This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File:                     aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier:          8vBHqbTGIFcgC4cyuhQOMbcbipnc0DTl+ReA7Q3QY2I=
Subject key identifier:   A1:B6:F2:3E:75:B2:1D:FA:D6:83:83:61:3F:0E:E9:36:43:18:5E:32
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer:       /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial:       019C438FF650350B08562F561C6D11A063F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number:          05D4
Signing time:             Mon 09 Feb 2026 18:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:33 +0000
Files and hashes:         1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: oViMdc47nRQDGTPXlQ9D7V4Vlvhtgoq4qB/AWh4X764=)
                          2: yI-A8PHtvjvf-Yehk66EwwvQBvE.roa (hash: tQP/tAeuAd/9zuaEs+Y9uFs2XbBeizEpe3XPxikwLpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:f6:50:35:0b:08:56:2f:56:1c:6d:11:a0:63:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
        Validity
            Not Before: Feb  9 18:00:33 2026 GMT
            Not After : Feb 10 18:00:33 2026 GMT
        Subject: CN=a1b6f23e75b21dfad68383613f0ee93643185e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:73:24:4d:45:1a:79:94:7a:72:6c:5e:0d:
                    86:70:82:97:5e:da:9e:db:f9:d0:71:c3:ff:c6:d4:
                    68:b8:38:ef:78:52:60:f8:ae:37:fb:8b:87:b9:31:
                    44:44:74:1b:a3:66:0e:68:31:c7:39:c8:30:87:ad:
                    d4:5c:38:f2:9b:b7:88:b7:87:36:33:df:88:b6:87:
                    9c:4c:70:67:f7:ad:26:d2:6c:df:5b:84:61:b5:60:
                    24:9b:51:54:28:e0:64:f5:42:82:2d:30:7c:ce:45:
                    b9:db:67:9c:7a:ce:92:22:77:7f:b6:22:52:5e:5a:
                    b8:85:fb:da:48:a1:43:1a:7d:ec:74:c1:46:ec:f5:
                    83:a9:3a:48:f0:55:17:e9:57:7f:dd:3a:a3:d2:de:
                    59:1d:c3:4b:27:18:a6:78:2d:54:e2:64:a3:e6:80:
                    5b:e8:7f:59:0e:ec:96:f5:6d:ff:9b:aa:cf:4b:62:
                    84:ee:56:89:71:0c:77:86:99:d2:62:e1:0c:c6:d3:
                    51:4e:bb:3f:b2:ca:54:b6:42:90:81:2f:56:42:cd:
                    45:04:af:b5:9a:d5:37:9a:af:c9:83:92:1a:94:22:
                    bf:da:cc:ce:62:95:82:c0:16:94:05:d9:d1:25:86:
                    6c:6c:61:1c:9b:6b:55:31:36:f2:af:4d:6f:9e:f6:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:F2:3E:75:B2:1D:FA:D6:83:83:61:3F:0E:E9:36:43:18:5E:32
            X509v3 Authority Key Identifier:
                keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:0b:87:c5:fd:34:bb:40:b6:f2:d8:de:48:ba:42:72:5e:
         3c:f0:bd:67:75:cd:34:a7:e3:5e:7e:bb:9e:d2:2a:45:1f:75:
         0f:45:51:67:23:37:07:09:59:94:98:94:29:77:1a:b7:8a:f1:
         0c:78:c1:f7:45:0d:d6:e6:66:94:5a:74:1d:21:c0:43:34:39:
         a6:14:c3:5a:ed:c8:ed:bf:9c:70:ba:c1:3d:d2:67:2b:79:87:
         94:34:db:f4:79:d2:6e:26:db:1d:bc:c8:6e:69:45:6f:c8:b9:
         9e:06:0c:34:90:23:10:6c:df:3c:49:e3:7a:6f:40:ad:29:eb:
         bf:aa:a4:02:94:9d:7d:af:ab:36:91:08:7b:81:a1:68:85:2d:
         a3:c7:b2:30:44:82:d5:1a:e5:5f:06:73:47:23:c9:e6:c5:fa:
         f0:2d:46:41:93:03:01:d0:a4:a7:1c:d7:95:c4:c0:73:e5:3f:
         ac:9b:b2:9b:87:ad:83:8e:21:df:81:cb:c8:25:2c:b4:0a:be:
         a2:4b:d4:af:86:c1:2c:4a:11:4f:66:36:1b:b1:ac:66:98:fe:
         00:5e:f9:a4:55:f6:61:fb:a9:19:ac:dd:86:e5:ff:8a:8c:64:
         1f:8b:2d:3f:8e:f4:92:a4:4d:f4:77:09:ba:e2:ed:4f:4b:e7:
         3e:7f:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:30 2026 by rpki-client