This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          G75UYHcHABsxxXV5mH1PB5nBhIdKi9AR5haIh9InC2s=
Subject key identifier:   82:B4:8F:20:EF:55:7E:8E:38:C5:C0:74:AB:A8:CF:CE:DD:BD:BE:56
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       019C427E11359EEA88FD461021C9E8377145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          173E
Signing time:             Mon 09 Feb 2026 13:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:23 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: zmKxDwxeHz2NKTV4BCWdbmO5Mxq37V6Tc9GlOygiAu0=)
                          2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:11:35:9e:ea:88:fd:46:10:21:c9:e8:37:71:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Feb  9 13:01:23 2026 GMT
            Not After : Feb 10 13:01:23 2026 GMT
        Subject: CN=82b48f20ef557e8e38c5c074aba8cfceddbdbe56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:cb:6d:0a:9c:7a:28:89:18:b7:bf:a5:0d:
                    80:a7:0a:88:bd:d1:ce:a4:e6:1a:4f:18:4d:e9:b0:
                    71:58:74:9f:4f:34:e8:2b:05:64:9d:98:f3:ba:f9:
                    41:03:2f:4c:4d:98:5c:ab:54:44:70:a6:1d:20:97:
                    e3:6f:de:0a:c5:64:cc:dc:03:11:86:99:14:5d:98:
                    e4:53:6d:96:17:2c:99:cf:10:ab:bf:04:46:d8:af:
                    49:c4:0c:75:cf:1b:65:05:7c:88:46:38:67:cb:c2:
                    f5:16:a2:16:00:85:b3:62:e0:99:9a:94:56:70:0b:
                    84:77:cf:8c:d5:95:4f:01:db:75:38:cd:30:94:69:
                    bc:0a:a7:fd:d1:2d:32:36:7f:d0:b2:74:16:ca:1f:
                    80:b6:fc:97:37:f7:f2:5f:e0:81:9b:f5:e8:1e:5e:
                    64:fc:19:92:dd:10:72:4c:0d:51:0c:e1:d6:9b:1a:
                    6f:8f:84:43:2b:ea:4e:aa:1c:28:3d:a9:57:46:a3:
                    ac:45:9a:fb:a4:bb:6f:c8:9a:fe:15:9f:06:82:8b:
                    d6:ac:74:ca:e3:cb:11:f6:b5:13:4e:63:62:5b:80:
                    ef:18:dd:91:1f:d0:be:5f:94:65:b8:8a:24:26:cf:
                    f4:87:34:dd:7e:b5:aa:9c:9f:1c:2d:2d:93:7d:02:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:8F:20:EF:55:7E:8E:38:C5:C0:74:AB:A8:CF:CE:DD:BD:BE:56
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:46:cf:9e:b0:db:53:41:d3:bd:d0:0b:c2:86:f7:3f:e2:
         ae:b8:6c:e5:18:5f:6d:2f:61:eb:b5:88:7f:84:63:6e:bb:fb:
         a6:d3:62:b8:ce:07:ed:4d:44:e5:30:dd:fd:fb:19:46:d9:e3:
         62:5f:62:d4:ee:e8:0b:fc:00:f2:47:3b:13:6e:83:62:c5:35:
         45:5b:48:cc:3d:a6:2c:be:cf:a9:21:c6:8d:33:b4:ce:aa:45:
         7d:a4:65:81:6f:63:63:bc:d7:5d:71:1c:2c:f9:01:34:f2:aa:
         9e:0b:2d:05:91:8d:10:a4:cb:4c:c9:94:95:8f:1c:20:5c:8d:
         ff:1c:59:11:04:23:6a:b8:e9:ab:65:e1:bd:99:22:85:f8:78:
         a4:9e:a9:76:a0:0c:8f:09:1f:2e:07:29:9b:42:70:88:c4:19:
         1c:1e:e6:ae:20:02:52:0d:6f:40:91:41:12:42:30:d2:81:4f:
         ce:11:34:e6:16:a9:52:59:c3:12:7e:d9:c7:b7:b7:d2:be:07:
         8b:76:80:04:a1:36:3e:1a:df:d8:92:8f:f6:9a:e5:04:7f:93:
         fe:80:59:c7:cb:f4:6d:01:f4:4a:38:59:c3:fa:e9:15:7a:b5:
         34:e4:5a:32:11:88:e0:20:14:df:12:c8:f5:dc:17:38:8e:31:
         f8:ee:77:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:11 2026 by rpki-client