This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File:                     mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier:          3k4SyjCr1pbmJn2D2WY9I0yZlyC5vM/mEZwExzd6i64=
Subject key identifier:   02:BD:93:31:65:9F:8F:5D:55:23:39:95:A3:E6:5B:AA:ED:F6:67:0C
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer:       /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial:       019C4547826A542AAF6020674BE235140BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number:          14CB
Signing time:             Tue 10 Feb 2026 02:00:40 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:40 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:40 +0000
Files and hashes:         1: R96emqY6ncQoUAU51OVYuWj0FD4.roa (hash: DJiJZV+nXxqVKXP60yIaGjvvzDv5GqmmKMPLo4GDtRA=)
                          2: mjZAX8OpHY1dvjSloL-p6ZB6YvA.roa (hash: UjqoTpMMczna/METwrK97MJ304NWBJz6gI+TWhRdCgs=)
                          3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: ezx0Da0uyxpn075rhzMv1yuJVehXzjaMjNOCckp1dC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:82:6a:54:2a:af:60:20:67:4b:e2:35:14:0b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
        Validity
            Not Before: Feb 10 02:00:40 2026 GMT
            Not After : Feb 11 02:00:40 2026 GMT
        Subject: CN=02bd9331659f8f5d55233995a3e65baaedf6670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:74:30:98:63:e6:27:a5:9e:ce:89:d2:51:
                    f5:1c:6f:38:21:19:9f:b1:64:d2:90:55:e4:c1:19:
                    7e:8a:05:05:96:06:9c:1f:98:df:ed:7d:ba:14:5d:
                    86:59:aa:2c:d2:82:ef:1e:5e:6e:ba:fd:94:89:45:
                    38:57:24:0e:a5:e1:ab:04:88:38:cb:c0:a3:92:01:
                    8b:fb:29:e5:e6:cf:16:da:d0:22:e5:6d:7f:dc:50:
                    96:b2:66:3f:f1:20:1e:97:bc:83:70:91:60:10:c8:
                    25:27:6f:58:86:00:cf:57:79:35:27:59:9c:3e:2d:
                    26:99:14:0a:9e:2b:c9:fd:27:a3:0c:db:1a:aa:dd:
                    81:5c:32:d3:58:f1:ba:a0:40:4f:00:b6:44:c7:f2:
                    c3:24:fe:93:f8:57:3c:ba:b5:40:7c:bb:12:35:f4:
                    cf:a8:69:ef:b0:56:48:30:13:8e:87:3b:a2:87:5d:
                    83:d1:59:98:d6:77:ab:dc:96:83:9e:2d:28:21:67:
                    dc:75:9e:8a:b3:e7:d6:06:99:39:c5:4b:c8:33:d0:
                    47:c8:ef:53:77:f5:a8:70:42:e4:9e:7c:97:77:b6:
                    33:90:1b:05:67:d4:19:f8:3f:28:67:e0:45:ec:b3:
                    15:88:38:df:fe:af:ea:08:7f:6c:6d:6b:05:0b:08:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:93:31:65:9F:8F:5D:55:23:39:95:A3:E6:5B:AA:ED:F6:67:0C
            X509v3 Authority Key Identifier:
                keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:28:1f:e4:e2:1c:30:7a:71:5a:63:b1:99:80:35:7a:8a:f2:
         cf:0d:b7:e9:e8:e7:a3:4b:99:66:a7:61:31:19:73:73:f1:e9:
         ab:b1:bd:d6:7b:0e:78:e2:f6:7e:26:79:10:76:1b:8f:96:5a:
         f8:68:16:bf:b3:33:1a:7f:ca:7d:2e:77:00:65:67:db:c2:c5:
         67:57:a1:80:8a:47:39:4e:05:a7:5d:4a:b7:f2:33:75:32:a1:
         98:88:75:0d:18:a7:42:e4:7f:49:eb:66:5a:4c:11:5e:2b:5c:
         35:7c:2d:22:aa:e4:fd:a8:86:fc:a2:04:62:07:cd:dd:22:2c:
         bd:94:2b:42:2b:2d:1f:0c:d8:08:b9:54:41:02:95:50:82:0f:
         62:5e:22:b0:cc:48:3e:66:85:05:a6:9c:b7:bb:7b:b6:9c:ed:
         1f:bb:37:a3:61:5c:5b:96:6a:20:5d:10:06:21:39:11:7b:83:
         0f:43:cf:f9:2c:de:d5:06:41:c8:07:22:d4:1f:30:7a:bd:6c:
         41:f3:c3:58:f0:e8:21:d6:a6:ca:04:a0:3f:ac:3a:49:30:83:
         6a:9d:1a:83:4b:e1:7f:cc:d6:1e:99:55:71:d2:7c:e5:7d:52:
         c0:25:6c:5e:31:ac:ed:1b:20:6b:a3:c1:bd:8b:3f:31:83:62:
         6f:32:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:47:28 2026 by rpki-client