This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File:                     FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier:          KY90qHeFJtE8Jst0/EJsDJh6aN9cb/lKK2r6BRWRkOA=
Subject key identifier:   BA:F9:29:18:E1:3A:FD:E6:EB:EC:C5:C5:BE:C4:CF:91:0F:1A:B8:17
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer:       /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial:       019C45EC7B599CCBD111E720FEACA0857307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number:          06A1
Signing time:             Tue 10 Feb 2026 05:00:51 +0000
Manifest this update:     Tue 10 Feb 2026 05:00:51 +0000
Manifest next update:     Wed 11 Feb 2026 05:00:51 +0000
Files and hashes:         1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
                          2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: QMEogN2VobOaEwTp23/0FHG/oEKCEekiO0K491wTePM=)
                          3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:ec:7b:59:9c:cb:d1:11:e7:20:fe:ac:a0:85:73:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
        Validity
            Not Before: Feb 10 05:00:51 2026 GMT
            Not After : Feb 11 05:00:51 2026 GMT
        Subject: CN=baf92918e13afde6ebecc5c5bec4cf910f1ab817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:42:38:26:a4:84:bf:ff:41:82:3f:be:78:
                    d9:f8:ff:be:0b:b1:6c:66:fa:b8:dd:fb:1c:fc:5c:
                    54:bb:5a:a8:88:79:73:c5:0c:c1:af:47:24:3d:43:
                    d8:f3:2c:36:50:b9:34:83:59:fa:19:ea:8d:3c:02:
                    b9:f6:2f:e5:6b:30:7f:b8:24:45:76:9a:3a:b5:7a:
                    96:c5:5d:50:5b:7b:c7:28:38:ab:59:eb:a8:99:83:
                    4f:df:cb:b4:b3:5e:ff:ef:ee:ff:1f:f5:02:0c:19:
                    00:24:2e:0e:5c:25:02:a9:cc:4f:05:00:b7:16:3b:
                    6c:89:07:0b:f5:a0:cf:e9:95:59:79:eb:b4:f2:33:
                    7d:f8:cf:16:4a:78:76:b7:c6:ac:f9:0a:3e:70:e9:
                    05:6b:2c:76:2f:e7:ec:81:31:61:30:05:01:88:34:
                    3c:22:dc:d9:4e:b5:92:be:72:5b:15:f4:71:f6:36:
                    33:62:d5:89:f5:cf:e9:df:28:0c:13:df:77:5c:31:
                    a3:ca:bc:f2:29:94:2e:bd:e1:76:19:3b:85:60:fa:
                    89:82:6d:a2:ed:1f:b4:fd:90:29:56:7e:b5:f8:46:
                    7c:69:c6:b4:59:e0:88:88:3d:71:1e:ae:89:67:c8:
                    dc:a0:7e:5c:1e:f7:b9:10:8a:eb:49:58:ab:6b:38:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:29:18:E1:3A:FD:E6:EB:EC:C5:C5:BE:C4:CF:91:0F:1A:B8:17
            X509v3 Authority Key Identifier:
                keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:b9:6c:69:4a:70:1f:a9:56:93:f8:0d:75:ee:20:64:c3:
         51:c1:0f:b8:fc:d7:5f:de:6c:7c:b4:35:5a:65:df:72:b7:04:
         12:9b:ca:90:8a:ea:5e:67:56:29:9a:30:bc:93:6a:c4:ca:09:
         37:ae:a2:42:05:d0:c6:d8:7d:54:04:38:c4:13:ce:1c:d9:df:
         e6:c6:6f:ab:75:23:54:ac:f6:68:28:28:7a:07:06:72:42:58:
         94:8c:3e:68:71:45:db:5d:f0:8a:e3:ec:62:15:04:64:b5:41:
         67:85:c9:67:8a:c9:00:fb:62:28:36:73:53:dd:fd:43:e4:e8:
         d0:da:ad:a6:73:e7:1f:c4:7e:05:16:07:44:fd:3c:75:e2:29:
         68:47:27:64:81:8d:81:a1:fd:57:c8:7d:69:2e:41:1d:c9:f6:
         a9:0d:57:84:59:df:23:b0:9b:12:1e:a7:a4:51:f6:27:bd:b6:
         db:f2:f5:47:3c:bc:56:6c:e1:87:f6:12:d4:4a:7f:5a:de:72:
         c0:f6:cf:94:91:4a:d9:a9:26:12:a5:0c:09:5b:c0:9b:7b:49:
         2b:b8:67:73:fe:b7:c8:71:01:56:80:4e:58:75:45:57:de:86:
         3b:13:dd:c4:fa:e8:ec:85:40:2a:51:ef:e9:1d:54:59:cb:b6:
         4a:26:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 11:09:47 2026 by rpki-client