This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          WxbYVVC2EK1DqCF3WbCESV6hng3LWglk4B9CSqkZo04=
Subject key identifier:   B4:FD:28:54:68:90:DF:FC:A4:99:A4:68:37:2C:07:38:5E:98:C3:FD
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       019C43903157F02C8AA8B28F9D14276462C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          16E5
Signing time:             Mon 09 Feb 2026 18:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:49 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: EJPHNDN/6WoOxkXcSkDRjT01zLJUuF0KFbL8NpBnEwE=)
                          2: rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa (hash: +JefNV5OaeJsN9RpkGDkCiA4z+6Up7RrUi0ftPxyKfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:31:57:f0:2c:8a:a8:b2:8f:9d:14:27:64:62:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: Feb  9 18:00:49 2026 GMT
            Not After : Feb 10 18:00:49 2026 GMT
        Subject: CN=b4fd28546890dffca499a468372c07385e98c3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:35:72:60:fc:e4:7c:3a:e6:ba:21:53:59:
                    83:4c:9e:c9:db:ce:3e:09:99:8d:ed:2f:a2:e2:07:
                    52:d6:3b:5c:72:b8:32:61:af:db:c5:15:45:f4:27:
                    b1:5b:f4:c1:6f:d0:fd:22:1d:ca:e3:82:b4:4e:13:
                    ab:0e:74:b8:51:b7:f8:42:4a:5a:e5:9e:84:5e:05:
                    b3:40:27:c1:3f:79:51:2f:a2:97:18:16:1f:74:01:
                    14:1f:d3:8c:bd:f0:22:47:88:2a:f7:22:24:51:8e:
                    32:65:da:bc:72:ee:58:1d:cb:d7:24:b4:86:61:87:
                    f5:a4:bc:b4:fa:81:39:ee:05:25:91:1e:88:a8:0f:
                    a7:46:55:bd:5f:b5:91:1c:f1:fd:5f:13:8d:df:e9:
                    a9:78:7b:c6:80:6f:39:bf:79:4d:5d:ee:de:17:cb:
                    ee:dc:ae:15:e6:67:c3:ba:f1:7b:21:1e:d0:a4:18:
                    2d:32:4f:ab:70:98:ad:6b:ee:f3:20:e5:36:83:2e:
                    1f:96:c4:41:97:d9:47:76:6a:ae:ab:65:e9:0d:b1:
                    35:f4:52:32:0e:b9:0e:ae:4e:d5:9b:05:75:a2:e0:
                    bb:5f:30:93:24:02:6f:c8:68:ba:99:7c:c2:74:31:
                    59:e9:da:b4:a0:4e:92:3c:73:b8:a5:1f:fc:62:73:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:28:54:68:90:DF:FC:A4:99:A4:68:37:2C:07:38:5E:98:C3:FD
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:43:e2:f1:89:67:b9:02:b3:fd:ee:f8:1c:a1:72:6b:0a:
         4e:4c:33:3a:4a:0b:f7:b2:59:9a:86:c8:ee:6a:46:52:4c:9b:
         20:53:4a:18:fa:16:59:55:0d:3b:15:a5:8b:ca:32:21:3b:db:
         c5:59:62:96:f8:35:e5:30:89:0b:a7:c5:8f:c3:32:67:a4:d0:
         6a:8c:b9:e8:7b:89:68:fc:65:e2:46:93:4b:f5:ea:db:45:48:
         6a:f9:cb:a3:e3:14:7d:c7:7d:27:5d:24:71:b6:ad:27:2f:66:
         17:35:01:a8:4f:65:4b:08:fe:6c:5b:4f:78:5d:ff:6f:92:ec:
         7d:cd:7c:44:5c:89:db:12:43:6e:7c:e5:11:1a:ec:6e:2c:d1:
         eb:38:21:df:e7:8c:ac:64:12:aa:43:af:26:c4:f3:07:77:0c:
         7e:a5:13:3f:9d:89:14:5d:6d:ce:d7:a5:e9:78:85:ba:e8:5a:
         f6:cd:1b:73:70:3d:a9:dc:63:ff:1a:63:4a:9c:23:87:9d:09:
         d8:6e:35:64:48:bb:58:70:0f:71:ee:c9:76:3b:74:d7:9e:f8:
         56:03:4e:59:29:7e:84:5f:b6:c0:e2:44:18:19:1e:a1:5d:bd:
         a1:05:a8:b4:89:a5:f6:6e:f5:88:c8:2e:5b:33:f4:00:ba:8a:
         48:39:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:20 2026 by rpki-client