This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File:                     2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier:          QLlOcIm/cFaCPn8ereuWcFalDZjsm/N7+k+8MY2TNZo=
Subject key identifier:   64:6C:80:25:C3:4C:88:6B:B5:09:FC:5F:B9:F1:D3:C7:E0:74:68:EC
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer:       /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial:       019C4322B7D90427EC7DDCC6CA27A9C186F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 16:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:14 +0000
Files and hashes:         1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: AKcKtfB5aptE4ekFlwBw40sfnMaJfEcrlSPt/ZcwJro=)
                          2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
                          3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
                          4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:b7:d9:04:27:ec:7d:dc:c6:ca:27:a9:c1:86:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
        Validity
            Not Before: Feb  9 16:01:14 2026 GMT
            Not After : Feb 10 16:01:14 2026 GMT
        Subject: CN=646c8025c34c886bb509fc5fb9f1d3c7e07468ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:8d:77:2c:7b:07:ce:e8:40:8a:c9:9c:15:
                    8f:24:94:fd:1d:cf:e5:54:c3:5a:78:cf:51:c1:75:
                    3b:f9:1f:02:29:64:b2:60:c3:cd:5d:2b:95:d3:d4:
                    2c:6e:3b:c1:52:3d:46:a0:dd:27:28:de:31:31:d6:
                    73:63:a2:e0:cf:71:ef:7c:23:b2:1b:57:9b:10:a3:
                    f0:62:90:a5:06:47:9c:2c:45:a1:d8:7d:b4:9e:e2:
                    86:45:64:ed:b1:dd:8f:44:55:3f:eb:50:36:1e:76:
                    5f:fb:9c:ed:c4:cd:e9:e1:b0:3f:ba:af:39:75:c9:
                    ae:fb:6f:00:f6:13:80:b5:71:7e:7d:f3:64:6f:f9:
                    a7:ad:33:8e:88:36:8d:ef:ff:fb:e5:db:72:e8:48:
                    ad:3c:53:ff:27:b3:dd:a5:b2:92:f8:32:47:f4:51:
                    ab:e9:21:7a:25:e7:9f:36:7b:80:4f:53:d5:2e:76:
                    77:a6:df:0d:f9:2f:d9:26:f5:9d:5a:ca:a6:f4:fe:
                    97:85:91:8b:6c:a3:7e:be:d5:b0:68:94:7a:33:46:
                    97:6f:2d:21:e3:d8:28:1b:2c:3e:68:4f:57:3f:b0:
                    e1:f0:8b:96:78:7e:d3:de:82:4e:03:95:f6:32:a3:
                    05:5b:51:2c:a9:dd:99:cd:b7:aa:65:ec:95:ca:52:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6C:80:25:C3:4C:88:6B:B5:09:FC:5F:B9:F1:D3:C7:E0:74:68:EC
            X509v3 Authority Key Identifier:
                keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:44:7b:c0:de:05:43:87:59:f3:3c:cb:07:5f:ce:d3:19:
         97:0c:d3:c6:fe:c5:92:ef:83:37:1e:0a:f5:ee:03:77:62:8d:
         9c:01:b8:1b:bd:c5:3c:93:5e:44:b9:17:f6:61:19:18:57:7f:
         68:80:bb:3d:65:b4:8f:fa:79:bb:6f:ec:b9:ff:a1:33:08:2c:
         26:47:cb:0a:a5:9b:a3:09:77:60:48:33:1a:43:b3:5e:c0:21:
         9d:0c:68:a2:78:56:11:95:2f:c5:36:0b:fd:86:eb:b4:a5:20:
         e6:92:13:e3:27:db:5e:b8:7a:ca:3a:61:f2:6d:0f:c7:bc:d0:
         1a:18:68:7e:d6:f8:cb:21:a9:b3:ee:1c:4b:f2:54:e7:17:32:
         31:67:cd:ac:ca:86:1a:6a:2e:0f:fa:d8:3d:49:ed:56:f6:bd:
         e8:37:a0:64:70:0f:c6:ca:8f:24:c7:a5:e2:24:a3:e3:5d:c2:
         60:55:5e:42:ac:fd:0e:76:89:2f:d2:fb:2a:21:2a:3b:6b:bf:
         f8:2c:df:42:5b:dc:35:7b:73:9e:65:df:57:59:2e:ff:eb:34:
         79:38:5f:64:18:ec:26:37:36:92:89:a4:bd:ec:82:36:07:5a:
         23:9f:0d:43:ee:65:71:c7:47:c8:9e:a8:9c:38:5a:e2:4a:3e:
         9c:81:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:51 2026 by rpki-client