This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File:                     Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier:          6Rc801953nvyVTTSj5JaZ4RuKDugZgbkZYQYyl1UqSU=
Subject key identifier:   0F:09:32:39:44:EB:C4:BC:B2:D9:53:F9:B5:0D:85:35:D5:F9:82:C0
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer:       /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial:       019C4322A48101639707462FCEE660863543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:09 +0000
Files and hashes:         1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: LtyZyTSRXDx9+imqEY0LibXeM0U/gQ7KKLZiTPRCWTY=)
                          2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a4:81:01:63:97:07:46:2f:ce:e6:60:86:35:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
        Validity
            Not Before: Feb  9 16:01:09 2026 GMT
            Not After : Feb 10 16:01:09 2026 GMT
        Subject: CN=0f09323944ebc4bcb2d953f9b50d8535d5f982c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:1d:f3:e6:36:c6:ea:2a:91:83:6f:61:46:
                    b4:7c:4b:f5:33:52:4c:1a:6c:0a:d9:20:31:f4:c0:
                    67:57:27:96:21:c4:de:18:da:7e:bd:ed:cc:8b:44:
                    11:87:c1:28:bd:14:de:77:22:a3:da:87:4f:5b:29:
                    83:2a:90:b7:58:b5:ff:8a:e8:b3:f3:67:f1:28:4f:
                    b7:0d:1a:b3:f0:66:c6:45:88:77:1b:e8:78:b7:a7:
                    83:62:e6:b1:a4:58:49:78:89:49:b9:e7:05:1b:d6:
                    7d:69:2d:cf:a2:a5:28:f6:2c:7d:03:a2:b2:16:94:
                    85:6b:b0:4d:05:83:63:68:d5:8f:ec:ab:74:87:cb:
                    06:36:8f:1f:92:62:de:67:ed:6e:5e:60:4e:b9:58:
                    2e:00:77:59:af:e3:b8:33:ed:bd:fe:33:b4:06:f5:
                    be:b7:5f:9a:5c:22:f4:c0:12:eb:c2:8d:6d:1f:f1:
                    a2:32:a5:7c:82:a0:62:0b:a5:f0:f7:ba:a0:2e:47:
                    94:e0:be:17:89:a7:c5:56:c1:db:09:09:a1:19:09:
                    72:ae:3e:83:5f:a7:82:a6:b5:c4:7d:40:f5:dc:bf:
                    a8:cc:0e:4b:d1:8b:5b:ab:07:5e:76:30:1b:f3:09:
                    74:33:d8:74:cb:80:1d:78:cc:1d:97:6d:a7:70:70:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:32:39:44:EB:C4:BC:B2:D9:53:F9:B5:0D:85:35:D5:F9:82:C0
            X509v3 Authority Key Identifier:
                keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:15:33:aa:49:4e:7a:a9:38:17:21:b3:ba:7b:bc:1e:5e:6a:
         32:ca:f6:a1:e1:3b:5e:b8:a7:04:e8:be:d1:fe:a9:1a:bc:40:
         13:66:a5:1a:08:e3:5a:b8:6d:84:75:7f:c9:f4:4e:30:18:24:
         67:65:24:82:b1:89:7c:f8:5c:ce:ab:a5:00:83:35:f0:c1:dc:
         f3:70:6b:07:04:4d:60:a5:9d:60:13:5a:61:3e:3e:12:cb:8f:
         70:1a:c6:99:f0:c3:cb:6c:01:d8:38:20:00:a0:0f:a0:d1:00:
         04:41:53:57:d6:35:0e:ca:09:a4:08:44:ed:cb:62:48:cc:67:
         30:12:8e:ed:d3:1f:25:c8:7d:9e:fe:f8:5d:88:26:28:43:9d:
         e3:2b:68:f3:97:84:08:2d:c2:f5:83:70:63:ac:8a:f9:fe:d6:
         43:27:e8:21:de:ef:33:c1:8d:c8:10:a7:3c:ec:9b:82:be:2b:
         c7:0a:58:7f:e7:b4:78:75:16:c8:61:08:8e:d8:e7:14:cf:cd:
         ca:90:ef:20:c2:46:94:8d:3b:12:d4:ba:da:c7:c5:a1:ff:a4:
         69:e1:c7:cf:29:72:63:4d:00:b1:9b:10:0a:05:49:6b:d3:d9:
         13:ed:0c:a0:0b:5c:5e:8d:71:02:3d:8b:37:44:55:5f:ef:f6:
         5e:20:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:25 2026 by rpki-client