This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          MuvtYAtLhw7L9KhNJMAZ9uHAs0wdU9s0aHPS81Df9tk=
Subject key identifier:   A1:DC:33:AC:98:2E:D5:48:07:3B:3D:7E:47:79:41:DF:F5:C5:D7:B8
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       019C432231EC49983B2AC54D76D68E1BBDA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          06DC
Signing time:             Mon 09 Feb 2026 16:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:40 +0000
Files and hashes:         1: F-rApHmMNywXbOy8G6qB8fH01fA.roa (hash: Cj/vTHuQIKGTmDHTsxswJvQ6X1dpxAptzaajKbS+iP0=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: cyqAXRB3+pFRwvK//SxMEuLC5OB8JNo9N67VZsu/WP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:31:ec:49:98:3b:2a:c5:4d:76:d6:8e:1b:bd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Feb  9 16:00:40 2026 GMT
            Not After : Feb 10 16:00:40 2026 GMT
        Subject: CN=a1dc33ac982ed548073b3d7e477941dff5c5d7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:ce:3b:c4:c4:ad:2f:fa:2a:8c:6d:9c:60:
                    ff:3c:b5:10:2e:94:29:d7:a5:82:f0:91:00:02:21:
                    d9:fe:4c:29:53:ce:f9:02:7c:e3:a9:1e:3a:1d:55:
                    b9:e5:25:26:99:b4:13:2d:ba:8a:4c:69:8a:3c:e8:
                    6e:7d:9f:d5:56:49:b8:66:5c:84:a1:70:03:89:ca:
                    22:bf:47:28:e7:64:e1:48:83:ba:51:83:15:e4:26:
                    47:df:79:15:9d:69:1c:32:64:94:40:7b:df:a7:18:
                    5e:5c:64:21:ec:8c:04:42:06:6a:9f:62:1d:dc:97:
                    7f:f6:65:11:8a:bc:87:05:04:61:7f:5e:91:55:12:
                    d8:cc:62:03:01:d7:da:6d:82:11:9d:16:c9:15:b5:
                    fa:2f:72:7b:0f:85:dd:45:13:af:d2:a5:26:67:66:
                    e4:07:c5:c9:dc:62:20:c7:61:eb:73:fd:fd:3e:98:
                    f6:f2:fa:93:0e:c0:08:aa:32:62:80:75:25:12:f9:
                    1f:c8:36:d1:7a:e0:1c:4e:6b:8c:17:ff:ca:db:cf:
                    8a:43:f7:96:2e:70:de:3f:91:c8:25:06:08:7e:06:
                    67:9e:67:c2:db:57:ca:ff:91:15:14:3b:92:7d:f7:
                    d6:d8:56:0b:fb:ea:f3:f5:5c:d1:35:73:fd:7e:cf:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:33:AC:98:2E:D5:48:07:3B:3D:7E:47:79:41:DF:F5:C5:D7:B8
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:95:91:2a:15:3f:cc:a6:58:6e:cb:63:49:f0:dc:5c:20:
         1e:ac:49:8b:6e:86:89:f6:6d:a0:f2:10:0b:00:9a:06:36:e9:
         2c:c2:97:d4:cb:1d:c2:1d:97:fb:97:67:b7:66:1d:27:37:b4:
         68:10:46:61:86:5c:45:59:a0:81:de:67:8c:30:f7:05:06:a3:
         32:33:26:77:8d:9b:24:8f:ed:f4:0d:f0:f3:0b:86:62:52:b2:
         a9:ff:c9:2b:9e:1f:67:eb:71:c2:b7:96:9b:28:a3:90:a8:90:
         57:18:50:e5:13:3b:34:ef:7d:f0:4c:06:f7:d4:50:fe:0c:ef:
         5c:23:46:7a:e7:88:71:b0:89:cc:7f:9d:bc:fb:ee:1f:9f:73:
         40:cd:ba:96:23:ad:d0:86:66:f2:9f:ae:f9:38:0b:aa:f5:44:
         bb:6a:e6:b6:22:f5:a0:74:32:fa:ee:ff:50:b9:cd:29:c0:25:
         32:99:90:29:c2:6e:c0:67:4e:e6:27:4a:36:ce:c5:7f:8e:be:
         da:cd:12:53:10:cd:c1:6c:7c:59:7d:e4:b1:bc:a4:ff:a3:32:
         1e:8c:9f:aa:e4:ed:d1:d9:1a:55:83:ec:eb:8c:fa:2c:b2:33:
         f0:00:03:5f:43:32:69:90:35:44:69:fd:3c:30:ae:2c:21:8d:
         31:d0:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:55 2026 by rpki-client