This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File:                     cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier:          q/PDH51CX90XLlTbMC7ARcfsP2tU6sjbgr9B6B3ongI=
Subject key identifier:   FF:BB:AD:6D:E0:4D:32:52:F4:93:35:50:EC:2F:89:85:E5:57:BD:46
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer:       /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial:       019C420FBF59C47E8C1F123CB917B9E8DCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:54 +0000
Files and hashes:         1: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: 5bcRU08nZneDYR/Z5Mb8Ikuc926q1m7HcN5h8t284SU=)
                          2: mbuE0G4tXcvxYI0m6o1MnCuIyBo.roa (hash: Nc7NtzvPla6o9BhIFsNEzrhAOEqN5rOwpnDgkrScjgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:bf:59:c4:7e:8c:1f:12:3c:b9:17:b9:e8:dc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
        Validity
            Not Before: Feb  9 11:00:54 2026 GMT
            Not After : Feb 10 11:00:54 2026 GMT
        Subject: CN=ffbbad6de04d3252f4933550ec2f8985e557bd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:05:f1:7f:7d:51:02:e2:01:ca:a4:f6:23:
                    33:79:7f:fb:00:6d:3d:5a:c9:89:d9:d1:2e:14:16:
                    c2:9b:86:81:f5:8d:1a:de:ee:b5:97:3f:33:b6:d2:
                    8b:57:e1:a9:84:ce:e8:95:11:bc:b8:41:03:1c:a3:
                    ed:65:c2:95:7a:8e:37:42:ae:23:87:92:a1:fe:ab:
                    8a:06:27:b7:33:c8:f3:6c:8b:a0:26:ab:28:9c:05:
                    4f:7a:06:6b:c1:53:91:41:45:4e:33:18:e0:60:65:
                    19:7b:86:07:23:19:44:82:a4:ad:f9:1d:c6:f4:a4:
                    19:d5:d9:de:1c:1a:ec:b0:38:0e:11:c3:2f:c9:a8:
                    d0:81:d4:08:f8:49:57:8f:ec:0e:86:1f:09:4a:17:
                    44:c9:44:ba:c9:46:fe:db:de:31:08:34:a5:2f:17:
                    cc:66:64:f3:ed:07:88:0e:11:9b:20:11:d1:40:dd:
                    cc:62:ed:d2:88:d3:25:ce:64:e2:74:6e:c5:d2:c4:
                    d2:4c:47:3f:b2:14:3b:6e:af:69:1e:63:63:72:c9:
                    db:29:68:1a:0f:47:a5:e8:ee:3c:b3:18:d7:4e:b6:
                    48:b6:7b:49:af:16:8a:16:df:40:8a:2e:c6:05:8b:
                    d8:41:04:f5:2e:7f:3b:2d:1f:c9:fe:33:21:9e:60:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BB:AD:6D:E0:4D:32:52:F4:93:35:50:EC:2F:89:85:E5:57:BD:46
            X509v3 Authority Key Identifier:
                keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:ab:d3:e1:18:0c:ea:3a:f4:c7:f3:ed:cb:30:a4:83:9e:
         3a:ca:c8:09:1d:bf:f1:4d:4d:fe:27:0c:99:18:4c:19:ec:15:
         6a:1a:56:fc:1e:c8:9c:92:72:b4:a9:45:cb:64:0b:7c:d9:0a:
         47:dd:8d:66:74:98:83:76:76:3c:f5:b5:c5:6a:c6:e2:b2:ad:
         ac:cc:bc:43:32:b0:01:2c:69:23:06:d8:9c:a2:d9:88:8f:80:
         c9:85:33:49:a1:5b:5f:3e:59:06:1f:a7:b1:6f:38:7d:eb:8e:
         c3:88:0b:e7:8b:4f:23:ec:bf:09:ba:2f:02:c0:30:68:73:d2:
         c1:c3:8c:77:db:ea:1b:3c:2a:fa:84:9e:00:0f:fb:25:e6:07:
         b5:e1:d2:03:7f:10:86:d7:23:c7:91:34:07:0f:b7:36:76:9b:
         20:df:07:7e:a6:2a:9c:46:c1:c5:cb:06:d3:e1:c4:e4:54:e1:
         98:95:8a:d0:ce:0c:c7:09:41:68:3c:2d:b1:9d:5d:44:03:5d:
         28:dd:22:d3:c7:5f:b8:b5:88:2f:f1:50:af:74:86:0d:02:60:
         f8:32:aa:7e:d8:2f:e7:70:f8:9e:23:14:a8:86:de:ef:d9:bd:
         a6:9e:74:e3:8d:97:c6:00:9b:48:74:b9:84:2a:6f:b6:0b:01:
         b3:7b:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:39 2026 by rpki-client