98:3b:cc:e8:33:77:89:5a:f1:79:4d:58:
                    68:03:df:82:d2:3d:36:d1:94:27:01:03:ce:20:04:
                    31:34:dd:6a:39:47:40:8b:6e:3e:ad:59:e7:9f:db:
                    9c:0b:f8:75:a1:f3:4d:80:e1:e2:87:3b:7d:d6:a9:
                    be:41:6b:70:e8:bd:93:f4:00:9c:e0:fc:3c:42:13:
                    dc:93:a5:34:2f:f5:8d:62:d9:bd:81:40:d3:a1:e9:
                    33:42:ac:b0:7f:fa:79:af:a5:52:95:3e:a5:1f:0f:
                    84:ec:55:be:37:c3:6f:8c:7c:c0:13:51:d2:5f:f6:
                    f6:0d:bd:88:48:6f:a2:9e:ec:79:d9:60:a2:88:f1:
                    c1:6e:94:d4:a8:bf:88:47:14:bf:bd:62:28:66:ec:
                    93:11:b2:02:9f:ac:58:bb:f3:d5:82:ca:5b:8b:c6:
                    8c:ba:f1:72:65:b1:d1:8e:c0:9d:c4:91:32:4f:78:
                    6b:a5:03:d7:d2:43:d5:63:58:0a:97:93:bc:e9:1d:
                    26:ee:a3:46:73:32:91:04:d9:1a:26:3c:bf:c4:90:
                    cb:9b:47:e7:8a:2c:e2:2f:2b:9a:fe:8d:71:30:84:
                    8d:e3:98:e1:bd:84:43:8a:16:d1:36:54:5f:10:b4:
                    16:31:de:57:3f:cb:a8:60:95:d4:0e:85:f0:5f:7a:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C1:92:75:8F:95:E6:1D:36:5D:79:5F:DC:B3:96:48:D4:26:5C:84
            X509v3 Authority Key Identifier:
                keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:17:7f:24:42:2d:fc:c6:a7:83:b4:75:8b:26:dd:46:ef:
         34:ff:32:6d:e9:21:69:3c:78:0b:2a:35:12:b7:98:1a:fc:35:
         3b:94:c8:93:aa:34:0a:60:fa:9f:0a:f5:d4:6e:2e:df:92:84:
         3b:02:1c:ea:77:26:bd:3c:bf:fb:26:fc:3c:90:2d:cf:91:09:
         7d:6e:60:c6:10:95:1d:b6:18:ec:df:e0:84:87:e4:1f:94:c8:
         6b:c8:71:1c:89:56:ae:73:3e:f7:15:6b:f7:26:ee:2f:75:f4:
         9d:96:bd:82:5a:2b:cc:46:b5:7e:87:52:b6:34:c4:b3:1b:71:
         78:e1:da:e8:a1:58:5e:97:1b:c9:ee:11:f4:10:25:f7:4c:76:
         b0:d5:39:eb:2b:c1:20:b2:77:82:6d:fd:fd:69:3e:40:60:b1:
         cf:9d:d6:f6:88:3e:32:99:83:6b:fa:e2:ec:85:9f:e1:e0:c3:
         71:d7:45:d6:8e:ec:a6:a0:c8:e5:0a:90:36:07:b9:66:67:da:
         4e:96:bb:65:a2:b3:9b:e4:07:5e:bd:50:0b:d6:e7:16:f6:05:
         eb:70:16:c4:8c:26:f7:b4:75:71:40:55:47:51:d5:a8:70:1b:
         bf:a3:f2:21:b9:7a:f8:3b:2a:ef:1e:94:95:93:f2:7b:8d:de:
         d9:64:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:32 2026 by rpki-client