This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File:                     H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier:          +8vwlHrHcY8lgQXqwqu36IMXWDZGuRHuq4AlqhSAE3s=
Subject key identifier:   E6:AD:99:2B:F2:3E:07:92:1D:2A:6E:A3:E6:09:66:A9:68:AE:DA:C0
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       019C420F4D02148C82CE1C18FF72A758C355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number:          0868
Signing time:             Mon 09 Feb 2026 11:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:24 +0000
Files and hashes:         1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: 1OuB7ZY5EMh5UAMQ02gmoqDK8uKj9G13euxl+YqUtvU=)
                          2: c4GD0N5ffflgM4WSJFRdKaORXEg.roa (hash: ANDRx+abOUWpKzoyrqtGua8LAFv82Wy6OwjQEBpNXbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:4d:02:14:8c:82:ce:1c:18:ff:72:a7:58:c3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: Feb  9 11:00:24 2026 GMT
            Not After : Feb 10 11:00:24 2026 GMT
        Subject: CN=e6ad992bf23e07921d2a6ea3e60966a968aedac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:f8:5d:cb:f7:f9:d3:31:af:8b:ce:dd:be:
                    a7:e9:7f:91:8f:e7:2b:ed:b3:6b:a0:43:5d:55:38:
                    d0:7b:93:db:54:71:31:d8:ec:c6:53:e4:3b:42:00:
                    82:30:a1:66:a6:a7:18:fb:c3:b1:0c:7a:08:17:b4:
                    6a:c5:79:b6:33:37:e0:66:22:5a:05:35:74:bd:1e:
                    1c:a7:66:1d:bb:6c:d6:7d:c7:a3:d4:6f:23:b8:c3:
                    09:36:b1:f8:3e:16:ae:7b:84:9b:55:63:bd:7f:f2:
                    38:af:4d:01:fc:39:8f:f5:7c:19:73:e5:fe:23:84:
                    1a:6e:5d:55:9f:4a:97:6f:9f:06:90:90:62:1e:6d:
                    a5:73:dc:52:ad:a0:06:13:b2:7f:05:7d:c9:3f:68:
                    35:d2:30:e8:d0:0b:8d:28:73:6b:d9:26:ed:57:90:
                    e6:10:33:cb:1f:10:6a:70:54:19:da:08:a7:f1:38:
                    e2:fc:80:5f:c3:80:6c:89:65:21:81:11:19:41:8c:
                    7b:97:f3:63:62:28:11:e5:04:86:7c:51:ba:d4:75:
                    24:45:a6:32:35:05:78:01:c6:38:3c:8d:53:72:a7:
                    77:b3:5d:b8:2b:bb:31:9f:52:6a:de:5b:24:3c:42:
                    74:24:88:31:8d:48:76:06:75:ee:e9:e7:29:c2:0f:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:99:2B:F2:3E:07:92:1D:2A:6E:A3:E6:09:66:A9:68:AE:DA:C0
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:82:62:12:82:df:59:c4:bd:aa:f9:c8:8c:92:71:b9:45:35:
         6c:d8:71:77:17:44:14:8d:22:20:62:9d:ba:49:de:04:cb:ae:
         a5:89:f0:e5:82:36:b4:be:d8:fe:d4:9e:ef:dc:2a:67:51:4e:
         99:d6:16:39:bf:eb:fb:fc:9c:48:8b:50:1f:7d:51:aa:41:7d:
         88:3c:5d:c3:9f:b6:de:b7:19:7a:d3:82:a3:84:43:5b:ef:e8:
         26:c2:ce:c8:ef:20:8b:39:30:be:6f:44:12:47:b1:b7:11:9a:
         a5:35:e7:5f:a6:ae:2e:27:11:24:74:dc:5f:46:b3:fa:1b:97:
         fe:bc:9c:27:ac:83:1a:32:90:6b:5f:02:68:2e:d6:88:71:0d:
         7d:18:3e:cf:55:59:b6:35:59:33:a0:6f:21:4b:27:8f:0e:7b:
         75:96:46:d6:e8:8f:5c:82:6e:4e:18:18:42:c4:9f:ef:9e:e1:
         22:e6:63:5c:61:f3:11:9b:b6:b2:14:e3:3c:dc:58:7c:af:f2:
         96:6b:fe:6f:bd:09:a9:b5:ab:35:be:90:85:7c:07:35:d1:b9:
         6d:9f:7f:7b:23:c7:eb:ff:e8:36:f5:ed:dc:d1:d7:80:73:4c:
         d5:48:e6:d5:96:83:e0:b3:8b:b5:bb:33:f9:05:4b:27:bc:b8:
         07:1e:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:17 2026 by rpki-client