This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File:                     67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier:          cC8Yad9F5ETaeLU0GiVX/Wbf/bbVDhRbtefQQJC5jD0=
Subject key identifier:   1F:53:3C:C3:63:5C:11:61:43:5C:39:51:29:A5:42:78:91:41:B2:D5
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer:       /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial:       019C41D8D0E136CF0B8E72C5FCA38981DB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 10:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:54 +0000
Files and hashes:         1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
                          2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: m2FNIx5dzPsSPo5S5F63tM7/vQSzanMdBmmYe1KjHFE=)
                          3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d0:e1:36:cf:0b:8e:72:c5:fc:a3:89:81:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
        Validity
            Not Before: Feb  9 10:00:54 2026 GMT
            Not After : Feb 10 10:00:54 2026 GMT
        Subject: CN=1f533cc3635c1161435c395129a542789141b2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:b7:20:b6:3f:a5:39:2b:2e:3a:0a:da:98:
                    da:24:f8:da:20:7f:b9:46:35:71:b0:2c:7c:a6:17:
                    bd:4f:14:95:c1:50:13:09:80:86:7d:20:98:43:6b:
                    51:55:9a:78:12:48:2d:00:35:e7:8f:03:a4:e4:fc:
                    77:bd:3e:19:ab:77:a8:e5:01:22:df:af:8c:63:41:
                    dd:c8:35:4c:06:0b:25:8a:87:eb:00:27:89:a8:1d:
                    48:27:7a:a5:86:71:6f:50:1a:5b:f1:b5:58:21:ae:
                    2b:b7:96:59:1c:9f:5f:02:ec:27:71:96:35:a4:ce:
                    fc:de:6a:aa:d1:7f:3b:05:bf:b6:1f:9d:42:2c:ab:
                    64:81:c1:b2:99:ad:14:af:5b:28:d4:f2:d0:6f:27:
                    3a:8b:78:8c:8d:2c:30:29:88:72:2e:d5:39:d9:53:
                    fa:60:17:23:50:1f:41:46:6d:25:8e:bc:21:3d:8a:
                    2a:4f:4a:33:ef:1f:c7:25:6d:62:3f:91:76:26:e8:
                    6f:4a:f3:15:56:ad:5b:9d:ed:74:20:ba:83:17:b0:
                    79:f7:56:37:ff:ff:51:f7:5c:ce:cd:38:7f:99:af:
                    01:a0:e5:df:76:f1:68:78:d0:91:b3:10:34:c8:d0:
                    d9:48:03:82:f7:d0:7b:84:e7:6e:cf:f0:90:6f:99:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:3C:C3:63:5C:11:61:43:5C:39:51:29:A5:42:78:91:41:B2:D5
            X509v3 Authority Key Identifier:
                keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:08:aa:84:78:c6:8b:2c:36:61:fb:77:62:1e:d0:fc:c7:58:
         a4:d5:0f:42:53:42:7b:1b:13:08:23:58:97:64:c6:ad:0f:b2:
         f4:90:72:59:05:0d:17:22:c3:27:14:73:e7:7a:e2:65:37:68:
         d2:2f:54:f2:dd:cd:e5:75:06:11:76:6a:56:1a:c5:a1:a3:d1:
         ee:ca:1f:60:74:6b:45:22:ce:83:f0:45:92:af:f6:61:75:11:
         4f:18:90:96:0b:57:c7:2d:20:79:75:b3:2d:ca:d5:c5:4c:22:
         16:5e:18:74:3a:a6:a7:a8:87:a5:2a:98:cb:92:22:85:54:cd:
         12:e8:92:f3:9a:fc:7d:cd:e1:41:7f:12:9f:c7:40:01:93:84:
         26:d1:b6:a7:ff:ab:0c:5b:3b:9a:96:fb:07:81:59:61:0d:64:
         fe:04:c3:16:f0:bd:6a:0b:33:7f:fb:9f:41:8b:94:05:cd:ba:
         6a:ed:c6:b2:4a:4c:73:aa:24:bc:d1:7b:c7:61:7c:12:b1:a7:
         32:89:02:14:af:33:ac:37:2f:31:36:94:c6:ab:39:71:7b:9a:
         5c:5c:d6:f0:f0:8b:c4:b4:d9:3b:cd:c9:5f:25:e5:6e:51:db:
         c4:c6:94:e6:2d:53:a7:fc:3a:7e:d0:cc:f2:82:bf:3b:43:32:
         af:5f:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:58 2026 by rpki-client