This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File:                     b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier:          /dea4Wec9l1qcVocFXVQ2/sdL25Ey+XCqyWJsTbs0vQ=
Subject key identifier:   AE:F8:99:3E:41:54:98:03:6D:C2:77:12:81:9F:FF:7D:72:20:0E:8E
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer:       /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial:       019C439073A14FD92A1E82A73860BB8DE13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:05 +0000
Files and hashes:         1: SVOvzgkEfvGYjK4LPp7LCekPWQg.roa (hash: lwuDAbFV1ncdXu1vKoYuToeJM9cyJDqz+l6o1B6s+ac=)
                          2: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: TKSv8MMdKO0lqb7LzvzMeXkeLSd4MFm5wem2KnHQRz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:73:a1:4f:d9:2a:1e:82:a7:38:60:bb:8d:e1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
        Validity
            Not Before: Feb  9 18:01:05 2026 GMT
            Not After : Feb 10 18:01:05 2026 GMT
        Subject: CN=aef8993e415498036dc27712819fff7d72200e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:18:a1:7a:9d:4b:74:8e:e2:19:fa:a3:6d:
                    96:4d:cb:3b:a4:2b:26:af:45:94:28:4c:de:8e:a1:
                    05:07:31:f5:b4:2f:cc:00:56:af:05:e2:29:6b:ce:
                    57:8c:2d:73:56:e3:10:46:db:7d:e3:c7:37:3e:61:
                    0f:0d:e3:80:2b:56:64:cc:13:a8:68:f6:21:cd:81:
                    1a:d4:6f:97:64:a9:b3:77:1d:b8:09:41:a5:ae:db:
                    d7:fb:39:d3:7b:ad:2f:99:07:7d:b7:7f:4a:cf:d7:
                    99:23:12:2b:2b:ca:ee:be:24:56:b0:4b:7b:48:d5:
                    c5:54:53:ad:d6:ed:17:b0:4f:ee:77:9e:aa:9f:d3:
                    91:e5:7e:80:82:61:45:34:1e:d2:01:38:54:2a:7f:
                    e1:f1:f1:72:7b:96:ed:ac:34:d1:a1:31:d5:cf:34:
                    0c:ef:8a:11:eb:e8:ba:59:15:98:ce:35:85:50:f2:
                    52:85:d1:c6:9d:34:68:a9:1d:a0:ac:6c:c2:90:75:
                    a7:be:28:44:aa:e1:d0:28:4c:86:0c:26:f8:58:ec:
                    d6:bc:99:ce:d3:04:bf:65:2d:e2:dd:0b:c2:1a:96:
                    e2:a1:2e:8f:74:17:11:1f:f4:5a:23:27:63:42:72:
                    69:74:e7:fe:76:53:d9:ba:cb:57:00:38:7f:e6:49:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:99:3E:41:54:98:03:6D:C2:77:12:81:9F:FF:7D:72:20:0E:8E
            X509v3 Authority Key Identifier:
                keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:c1:cf:c5:65:59:0b:87:8d:92:e4:7c:53:c1:93:88:bb:
         49:25:1a:2e:d8:af:a1:40:71:80:e2:a0:56:9c:ce:35:2d:24:
         7a:e8:c6:2e:dc:6a:53:76:13:5f:3a:54:5b:31:b4:56:b2:21:
         47:a6:46:b1:98:a0:af:87:56:8b:85:c9:f5:df:68:3e:a3:68:
         e1:af:04:fd:3e:a4:26:6b:b7:7e:02:37:ef:9e:c9:44:a2:da:
         47:26:c1:8f:a1:37:d8:b7:5b:2e:15:74:77:c7:16:6a:4c:bd:
         b3:d9:ef:3b:5b:c6:fb:cb:dc:7e:c4:87:13:66:ee:97:f6:36:
         14:58:8e:b0:7d:f1:98:a4:6c:18:98:16:67:b8:8b:c4:7e:b0:
         e4:76:20:cc:28:0e:2e:16:b0:0a:1c:ee:ad:c7:3b:72:2c:9e:
         3e:e3:01:d1:4b:9f:7b:e2:ed:94:b0:b0:5f:42:30:a1:f5:30:
         2e:8a:59:6b:94:6d:3a:a9:c5:74:28:a0:12:ee:98:68:78:a3:
         52:c2:6c:90:9d:5d:f1:40:96:3c:a0:b2:c1:00:cf:05:67:5e:
         2c:20:f6:6a:ba:5e:6c:26:9d:f5:7e:a2:23:3e:01:08:53:9d:
         de:92:fc:f2:97:e0:33:ae:eb:e3:8a:c4:0a:dc:e5:bf:7b:4d:
         41:13:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:30 2026 by rpki-client