This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File:                     06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier:          0iwAS6Sl83hFYwbO8Sxjh4osk8xqaM8KA/UZO5u+FbE=
Subject key identifier:   B5:19:FB:DD:B6:BB:3C:64:6C:37:6F:AE:B9:8A:F3:C0:0B:1C:90:DD
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer:       /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial:       019C427E12722EBA93C9AA1A6CA665CB6C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number:          04CE
Signing time:             Mon 09 Feb 2026 13:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:24 +0000
Files and hashes:         1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: RFLCsOUfTDEIEVcGpL850ayCX5Re3ccq3GXk7tfB0cA=)
                          2: rIj8wufE-prK99O3Ylq0RCBcGE8.roa (hash: m+lWR0TLu74BujfNz39crAI9zcqKkYdaZMG20ho5wX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:12:72:2e:ba:93:c9:aa:1a:6c:a6:65:cb:6c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
        Validity
            Not Before: Feb  9 13:01:24 2026 GMT
            Not After : Feb 10 13:01:24 2026 GMT
        Subject: CN=b519fbddb6bb3c646c376faeb98af3c00b1c90dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:a5:09:88:a8:75:5a:82:bf:06:e5:94:1e:
                    b3:4e:79:69:17:f2:04:da:4a:09:dd:e6:bc:c1:2e:
                    46:1c:d2:42:5d:dd:6f:35:11:b5:60:e9:bc:cd:1d:
                    08:14:a6:28:77:88:e2:87:08:f8:18:2c:57:13:d1:
                    0a:87:ec:39:c8:7f:bd:f5:8e:36:09:63:f5:73:9f:
                    3d:9c:9c:2d:4f:d8:4b:d6:14:4d:8a:b3:7b:3f:ff:
                    8e:ac:0e:2a:a6:81:85:21:eb:ad:8a:87:00:6d:70:
                    3c:0a:b2:8f:17:db:f8:21:2f:36:28:56:d6:4c:cc:
                    20:67:dc:6f:31:79:ba:b3:ff:74:42:38:36:6a:e5:
                    62:0d:40:36:8b:1b:19:79:87:29:af:7d:eb:01:3b:
                    ee:ce:d5:85:9e:b4:ba:62:e2:e1:c9:55:9d:52:de:
                    25:06:28:e0:8a:e8:a4:54:88:7e:c7:a0:f3:9b:f5:
                    fb:ac:8a:1f:4c:e4:f5:5c:98:cf:ea:79:c6:d8:b8:
                    1f:a5:21:cb:09:02:8b:4e:76:d4:22:fb:3f:97:32:
                    86:92:a4:c0:dd:09:99:8a:a4:32:7a:e2:f1:d9:0f:
                    66:58:59:e8:ca:a9:0a:4b:da:90:49:91:15:78:a7:
                    9c:cb:d7:d0:a9:0d:7d:45:96:f1:0e:95:f8:e6:83:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:FB:DD:B6:BB:3C:64:6C:37:6F:AE:B9:8A:F3:C0:0B:1C:90:DD
            X509v3 Authority Key Identifier:
                keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:cf:7f:ae:59:97:28:f8:f2:fe:46:55:f2:8d:16:3f:b0:
         58:b1:93:37:91:c0:25:e5:e0:42:2e:d5:5f:80:98:ec:10:1b:
         59:a0:9b:34:86:85:ce:02:81:4b:a8:02:8a:eb:80:8f:49:19:
         44:b7:74:ce:f9:35:80:d4:53:bc:33:f2:12:b1:6d:d6:c4:3b:
         31:ef:b6:8a:33:72:65:d8:05:8c:a7:b0:78:bc:36:5c:75:b5:
         1a:49:80:b8:e1:1c:f9:c4:18:16:dd:d5:4c:b3:fe:a9:21:4f:
         bd:41:11:72:54:11:09:1d:65:88:d2:65:56:93:6b:76:1a:ff:
         f6:a5:39:fd:f1:e0:e4:ca:99:b1:35:70:25:de:2e:88:d1:d8:
         dd:48:46:4b:ce:3e:58:3d:f3:3b:55:72:c1:b1:19:33:c3:99:
         76:06:ef:11:41:49:0b:cb:f0:26:29:32:10:d3:82:0d:a2:00:
         c3:c4:ef:ea:7d:d2:74:bc:57:35:2f:e5:a3:46:25:cf:f2:91:
         b4:97:f1:37:ae:05:54:1f:43:60:fa:c1:c7:97:ad:90:98:52:
         5b:96:3b:8d:27:97:eb:97:80:c5:d9:3a:b9:30:e9:e2:9f:ec:
         e3:5e:43:2e:ff:cd:a1:1f:6b:72:96:bc:e4:08:9d:55:c1:02:
         44:98:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:07 2026 by rpki-client