This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File:                     k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier:          7w07CiCDfCIL3COHPuA37oBxzNxjNUV5kgF8eQdfRfs=
Subject key identifier:   54:EC:BC:BA:D1:28:72:88:01:CB:95:3E:76:01:39:E3:DB:A4:FB:5A
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer:       /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial:       019C43901F5B9052FD9A1C46187665160ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number:          0A76
Signing time:             Mon 09 Feb 2026 18:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:44 +0000
Files and hashes:         1: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: dq1t6Mle8gtq37pMRO9xs70YJKWpy0FwJu4AnuEdfs8=)
                          2: wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa (hash: TYdOeOy0mx3TMxWyBFFWn8nDjGPanVPmVWlj7zHMp90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:1f:5b:90:52:fd:9a:1c:46:18:76:65:16:0e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
        Validity
            Not Before: Feb  9 18:00:44 2026 GMT
            Not After : Feb 10 18:00:44 2026 GMT
        Subject: CN=54ecbcbad128728801cb953e760139e3dba4fb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:b6:ef:ec:e9:d5:b6:12:30:e1:71:b5:da:
                    a8:8c:ac:9e:fd:de:eb:1c:88:cf:55:40:2c:4c:8b:
                    0b:a7:30:a5:52:51:65:25:3f:66:ca:14:85:50:cd:
                    1f:ff:20:ec:b1:e3:01:a8:1c:33:7f:f7:f0:45:ac:
                    4f:08:1c:c2:21:57:b1:e9:db:e5:29:f2:69:47:4e:
                    a1:98:b5:29:f9:f5:20:66:5c:ea:b0:73:1d:90:9e:
                    ac:b0:a1:e5:79:43:4c:82:0b:37:c8:ed:e5:af:3b:
                    2d:8f:7c:9a:5e:11:4e:46:1e:81:44:85:68:0d:37:
                    fe:fe:ce:c0:a9:71:06:47:89:22:f4:37:76:bd:57:
                    fd:b1:3c:c4:b7:9a:09:52:0c:76:c9:33:5d:d9:82:
                    7a:9f:12:86:dc:5c:b2:f8:1f:04:c6:41:62:03:7c:
                    97:81:8b:cf:20:69:16:65:ef:00:94:00:fd:d1:0e:
                    ee:97:5e:55:d1:ff:d8:04:32:0f:37:ef:f3:ea:f3:
                    90:bd:83:ff:2e:59:bc:c6:b7:65:62:85:ba:ec:70:
                    f8:39:42:27:df:92:b6:3e:7d:e7:b9:b7:ec:9a:0b:
                    17:0a:9d:41:1a:44:34:ad:5e:b8:bc:2f:22:ca:80:
                    56:23:dc:14:d8:f2:67:3d:e8:4e:74:82:56:b7:a5:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EC:BC:BA:D1:28:72:88:01:CB:95:3E:76:01:39:E3:DB:A4:FB:5A
            X509v3 Authority Key Identifier:
                keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:65:fc:3c:c0:20:40:f7:fe:6e:5d:e4:87:4c:f7:fb:87:
         e9:9e:59:ab:1a:8b:8e:60:cf:84:7b:86:a2:61:de:fe:ff:ba:
         d9:e8:9b:6b:be:0b:f8:01:05:2a:64:b8:00:fb:5a:00:63:5d:
         fe:38:d3:ea:43:80:02:68:ee:1b:3d:4b:1b:61:b0:bc:36:d4:
         57:a0:e2:51:0e:9d:ce:79:6f:1b:a4:fc:74:e1:cb:6c:20:b6:
         69:e8:2d:51:92:a9:23:85:d8:be:f0:b7:24:74:30:9c:f5:d5:
         20:c4:07:d6:13:f2:33:ee:25:ed:f9:da:d5:74:31:62:6a:f5:
         20:ef:30:1b:a2:8d:e8:b3:5e:6c:72:a3:14:f0:ef:6c:e5:9c:
         08:64:c8:5f:8c:b2:3c:5f:54:23:cf:e7:69:2a:2f:d0:89:ca:
         44:b7:36:e0:04:f8:0d:f8:24:50:c1:b3:aa:9f:b6:b0:15:0c:
         e9:ab:07:20:fb:29:aa:2d:c4:9e:54:99:63:c0:97:e9:c3:ab:
         63:59:a0:4d:98:cf:14:23:be:a9:8a:83:ef:65:54:b9:1c:22:
         f3:15:4a:b9:64:ef:a3:12:17:b6:d0:41:ce:09:0c:09:58:b3:
         a6:f6:9d:d9:69:d3:56:32:bb:06:fd:b9:ac:0f:4d:42:bb:c5:
         5d:e7:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:45 2026 by rpki-client