This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          ine73Pngnt4PbxSpwqURphWIpSSm8ufapi3GIsztdM8=
Subject key identifier:   06:CA:D5:7A:DE:F8:1F:36:0F:AA:B8:2B:0D:40:79:F1:AE:29:B5:DF
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       019BF4D05908848EEF429B1B3602DE127DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0BA8
Signing time:             Sun 25 Jan 2026 11:00:53 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:53 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:53 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: viDh+grXbd7ezGF1zqvE7R9c3xy5Wo2Ok0o3q/dDYgk=)
                          2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
                          3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
                          4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:59:08:84:8e:ef:42:9b:1b:36:02:de:12:7d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Jan 25 11:00:53 2026 GMT
            Not After : Jan 26 11:00:53 2026 GMT
        Subject: CN=06cad57adef81f360faab82b0d4079f1ae29b5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:ed:5f:c3:6a:49:06:a8:9b:35:1c:67:51:
                    c6:75:f8:42:40:7c:09:18:9f:a3:5d:06:70:4e:d5:
                    98:c9:ce:87:68:db:fe:35:13:9d:ec:27:f7:44:f6:
                    b0:79:99:94:0a:8c:7d:b2:c3:e6:02:29:6e:d7:48:
                    f5:2f:fb:69:fa:73:ba:96:28:a2:a0:96:fd:35:50:
                    26:bf:d5:b1:c1:2a:66:99:0f:6e:c1:ca:62:6a:d2:
                    1d:25:5e:ae:5d:f1:30:50:ce:8c:47:50:85:70:39:
                    55:80:0c:cd:f5:f3:38:d6:d2:95:df:1b:fa:74:a4:
                    12:d3:ab:f2:4e:56:9a:f8:8c:5c:a9:65:cc:8e:56:
                    5f:9e:76:4c:26:85:1e:69:22:31:a8:a1:21:d8:f1:
                    05:d5:6b:23:ec:a7:11:9f:b2:56:7a:be:19:85:d1:
                    80:17:aa:e6:4c:0e:26:41:90:03:92:65:d0:73:e0:
                    ab:32:aa:03:57:2d:5a:ab:ab:40:33:b6:ca:d6:7c:
                    ff:fd:e4:f9:24:4d:b5:b3:fb:84:c2:63:4b:65:ed:
                    5e:e8:ee:fc:bd:0f:c9:ab:4c:5a:fb:62:c2:91:45:
                    a8:a1:02:d8:4b:e6:2b:2a:de:1d:23:5c:c4:19:d9:
                    63:25:10:ef:af:3c:b0:59:e8:53:8c:c5:d2:54:38:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:D5:7A:DE:F8:1F:36:0F:AA:B8:2B:0D:40:79:F1:AE:29:B5:DF
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:26:84:cd:68:74:bc:08:c3:c4:16:d3:ec:13:ef:43:7a:d8:
         fa:2f:97:69:52:51:68:e7:71:0a:3f:7a:a5:53:8a:66:82:6f:
         7a:e9:27:9d:2c:dc:d6:fa:f5:8e:42:63:fb:3d:15:8b:5a:dc:
         92:21:85:88:78:94:45:3b:c3:e1:9f:ec:26:0b:81:ac:35:12:
         9e:e8:13:08:15:61:ae:2a:44:de:76:b4:ae:53:61:0a:c5:2f:
         a0:fe:a7:88:ad:7c:85:1c:32:0f:17:6e:b0:d6:43:aa:6e:8a:
         c9:5f:91:7f:9f:ba:fa:6c:68:68:7e:7c:0f:09:89:03:03:26:
         36:b6:72:f8:05:0c:8d:d4:a7:e4:a4:d8:de:6f:77:b5:69:a3:
         0b:ca:5a:05:8f:49:b2:aa:e2:86:ed:33:b0:f6:55:67:58:a7:
         0f:3f:a5:d2:9b:15:bc:53:44:a2:7f:b0:cc:c0:02:58:f7:a2:
         b1:4d:7b:74:c6:6e:fc:ec:43:1d:8c:7d:57:7b:49:14:86:d9:
         92:77:f8:31:4c:8c:cc:38:fe:44:52:4c:98:b3:e5:b3:da:2b:
         ea:62:c0:b7:93:dc:c4:cb:34:ec:f5:af:b8:a3:ba:41:e9:70:
         c6:22:00:26:bc:83:29:ce:b0:73:29:25:84:03:9a:8f:d5:1a:
         c6:a5:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:15:12 2026 by rpki-client