This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File:                     Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier:          1YoWPM/ofg5HYeEZ9iV0ySWVFSPoPfl8p5XyVVYE9VQ=
Subject key identifier:   77:18:31:5D:88:4F:77:44:7D:CE:26:75:86:79:9B:4E:79:21:E1:C1
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer:       /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial:       019C42101BFDF5395FCB3D9BC621E7133A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number:          05B4
Signing time:             Mon 09 Feb 2026 11:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:17 +0000
Files and hashes:         1: 1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa (hash: PVKqYKVsrFFdzBy/HzOODB+3DNbkSFcoEgOpBYpqHGA=)
                          2: CqH1FECBpIHfp2xhFgzsj89DsXQ.roa (hash: FwLSU2137U6zawDtXqOxsfLW/s4zSGCVB1UE9CXia1Y=)
                          3: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: e87zrUYz8v1IHhDiu75VZAC1jyS6KlaDhQUvf1d3K9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:1b:fd:f5:39:5f:cb:3d:9b:c6:21:e7:13:3a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
        Validity
            Not Before: Feb  9 11:01:17 2026 GMT
            Not After : Feb 10 11:01:17 2026 GMT
        Subject: CN=7718315d884f77447dce267586799b4e7921e1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:25:11:65:00:91:9b:12:f1:ea:e3:9d:40:
                    42:9c:83:78:9a:b3:36:21:df:ab:45:d6:4a:25:27:
                    b7:8d:60:2c:fa:b1:3f:29:dd:7e:96:e7:94:d4:7f:
                    31:39:65:f3:ad:12:37:23:8a:03:1d:48:0c:de:a4:
                    fc:45:8f:18:cf:61:6c:88:58:e2:5d:d0:b0:81:f5:
                    71:8d:4b:51:7a:7c:00:d4:b5:66:40:35:68:91:96:
                    5b:d2:29:99:49:55:14:8a:cc:e9:33:90:8e:56:5b:
                    59:07:3f:da:c8:e3:0d:43:45:7c:5b:0e:09:83:c6:
                    6f:d1:c8:90:d2:bb:8b:8c:32:d9:f1:83:41:1f:c3:
                    d3:2c:93:cf:56:ed:b1:6d:c1:78:ce:aa:30:54:85:
                    af:ec:b6:f2:27:10:aa:25:85:a1:5f:29:26:2e:92:
                    4e:4f:c6:eb:40:9f:ae:ab:6e:10:a5:de:10:79:03:
                    ee:09:e4:27:96:40:36:d7:92:ac:79:83:6a:1f:77:
                    3d:0c:e7:27:23:d3:6c:ba:5d:73:ff:9f:b2:b1:38:
                    29:80:02:a5:2d:7c:41:5c:da:8b:47:54:60:11:42:
                    fe:d4:1c:99:aa:d0:1f:7c:1c:cb:fd:55:43:8c:f9:
                    90:bd:13:e0:ea:76:02:19:f1:9b:bc:44:3b:e9:7b:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:18:31:5D:88:4F:77:44:7D:CE:26:75:86:79:9B:4E:79:21:E1:C1
            X509v3 Authority Key Identifier:
                keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:89:c4:9c:3b:35:80:3a:d3:9c:ed:98:cb:c3:cd:ec:6a:9d:
         06:e4:65:b2:0b:09:d4:fa:c2:cf:bd:4d:05:34:93:67:e6:b3:
         70:e6:ae:3e:a1:d1:54:91:5b:58:8e:b6:70:5f:c4:e3:6e:71:
         6d:2c:6f:6a:3d:05:f1:44:94:4e:00:97:cd:b6:9a:b7:d7:57:
         c3:ad:51:48:d5:e9:ac:a6:2f:ae:50:8d:49:f9:92:68:4e:17:
         3d:25:62:a0:13:f7:97:b1:1f:04:9b:b6:3e:74:f4:d9:c2:91:
         0b:ff:d3:52:fe:13:b4:6b:cd:67:50:54:35:06:70:33:73:ca:
         1d:2c:59:04:8c:a3:df:18:09:c8:d6:cd:e4:94:3e:84:7e:8b:
         f2:50:5d:a1:cb:7f:52:8a:8e:c5:d6:de:f3:c0:e9:29:67:98:
         2d:ec:96:95:71:d0:1d:ce:8d:a1:76:64:67:35:df:3e:e4:92:
         13:d2:16:a4:a6:58:06:75:e5:17:b7:d4:d7:5c:c5:35:a8:f8:
         f1:3f:5e:5c:d0:08:3e:0a:47:fd:4a:80:18:bb:f5:a6:d1:57:
         6c:9c:7e:f2:f3:b8:4a:c5:a8:8c:44:c5:3d:06:4c:90:21:98:
         2f:0c:68:14:b5:fa:83:fc:b2:61:8c:9e:f6:db:70:41:13:f6:
         6d:1d:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:55 2026 by rpki-client