This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
File:                     C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft (raw, json)
Hash identifier:          p7Uq+8Dj9LTopcbq+hZwnyGbXWrXQvU+eTX8he7Afyc=
Subject key identifier:   87:C6:37:9C:29:29:45:E1:5A:48:C0:B2:3D:4C:30:B8:F3:64:AF:82
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Certificate issuer:       /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial:       019C427D5E995E8A010F2E87E7F40A268E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
Manifest number:          55
Signing time:             Mon 09 Feb 2026 13:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:38 +0000
Files and hashes:         1: C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl (hash: RtM72KwZf+W9aF7jEwbnWXYhymm1fm0ngBTWfu/F2VU=)
                          2: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (hash: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:5e:99:5e:8a:01:0f:2e:87:e7:f4:0a:26:8e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
        Validity
            Not Before: Feb  9 13:00:38 2026 GMT
            Not After : Feb 10 13:00:38 2026 GMT
        Subject: CN=87c6379c292945e15a48c0b23d4c30b8f364af82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:de:c0:d9:15:b5:7a:33:75:ad:b4:b7:5b:
                    78:e0:1c:55:37:af:0e:37:53:75:5e:60:72:3d:75:
                    66:5d:6f:79:a2:ea:18:37:5b:a2:c1:19:4a:18:c5:
                    fb:f1:5c:fa:10:4e:cd:cd:8b:8c:6c:21:4d:5e:80:
                    a2:ce:d8:08:b3:5d:d9:ae:ac:c2:77:3a:b0:df:44:
                    de:af:e0:6b:99:cc:59:67:09:36:7d:bc:21:8c:cf:
                    42:e7:b4:fc:0d:0c:15:1c:0c:55:7a:20:9f:d7:9a:
                    ff:fb:41:f2:4a:c8:4a:52:df:be:63:bf:1f:0a:e7:
                    45:a5:35:25:b0:f1:b5:3c:d6:b1:dd:9d:74:e7:68:
                    37:31:cb:fe:e5:5e:61:a6:66:b8:f3:c6:7e:d6:06:
                    76:b5:d7:10:84:c4:5c:e7:3a:03:04:ff:44:ad:15:
                    38:0f:f9:06:05:a4:18:7a:99:42:ff:5e:f1:6b:3c:
                    46:ec:7a:fa:5c:61:6b:46:14:50:c0:6c:67:66:cd:
                    39:f5:a9:1c:51:d8:60:6a:60:f6:c4:d5:dd:58:c4:
                    60:c6:41:06:08:2a:82:b9:e4:f7:15:2e:2d:00:e7:
                    ad:0e:08:0b:9b:60:d7:02:03:8a:14:f6:c2:e1:eb:
                    f9:62:3f:59:ae:02:da:3e:16:5c:2e:0a:c3:ec:57:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:37:9C:29:29:45:E1:5A:48:C0:B2:3D:4C:30:B8:F3:64:AF:82
            X509v3 Authority Key Identifier:
                keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:a4:0f:43:1d:7b:bb:d6:c0:2b:58:a7:3c:5e:37:35:f8:
         c7:d7:2e:49:1a:80:1a:4b:01:b0:af:93:4f:2d:4b:37:c4:50:
         ed:a6:c5:82:66:34:c2:5b:a9:42:4e:93:10:c0:a3:c2:1c:12:
         c3:cc:d1:4b:93:26:02:28:dd:e9:bf:4b:31:21:d0:6c:fe:4b:
         14:76:5f:11:a9:37:0f:3b:ea:f0:9c:cf:56:76:59:76:ef:6e:
         80:9a:a9:62:52:71:57:e8:e8:9e:9c:fa:c7:a4:81:c8:a6:88:
         e5:24:2e:5e:cc:6c:96:d6:74:18:7c:ce:ca:2f:c3:f7:ab:23:
         0b:83:78:3e:41:7b:de:e8:5d:8f:38:8a:62:08:01:b4:55:04:
         98:72:69:b3:f3:6f:3f:d4:7c:95:9f:f3:44:43:a1:40:85:be:
         be:be:da:0e:6f:d1:75:64:63:20:69:f7:94:44:67:bc:ec:1e:
         90:e9:96:ee:17:70:09:d0:ac:d7:31:7e:fe:c1:f3:fe:f3:3b:
         a2:92:0f:f4:32:fb:15:76:a0:f3:79:c9:0a:33:db:07:4c:60:
         6e:fb:70:e4:9c:57:b6:3d:a6:da:21:4a:94:e4:e2:c0:1d:ea:
         22:5e:36:41:09:72:bc:94:f3:86:88:d2:fc:00:90:0e:0a:22:
         11:b2:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:30 2026 by rpki-client