This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File:                     bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier:          8dhqWBvvgHlKlsgc3V3IGh66x2RPfIL84qa8BGwpIc4=
Subject key identifier:   31:AB:76:D8:95:65:ED:3F:4D:49:C0:2E:83:82:78:CA:DC:72:BC:36
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer:       /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial:       019C43FDEECF69C57E0040172EEE8CEB672B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number:          05C2
Signing time:             Mon 09 Feb 2026 20:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:40 +0000
Files and hashes:         1: N6W-eQiPRjqw3-6I_QmctyffMuY.roa (hash: Zu+HeLoruNEi/OX9srfF84zysLGJyEcbFNJHAud3tiU=)
                          2: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: MzbAVW2J7b+eFNhcbZhtMHqnvXl3hgRYPqPP8Y/fGBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:ee:cf:69:c5:7e:00:40:17:2e:ee:8c:eb:67:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
        Validity
            Not Before: Feb  9 20:00:40 2026 GMT
            Not After : Feb 10 20:00:40 2026 GMT
        Subject: CN=31ab76d89565ed3f4d49c02e838278cadc72bc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:d0:a7:31:75:d9:f0:2a:8f:da:83:0c:aa:
                    3b:a1:2c:b5:6e:88:36:ae:32:4d:60:98:09:70:c2:
                    8f:d4:a4:c3:37:1b:26:bd:83:d6:20:b1:5a:b3:d9:
                    9d:f8:36:d0:9b:94:38:e4:1f:8c:39:98:95:5c:68:
                    e8:c7:d3:66:76:b7:80:47:99:7d:74:ce:5e:f9:c4:
                    3f:49:18:1f:b8:d7:6a:f5:7b:77:e7:6d:96:0f:2b:
                    44:6b:66:3c:93:6e:12:48:6b:ac:86:98:79:98:f6:
                    f3:4f:28:66:6e:98:f8:23:12:9c:fd:34:29:c2:3e:
                    6e:12:72:dc:60:8a:79:41:e8:4c:d5:13:3d:ba:b9:
                    ab:d8:3c:47:5c:1b:3d:bd:6b:8e:33:63:b8:0b:ba:
                    ac:ec:f4:a4:0c:a7:6f:45:71:9b:cc:91:72:d7:73:
                    2a:b6:61:6f:50:c4:95:01:e7:78:00:6c:94:85:89:
                    34:4a:2b:59:6d:4f:a5:b5:a8:5b:a7:df:2e:4a:8b:
                    83:fd:9b:91:59:41:73:29:98:09:4c:82:27:fc:1e:
                    2a:8e:fe:5d:db:92:0e:96:e0:b3:97:6e:88:0d:33:
                    dc:ee:db:19:1b:ef:2b:7b:ad:da:47:d4:64:15:04:
                    4a:81:6d:18:d5:5f:a0:78:b9:97:0e:b3:96:ca:74:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AB:76:D8:95:65:ED:3F:4D:49:C0:2E:83:82:78:CA:DC:72:BC:36
            X509v3 Authority Key Identifier:
                keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b3:9e:ef:4f:7f:a6:d7:97:e2:6e:91:a8:ee:95:b7:ec:48:
         af:91:3c:47:63:83:3c:54:f0:8f:30:11:eb:9a:f4:0a:2d:43:
         ca:90:c0:d2:78:19:c2:ef:57:ef:36:de:cd:92:9b:9a:09:9e:
         ff:71:b6:f0:5d:21:4d:91:ae:34:60:b0:b6:ac:63:f1:a5:76:
         20:37:76:89:f1:fa:a6:21:8a:d3:a4:e5:37:47:f7:90:d5:63:
         d6:7d:93:db:1e:c1:d4:a8:d0:7e:da:3d:54:88:fb:68:ae:4f:
         da:cf:c7:db:72:a7:a1:b4:73:2e:a5:27:36:54:ec:2c:ba:31:
         58:d0:a5:98:93:19:12:37:8b:39:de:ed:72:83:ad:90:8c:64:
         78:7d:ea:05:c4:ad:1e:ad:de:93:ec:03:a8:5d:55:3f:68:c5:
         11:08:55:a1:e7:28:93:38:5d:08:ce:21:b7:8d:23:7d:df:b2:
         7e:60:b8:99:f3:72:30:f2:ae:a4:f8:1b:7f:b7:a7:88:1c:b3:
         1d:24:12:33:16:82:63:7b:76:ba:0f:24:08:ab:8d:23:f6:ea:
         f4:6d:c6:4a:eb:35:3a:1f:b7:f3:29:b0:1d:81:78:9b:23:88:
         50:d6:52:13:6e:a6:08:60:a6:91:8e:6f:2e:16:86:5e:5d:98:
         d0:64:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:35 2026 by rpki-client