This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File:                     rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier:          GVV/0iDeyB8yx0uQOCBIASEGuefOgHFcNM0Lf7OkFmA=
Subject key identifier:   B9:B1:EE:67:8B:77:87:97:87:F1:CA:D7:E8:C6:6A:71:56:F1:F6:BB
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer:       /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial:       019C432285172521A7845DA2B9F0B6DE4540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number:          1019
Signing time:             Mon 09 Feb 2026 16:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:01 +0000
Files and hashes:         1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: XCJJO4tmA2KxuXn1lY885O2BB/2rgoJOi6aK8CYcS9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:85:17:25:21:a7:84:5d:a2:b9:f0:b6:de:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
        Validity
            Not Before: Feb  9 16:01:01 2026 GMT
            Not After : Feb 10 16:01:01 2026 GMT
        Subject: CN=b9b1ee678b77879787f1cad7e8c66a7156f1f6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:05:df:39:9a:e0:32:de:69:2a:19:32:70:
                    40:93:91:37:43:c8:4e:ce:0a:49:31:d0:48:82:a9:
                    f9:d6:cd:83:1d:e8:76:47:37:56:94:9b:6b:a1:68:
                    84:95:9e:d8:27:35:c9:b1:82:3a:3b:9b:54:10:22:
                    82:69:50:b4:10:b9:50:c7:b1:82:6e:8e:97:fc:7f:
                    0d:01:36:35:9b:cc:26:c6:52:9c:de:e3:0f:05:5b:
                    07:5d:66:ab:26:fd:f6:49:c9:57:b8:83:44:1e:76:
                    2d:c1:32:2c:7b:4f:af:4e:aa:a7:62:1c:0d:58:28:
                    d0:d4:da:6c:c4:d0:5b:a5:03:87:79:84:44:de:6c:
                    f1:50:0c:ee:48:40:13:e5:9e:8a:6c:99:66:a1:56:
                    5b:30:9c:10:86:c0:bb:46:67:89:a1:b0:c1:67:33:
                    0a:9c:aa:e3:b4:cb:13:8d:1b:95:be:2a:fc:1e:4d:
                    7e:23:5e:ab:97:ee:74:32:17:c3:d7:19:68:47:95:
                    ff:85:6f:92:f6:80:1f:22:07:fe:b2:49:55:aa:e1:
                    1f:30:d7:b5:9f:01:74:d5:e1:9e:af:d7:89:53:3f:
                    8e:ee:31:d9:62:8d:d4:e1:d1:5b:59:f4:8a:97:28:
                    33:49:fa:53:d3:a1:3c:98:28:06:92:f6:76:6b:94:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:EE:67:8B:77:87:97:87:F1:CA:D7:E8:C6:6A:71:56:F1:F6:BB
            X509v3 Authority Key Identifier:
                keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:41:37:02:be:89:23:86:bd:a7:6c:6b:16:a3:67:ae:8c:58:
         df:36:53:ba:ce:bc:5a:21:2e:71:31:58:c9:36:36:3b:b8:d1:
         96:32:48:d6:82:25:2c:b9:8a:6b:54:76:89:85:04:a1:06:91:
         df:48:25:6b:a1:c0:a0:59:77:8f:80:89:2a:51:ab:2d:49:e6:
         75:c2:62:39:59:ce:56:1c:f3:2a:66:f0:1d:6b:13:86:b3:a7:
         01:f6:f7:31:18:ca:18:be:3e:f3:31:5d:8c:83:83:65:6a:6e:
         79:93:a2:37:6e:b2:15:cc:a0:c2:98:6f:cd:bc:45:bd:b9:13:
         78:02:5e:bc:18:5c:5b:f3:ee:22:5f:08:42:c4:dd:9d:a3:ec:
         d0:0f:15:9e:43:8c:60:3b:2b:a2:26:a2:36:87:40:02:66:bd:
         d1:ef:13:3f:7a:58:30:5b:d8:01:c2:fd:cf:30:5c:fc:d4:a4:
         ca:4a:0c:4b:c0:3c:b6:d9:5e:0c:f8:25:18:28:49:a8:01:e3:
         a4:43:31:8a:b5:28:d3:54:e1:8f:ca:3f:9f:0a:ff:00:a8:29:
         76:59:fa:0a:96:b5:6e:92:90:05:5d:dc:d3:bd:11:2a:10:d4:
         e7:61:b7:54:db:36:5a:15:9b:53:8f:84:75:a5:57:c1:7b:05:
         68:41:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:10 2026 by rpki-client