This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File:                     2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier:          q4mmBa3d7JimcUQdCI/l4zoWQHjRWnpzyTwbFm2L/uk=
Subject key identifier:   2B:F1:FF:47:E7:64:B0:B0:FC:36:2A:74:5A:23:87:92:7F:FD:B0:F1
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer:       /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial:       019C42B4708D8C8DAA52333A8D187CF2F04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number:          0E7A
Signing time:             Mon 09 Feb 2026 14:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:47 +0000
Files and hashes:         1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: 8CEwaIyq+VESQaPgHFSeNOKAbZPyov+XuQvir2pjtoY=)
                          2: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
                          3: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
                          4: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
                          5: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:70:8d:8c:8d:aa:52:33:3a:8d:18:7c:f2:f0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
        Validity
            Not Before: Feb  9 14:00:47 2026 GMT
            Not After : Feb 10 14:00:47 2026 GMT
        Subject: CN=2bf1ff47e764b0b0fc362a745a2387927ffdb0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:fc:b9:8a:10:d4:cb:dd:ba:d9:97:57:ea:
                    0d:32:98:ba:9a:b7:7e:03:96:0b:a0:0b:43:8e:20:
                    7e:13:0e:66:62:b1:e6:a4:31:b7:8a:41:10:23:41:
                    35:c0:c6:c2:5e:9d:3a:47:22:bd:01:56:aa:4b:2a:
                    a4:77:5c:17:1c:3d:f4:c8:78:32:73:e0:80:01:ec:
                    65:73:1f:7e:90:c7:c1:ee:3e:c5:72:86:2e:b3:ca:
                    c9:80:20:36:dd:fa:82:f6:0c:61:3c:4c:4d:8c:ac:
                    e1:36:c7:4b:1a:3e:35:41:6b:cc:ed:66:f3:4e:cf:
                    50:45:8f:75:ff:00:0e:b0:ab:9d:f5:a3:88:ec:9f:
                    07:6f:4d:5f:1a:10:29:ff:02:c6:75:ea:05:4e:a5:
                    e0:5f:37:6d:e5:98:76:78:3c:70:c8:3e:b7:7b:2e:
                    17:14:26:4d:6d:50:a4:56:72:8b:0d:a8:7d:cd:df:
                    dc:37:23:5e:7c:56:4b:1c:fd:22:f9:6a:72:74:51:
                    b5:46:9f:69:83:dd:5a:19:cd:c5:d0:14:ee:e2:d6:
                    70:c0:de:cf:ec:cd:f0:bd:ab:11:ff:ee:b3:5f:b7:
                    ad:50:c6:3f:31:66:36:bb:c6:35:1a:70:4b:05:53:
                    99:f9:e0:51:28:0b:5d:0f:24:c0:9a:84:9a:2a:f1:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F1:FF:47:E7:64:B0:B0:FC:36:2A:74:5A:23:87:92:7F:FD:B0:F1
            X509v3 Authority Key Identifier:
                keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:16:12:cc:a9:8b:6c:09:97:d2:38:a5:87:8d:6d:be:45:
         a3:b6:56:6b:c1:d8:04:85:36:65:be:9d:3f:5d:da:5a:59:5a:
         92:d4:cb:34:0c:57:7f:b4:83:8a:fb:0e:27:85:d5:95:08:b6:
         66:d2:b0:4d:91:c0:ee:64:04:c7:9c:25:f3:a4:2c:e0:d4:7e:
         a0:90:4b:65:fd:fb:77:a4:59:10:e5:89:5f:2d:05:56:b7:03:
         40:ec:5c:cb:20:01:56:b9:aa:66:98:c0:27:20:ef:71:c0:18:
         dc:5c:12:53:58:11:3c:6b:13:fa:65:87:df:44:28:e0:3e:18:
         13:42:84:3e:0b:1b:d0:27:6b:77:d1:fe:00:cb:7f:44:25:61:
         2f:80:b5:9e:94:ee:03:7c:e3:fa:a9:19:81:a9:7e:32:46:4c:
         1f:e8:f1:b3:79:c6:e4:0f:85:2b:ae:78:95:4f:1d:8f:3d:28:
         c1:a2:aa:1a:b7:a1:c0:17:a9:71:0e:ef:f9:fb:b2:3d:f3:d8:
         0a:05:28:9c:cd:38:0c:5d:4b:b7:a5:cc:d4:43:ef:af:27:a3:
         41:f7:81:b2:d2:ab:0d:5b:11:04:0a:d0:8a:a5:29:78:76:d0:
         6f:1a:57:de:3d:be:ee:fb:84:0b:ce:6a:56:dc:60:55:f7:f4:
         33:a9:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:19 2026 by rpki-client