This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File:                     R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier:          JBoi6MGLy2eH1N5u6o+wFuDNBLivCpIo8Gk2K+tjffg=
Subject key identifier:   EC:0A:92:75:72:84:CC:8F:86:1E:A9:B7:42:6F:5D:A6:51:29:02:97
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer:       /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial:       019C42B485F1E84C5B4F2D6D4897BBEE5062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number:          07CF
Signing time:             Mon 09 Feb 2026 14:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:52 +0000
Files and hashes:         1: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: Q/mgEN1pyLGfWDCmzwBcOUzyu9Y2hoL+atnjV/+MJT4=)
                          2: m31omT_27UL9_8TqT3dZ0O1Xy54.roa (hash: rFLDJzjWnty+Ky2kZezUhQGZshkPkxWj6t4wCRGgxlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:85:f1:e8:4c:5b:4f:2d:6d:48:97:bb:ee:50:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
        Validity
            Not Before: Feb  9 14:00:52 2026 GMT
            Not After : Feb 10 14:00:52 2026 GMT
        Subject: CN=ec0a92757284cc8f861ea9b7426f5da651290297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:6e:cf:47:a3:c6:cc:e4:06:6b:0a:e3:88:
                    0d:10:c6:62:1a:97:b2:e6:cd:37:20:1f:58:cf:97:
                    30:a0:61:82:22:5a:26:5d:0a:43:91:71:54:eb:cd:
                    76:54:f8:df:cd:ea:4a:ca:02:61:20:40:28:7e:5d:
                    24:7c:30:8a:47:f2:9a:96:36:87:24:0f:64:a1:10:
                    5f:42:b0:0b:1a:18:11:a4:6b:1d:01:50:1e:f9:26:
                    b2:6b:3f:8b:5c:db:a8:cc:9f:ab:08:5f:a7:9a:2a:
                    2c:64:25:88:a1:1b:0e:dc:ff:c9:81:7c:e0:2c:c0:
                    2c:a9:f3:4c:3c:ed:b6:96:db:08:ff:a5:68:07:b8:
                    f6:e2:24:40:67:fb:12:89:50:bf:e4:07:cc:2e:63:
                    7e:e8:7b:df:dd:b7:8e:03:02:9d:72:ec:88:90:dc:
                    16:c1:3c:a0:b9:ea:a7:c6:32:89:20:22:16:9e:1e:
                    12:bc:96:98:a1:69:49:67:d6:ba:d1:75:88:61:63:
                    b1:6c:23:dd:6e:82:8d:53:07:11:e4:48:09:07:ab:
                    e7:17:8d:21:d7:5b:65:07:41:36:59:64:9d:ac:bf:
                    23:25:98:9f:00:e7:8b:15:17:d9:1b:77:52:e9:32:
                    37:79:38:11:94:a9:61:58:6b:99:2e:b3:b4:af:ea:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:92:75:72:84:CC:8F:86:1E:A9:B7:42:6F:5D:A6:51:29:02:97
            X509v3 Authority Key Identifier:
                keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:14:0a:26:a7:df:eb:f2:ac:a6:94:92:ca:30:78:86:e5:68:
         ed:a2:e8:aa:06:13:41:6e:0d:81:e9:39:a4:00:cc:cc:40:a1:
         c2:4e:ea:65:48:53:24:dd:95:95:69:64:65:4f:02:e1:aa:2d:
         6f:e1:64:f1:a3:29:5b:e1:b3:4a:1b:f4:48:5f:5e:c0:16:36:
         66:7b:55:b1:f9:e2:17:6f:ae:34:34:58:16:ac:6c:95:9d:86:
         98:f5:a6:f0:f8:7f:f3:64:ff:21:75:bc:be:6b:17:2b:7f:07:
         b4:7c:3a:b3:59:b0:53:b9:ff:f8:ef:34:7a:87:ab:81:bd:c3:
         4c:ed:72:a4:ae:d6:86:57:29:8d:6f:88:58:b9:aa:09:37:90:
         c3:ee:61:59:8b:66:15:4c:3f:55:c3:80:98:4c:fe:be:6f:f0:
         ff:87:a7:2d:50:0b:f0:9a:55:93:fb:07:25:81:43:4b:02:37:
         c7:96:10:60:b6:b8:d3:d8:1e:50:eb:da:09:c9:52:c5:6a:8d:
         34:13:f3:a4:af:19:e3:54:80:fc:67:53:30:a9:93:48:1e:3a:
         08:cf:5b:08:f0:60:00:b7:0c:b9:30:ab:35:65:51:d2:0e:60:
         e4:00:21:37:85:ef:aa:eb:19:48:fe:15:c3:0d:3e:f1:2b:87:
         c8:0d:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:43 2026 by rpki-client