This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File:                     B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier:          SP4+bZJ130Sx3CLCsvjIv3TlzkEiKBWv5/0mYCT9eZo=
Subject key identifier:   40:C4:79:C8:5A:7B:1E:3D:3D:AB:2B:79:9F:66:4F:15:D3:92:69:DB
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer:       /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial:       019C1C83C054FFA4418A736F171676AA28C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number:          23
Signing time:             Mon 02 Feb 2026 04:02:02 +0000
Manifest this update:     Mon 02 Feb 2026 04:02:02 +0000
Manifest next update:     Tue 03 Feb 2026 04:02:02 +0000
Files and hashes:         1: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: eWwqfn3jzUgShaKXEaNeX9ZKsKrcYCwmL0rOIJovYgY=)
                          2: IIegb6cWbpL6NhxIA59R0LStrog.roa (hash: LUWiOn6fZDRMgYsCYhABBAG0QBLz/uUpM0vTg4+6Jj8=)
                          3: mm5FAF2vITiNN8_JTSW7hlKNww0.asa (hash: a629eA7bmm46rCQR4dOLZMNna4J6o8fKKDbTgCuyhAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:83:c0:54:ff:a4:41:8a:73:6f:17:16:76:aa:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
        Validity
            Not Before: Feb  2 04:02:02 2026 GMT
            Not After : Feb  3 04:02:02 2026 GMT
        Subject: CN=40c479c85a7b1e3d3dab2b799f664f15d39269db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:38:1b:3b:aa:dc:9b:26:c7:41:b0:2a:7a:
                    dd:a3:42:88:33:4d:18:98:d1:86:ee:a5:d2:9f:b6:
                    b3:90:81:9f:bf:01:34:d6:91:0d:bc:2e:92:95:54:
                    00:52:d9:8e:67:2a:85:59:37:0c:54:17:9c:d8:26:
                    80:8f:c8:49:64:00:84:69:e1:d4:69:1f:7e:ef:d0:
                    b9:3a:98:f5:47:3c:42:3b:10:3d:83:8c:10:b1:27:
                    6a:71:34:b2:31:eb:6e:f4:a8:ef:5e:72:d7:e2:4c:
                    16:b6:3f:4d:33:c1:03:b7:04:d2:7e:2c:2e:2a:7e:
                    f3:39:ae:33:e3:64:38:bc:86:2b:ec:24:0b:3e:14:
                    26:65:c5:c9:dd:5c:0a:0d:6c:ca:09:cb:85:4e:e0:
                    21:23:46:37:fd:f7:bf:86:cc:d3:95:ca:ee:6d:64:
                    19:f8:68:08:68:2c:c9:26:64:e7:11:66:2c:14:b6:
                    ab:ac:0d:f9:60:0e:1c:52:43:99:27:dd:0d:fc:82:
                    7d:ec:12:b5:3e:16:15:0d:4c:8c:22:b8:56:ff:4d:
                    bf:fe:c3:d5:19:74:87:94:a1:0e:f0:eb:51:5a:3e:
                    8a:d7:2c:17:3d:f2:54:49:a9:fd:5f:28:c9:f9:54:
                    fb:11:7b:bd:33:d7:f8:3a:97:19:c3:bd:f0:2f:73:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:79:C8:5A:7B:1E:3D:3D:AB:2B:79:9F:66:4F:15:D3:92:69:DB
            X509v3 Authority Key Identifier:
                keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:d6:ff:e6:ef:06:ae:1f:08:af:ff:29:da:a7:e2:10:97:
         76:b7:ca:02:f7:03:5f:86:6d:42:c6:a8:bf:29:7b:21:05:64:
         a4:7a:33:31:2e:a4:58:c2:73:83:f7:c7:2d:66:cb:67:5e:d0:
         06:4c:09:e4:f6:fa:8c:28:42:93:64:7a:76:27:7b:e3:84:53:
         22:9e:a1:36:e1:38:9d:4a:09:55:ef:14:5c:12:2d:1a:df:0c:
         57:8c:96:6c:e6:15:92:69:ee:0a:f8:ab:06:a8:be:95:70:fd:
         11:b9:75:75:fa:fa:2d:c8:1b:31:c2:bb:a6:23:6a:22:79:33:
         f9:79:22:78:43:c4:b4:3f:fa:47:fb:28:de:46:3f:b5:9c:72:
         b5:23:fd:e5:2b:b9:a2:6b:90:b3:a5:e8:70:e4:68:93:44:b6:
         59:a1:68:35:99:ae:38:ed:bb:47:f0:74:24:65:70:32:fa:3e:
         f7:f3:8d:0a:0f:cf:21:d5:8a:c6:8f:66:12:8c:35:68:19:16:
         ca:89:69:f6:3d:8a:7d:ad:61:00:fa:d3:d1:b4:ab:85:a7:55:
         a9:67:df:8c:25:af:19:88:33:d8:54:b8:10:72:94:bc:5f:52:
         59:db:1b:0e:34:bf:eb:95:ae:65:75:2e:a4:dd:fb:47:2f:a5:
         5f:51:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:46 2026 by rpki-client