This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          YY5iw9y68tEp1mJW226Qh9L+5m0rYhUm1COdSRxmDcU=
Subject key identifier:   CB:EB:C3:C5:93:BC:40:69:FE:FD:13:48:55:9B:1C:52:30:B8:4A:F9
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019C43FD85A25BBB37DB8E00154A3ACAC8BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          17DE
Signing time:             Mon 09 Feb 2026 20:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:14 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: q7h0LCWswgjtwhUo5n3WGKPk4VoCbKxiZea0un09NuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:85:a2:5b:bb:37:db:8e:00:15:4a:3a:ca:c8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Feb  9 20:00:14 2026 GMT
            Not After : Feb 10 20:00:14 2026 GMT
        Subject: CN=cbebc3c593bc4069fefd1348559b1c5230b84af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:86:2e:eb:c7:df:6f:a2:bc:15:1e:17:03:
                    90:60:e7:63:ce:31:10:3c:9b:d3:fd:3e:0c:78:8e:
                    f0:80:06:17:65:a5:7b:05:da:9e:f4:07:8b:fd:20:
                    51:16:ee:21:b6:53:58:8b:68:a5:79:b5:ad:86:20:
                    68:99:77:04:9e:0e:e0:73:6b:38:0c:67:4d:c9:a0:
                    3b:4d:53:fa:61:44:ac:a5:fb:07:a7:13:f4:19:8a:
                    19:9d:fe:5b:5e:1a:ad:47:7a:36:6d:f1:79:c3:a4:
                    ab:ef:d4:92:88:ff:6b:28:59:f8:03:98:e7:ca:64:
                    92:6e:64:ef:fd:ed:76:6b:0e:af:2e:41:11:22:22:
                    04:f6:3b:30:ff:b2:f4:33:88:97:3c:14:6f:05:47:
                    39:0f:cc:14:64:72:73:fe:ad:b2:d2:3b:a2:3c:44:
                    31:aa:53:12:18:f5:08:1c:e4:b1:c0:65:c9:8d:32:
                    31:a5:8d:9d:83:96:ac:ac:32:26:c0:4d:ab:5f:93:
                    1f:3f:5c:5e:fc:70:5c:19:68:32:e2:23:23:be:ef:
                    e2:71:22:9f:62:44:9d:05:a1:46:66:84:42:1b:c2:
                    ca:5a:5b:66:6a:23:51:52:80:08:d0:34:29:55:c0:
                    78:1c:df:82:e2:46:03:fe:f0:bb:5a:2f:33:0b:a0:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EB:C3:C5:93:BC:40:69:FE:FD:13:48:55:9B:1C:52:30:B8:4A:F9
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:88:c8:52:c5:db:33:26:63:1b:6c:75:d5:a6:72:2e:01:90:
         ef:82:06:d7:7e:fc:29:4d:2c:7b:f0:e9:e2:13:9a:c7:b5:e7:
         94:e8:82:63:77:f4:b9:a6:f5:7a:46:b9:d3:2f:ed:da:ec:f3:
         28:db:1c:80:a1:97:05:c1:47:cd:1f:ce:0a:16:df:f6:ff:11:
         4e:81:99:27:a0:4a:ad:4a:d2:fa:3e:e1:cd:86:9b:32:c0:36:
         27:63:d1:c0:5b:95:b0:43:90:39:2a:27:43:fc:df:7c:ef:6a:
         b0:fc:9f:21:1c:6d:1d:b5:3e:9f:50:9b:4d:15:ad:43:c5:cc:
         5e:22:e5:fa:5d:bc:d7:f5:0f:e9:22:0d:fe:4a:bf:d5:a5:60:
         97:aa:31:b4:74:43:50:c4:9b:b0:25:ae:ba:14:01:64:a5:0a:
         d6:bd:84:97:ff:07:f7:55:cc:0e:08:82:91:3f:73:e2:93:56:
         03:40:55:50:c1:72:b8:20:f9:c1:f2:90:c3:cf:51:e8:03:a2:
         27:c4:3f:59:2a:d2:90:62:52:d1:5f:27:95:4f:56:7d:32:e4:
         eb:20:7d:80:4e:b3:ba:16:5a:37:d3:b8:67:ca:6f:e3:7d:f3:
         63:2e:1d:53:64:68:5d:23:38:01:7b:4c:49:47:70:0d:a3:58:
         42:95:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:18 2026 by rpki-client