This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File:                     CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier:          rsR6BgivWW7v/L1g7L+xarxAYCtEN4g3ztfdUXTdJM8=
Subject key identifier:   CA:0A:8A:2F:83:81:FC:99:A0:39:CC:71:5C:E2:51:29:50:2B:88:FD
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer:       /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial:       019C42EB99AB0BF3AAD17A7EA31F3F224D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:02 +0000
Files and hashes:         1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: A9QMSCqRTmpJKpi2iMVXex5xOZiN1s5x0/Y9BGMkXw0=)
                          2: T9vdxleGpuYrd7QqC418GOl3Urg.roa (hash: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:99:ab:0b:f3:aa:d1:7a:7e:a3:1f:3f:22:4d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
        Validity
            Not Before: Feb  9 15:01:02 2026 GMT
            Not After : Feb 10 15:01:02 2026 GMT
        Subject: CN=ca0a8a2f8381fc99a039cc715ce25129502b88fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:49:6d:97:ca:87:7f:d1:39:c2:81:3c:f8:
                    db:06:0c:3b:13:60:da:c9:fa:a9:07:cb:01:f7:94:
                    12:5b:86:bb:cf:0c:bf:97:3d:7e:5f:d2:72:4f:64:
                    7a:dc:c8:1c:d3:cb:8b:f6:c9:b6:cd:27:a7:b6:44:
                    2f:d1:43:cf:be:c0:44:59:93:58:31:25:54:00:63:
                    2d:7c:02:63:d3:ef:e0:39:79:64:e3:20:cd:06:92:
                    59:fb:56:bb:cd:af:e3:69:5d:be:91:ab:c7:74:65:
                    8a:1c:78:e2:2b:b4:de:12:ae:08:ad:ff:59:3e:64:
                    65:43:21:cc:31:b1:ae:79:7e:51:4b:78:70:d1:5d:
                    a6:2c:f4:52:50:c7:04:ec:4d:e5:4b:a3:89:da:b1:
                    1c:16:6e:24:36:ea:dc:54:29:c7:17:a5:c3:18:65:
                    9a:5a:ce:63:2b:23:19:15:13:b0:e1:43:24:41:29:
                    57:66:76:ef:33:ba:64:c1:28:cf:42:c1:01:16:1f:
                    07:bd:c9:01:f0:b7:e4:3d:26:52:d9:7f:d7:45:8c:
                    0e:8c:b5:c8:32:87:7d:d5:c6:1e:90:2a:7e:32:4c:
                    94:32:3c:13:2c:14:50:8d:93:84:d5:d4:32:a2:74:
                    e3:f3:97:1e:58:9d:eb:eb:0f:9e:5b:da:3a:27:99:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0A:8A:2F:83:81:FC:99:A0:39:CC:71:5C:E2:51:29:50:2B:88:FD
            X509v3 Authority Key Identifier:
                keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:08:fd:92:f6:bf:64:e8:1c:5c:68:ed:64:71:63:2e:f7:
         2f:6c:94:1e:4f:e5:46:84:95:a3:5f:1c:a6:24:eb:5f:77:9a:
         0b:15:42:63:02:21:b3:90:a2:cd:7a:61:0f:6b:3a:a2:6b:4f:
         89:80:3e:2e:2f:cc:52:58:a0:1b:39:f1:60:ba:96:41:f9:a0:
         f4:7b:3b:0b:22:ac:1f:46:62:40:7b:14:d7:24:9f:8f:b2:6d:
         44:47:d5:e7:c5:e8:63:ae:cc:73:3f:c4:70:97:b6:3b:1b:29:
         77:f9:1d:f1:6b:0d:c9:e1:8b:60:ef:f8:57:0c:cb:76:a6:7f:
         15:ef:91:cb:0f:73:2e:bb:d1:80:95:44:97:a5:37:48:da:ee:
         4c:93:f6:e2:f3:f1:d8:a2:8d:84:b7:83:de:3e:b0:3c:48:fa:
         58:e5:e9:e7:08:df:3d:4a:06:b8:14:8f:eb:b9:3f:78:1e:b4:
         44:32:e1:4a:9d:8f:68:03:7a:cf:73:b2:1a:ec:3c:31:29:81:
         60:19:9e:ce:2d:21:91:10:7b:87:0b:33:3c:08:d5:b1:d4:05:
         1d:2d:1f:4f:ef:72:c9:0e:e9:72:40:58:9a:d6:e3:78:18:ec:
         d5:4a:1c:68:8f:58:6c:12:c3:d1:b2:38:05:75:d9:bd:89:ec:
         87:1c:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:51 2026 by rpki-client