This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File:                     d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier:          cdQUL7CXsGsMXtG/x48EU6l7hNRBRVrjn4tHxKsFYH4=
Subject key identifier:   F5:EF:11:BF:67:10:0B:E2:E1:38:50:E3:56:31:6B:71:DF:C5:F7:09
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer:       /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial:       019C42B44275B01126AC6D4450B25CC17F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number:          10FF
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: W8jOnIUAyFMaEP25sAUwJyxVaIM.roa (hash: i6lculuV3eQhPhN35emc/bL4sPdv/8Y0MhiLt4tT+wI=)
                          2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: nGCZAj0JhLQ93SBu+Auadcz1pI7SCaNA4lild/KCVNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:42:75:b0:11:26:ac:6d:44:50:b2:5c:c1:7f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=f5ef11bf67100be2e13850e356316b71dfc5f709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:6c:fe:e5:21:f1:60:f1:48:9c:94:23:f6:
                    c9:b7:5e:83:6d:0f:90:cc:d8:e7:8b:5f:6a:3a:55:
                    17:fd:ed:1d:ac:96:90:de:7d:77:73:83:2c:79:95:
                    03:bd:b5:bc:ff:1f:16:91:da:3c:c8:9e:4c:2e:be:
                    90:54:53:b8:7e:a1:ff:0f:b0:b7:17:27:07:b7:18:
                    fe:e0:88:93:db:09:13:7b:33:81:e6:6c:fe:33:9c:
                    ec:38:60:8f:a0:f4:a1:d5:0f:37:ee:b3:2f:c6:c0:
                    48:78:01:fd:67:25:bc:6f:b6:4c:35:db:97:f0:c5:
                    e3:cb:c5:54:1b:2c:20:08:c2:f1:e7:dc:c0:a6:19:
                    57:62:3e:cf:c1:cd:94:f9:22:8e:2f:aa:0e:b3:da:
                    16:49:d4:02:a7:70:0c:9b:fb:af:a2:17:a3:4c:22:
                    10:6d:d7:93:d7:03:c1:9c:4c:6d:ed:46:17:c2:e0:
                    2b:39:1b:cb:a3:a4:14:d4:e4:81:26:51:43:e6:fb:
                    f9:d3:ab:dd:24:5b:4c:e0:82:04:6d:ce:14:e3:cd:
                    fa:d8:f8:09:5b:73:74:a4:2c:bf:60:5b:9a:c3:27:
                    4a:3d:cc:b1:f2:47:27:35:8b:ca:8c:08:af:3d:be:
                    91:27:ef:c5:7a:c0:5a:d6:51:56:37:1b:b3:10:7a:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EF:11:BF:67:10:0B:E2:E1:38:50:E3:56:31:6B:71:DF:C5:F7:09
            X509v3 Authority Key Identifier:
                keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:1f:c0:b6:81:21:04:91:17:91:2f:df:35:aa:91:80:ba:
         3e:d2:d2:79:de:c7:41:80:5b:e1:d1:d4:42:0b:ea:f9:ae:d6:
         50:50:e0:d6:1e:62:b5:fa:ef:a1:1c:01:03:94:86:76:9f:3a:
         f4:0a:39:9c:c8:c5:ee:f0:27:a1:9e:69:4e:70:bf:30:38:b9:
         fb:11:b6:0e:9e:b4:ef:7f:b4:a3:40:4b:d5:e5:de:a2:04:68:
         5f:df:28:3c:ab:e5:e6:57:01:50:46:e9:04:1d:26:f0:bc:7a:
         eb:6f:d6:38:f5:88:95:87:4e:be:64:49:f8:f2:0d:d7:c2:52:
         d3:72:bb:60:a2:c3:80:66:ed:32:62:2a:d2:74:e8:cd:9a:e9:
         c4:2d:86:0d:c6:20:8f:05:6d:29:72:f7:45:58:0e:ad:27:42:
         aa:83:62:9b:fc:3e:cf:7a:a0:64:cf:64:f8:5a:91:f6:34:a9:
         5d:09:77:d0:1c:04:dd:95:dc:6a:0d:3f:de:2f:19:95:b1:87:
         15:0e:87:e6:a4:6c:ee:0a:30:6c:df:ef:cc:78:00:2d:b3:ed:
         87:fa:4f:3a:c5:bf:05:c4:d4:99:db:c6:20:4a:11:62:bd:c8:
         91:a3:ae:88:29:eb:84:d2:24:2f:20:ef:76:d8:59:67:90:6f:
         50:fd:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:14 2026 by rpki-client