This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          kRhXsWLaOAiuMH4/HS6hjOBcogAhjUP3X5BzA9iHeo4=
Subject key identifier:   B3:A2:70:04:69:5E:99:16:97:71:BE:C1:8B:F5:88:3C:4D:21:F2:BC
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       019BF9C007F412ECAC74B837ACE6A41F8130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          0211
Signing time:             Mon 26 Jan 2026 10:01:10 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:10 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:10 +0000
Files and hashes:         1: 1-aksmhBlMep_IIdkdunb9VKOWr4.roa (hash: JbBTN/177xHpuFisCBpeMseyxj5dy7+ddb7ULq70+9c=)
                          2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: 17t+UwSwPfu9LRq/CC7nSGS+RtN1b9X9TWpl6NT0E2Y=)
                          3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
                          4: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
                          5: GqB4ft9MdLfFT6O-79FvIfbX6mA.roa (hash: tl2PhT7Se6lXYjqeH5WhdtVk1xP0yZCmrUvC7sMF7bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:07:f4:12:ec:ac:74:b8:37:ac:e6:a4:1f:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: Jan 26 10:01:10 2026 GMT
            Not After : Jan 27 10:01:10 2026 GMT
        Subject: CN=b3a27004695e99169771bec18bf5883c4d21f2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:a8:e4:ff:9f:37:fe:4f:2e:f9:8f:53:04:
                    83:41:52:c2:50:e3:d5:35:51:21:78:a8:fa:20:6c:
                    a2:49:1f:b6:95:d7:d3:b0:3c:08:47:57:90:c6:fe:
                    ee:65:84:26:40:3b:9d:83:c4:0e:15:70:89:49:81:
                    22:63:ed:3e:7f:41:9e:19:1b:2f:bc:18:b1:9f:4f:
                    53:9c:8c:9c:46:37:10:a8:db:9a:28:0a:30:b7:bf:
                    fb:55:0a:ad:70:09:df:1f:38:ae:e2:95:b7:ec:c9:
                    76:14:ac:13:90:e6:d6:c1:8e:1b:15:a0:af:20:27:
                    59:95:cf:b5:11:e4:ce:04:69:e3:d0:cd:ee:43:a7:
                    65:ae:66:0b:fa:fc:0a:eb:3a:91:69:4e:10:9d:c1:
                    78:42:c3:5f:8c:98:6a:ec:7a:b8:4d:dc:7f:a6:20:
                    03:c3:e8:53:99:85:cd:7a:06:c7:99:1b:6b:b8:76:
                    df:9d:27:84:08:6a:05:3e:cb:1c:55:4b:f4:c2:d8:
                    b8:9d:cf:7f:5b:41:08:53:f0:47:a2:1b:dd:52:2d:
                    c7:f4:e9:94:89:16:73:2e:79:05:c1:aa:ed:47:b7:
                    cc:bd:7a:ac:98:28:a2:ce:fe:c4:7c:41:b7:54:6a:
                    9b:91:01:ed:d7:d4:7d:62:5a:4f:14:d0:95:f8:70:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:70:04:69:5E:99:16:97:71:BE:C1:8B:F5:88:3C:4D:21:F2:BC
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:39:83:cc:f6:d1:2e:bf:fc:99:05:68:79:7e:28:b0:8f:5f:
         97:6e:75:75:12:37:55:0b:2d:84:a6:76:d4:09:36:40:3f:dd:
         2e:44:3d:48:fe:fb:a1:e6:1d:39:24:65:75:6c:4f:03:d4:bd:
         aa:49:d5:67:9d:25:55:7f:a4:92:3d:71:01:61:14:00:d8:8b:
         80:14:bc:23:76:4f:61:4a:a6:ea:90:82:5e:ab:0f:c6:ba:a4:
         c1:ea:19:89:b5:11:50:58:9e:67:f1:cf:8e:08:bf:9f:2e:7a:
         bc:5c:b4:9b:e7:05:2d:11:ff:35:4e:c9:1f:60:9a:38:ad:20:
         79:c9:d1:65:dd:50:bd:16:0f:6c:e0:d7:ba:60:cb:e1:91:ba:
         26:a0:3c:3b:b3:b2:1e:f9:bb:60:5d:aa:30:b8:c3:07:b8:38:
         1d:02:82:68:b1:3d:a5:fa:ff:5c:ab:76:4d:6c:5a:12:03:f8:
         f7:54:9e:c8:21:15:61:43:80:ab:d7:9e:5b:3f:79:fd:ac:91:
         54:75:47:f3:8b:dc:5f:18:3a:57:07:26:89:b7:70:96:82:c6:
         17:18:a6:95:9a:06:0d:f1:43:90:89:06:4e:fe:de:f2:11:86:
         24:dd:12:74:e8:87:d4:00:6f:1e:0a:d7:54:65:92:13:b7:93:
         ae:0c:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:27 2026 by rpki-client