This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File:                     apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier:          orv6MVKMLBMRnGOx6QxTnig5My4dPEkSsIfv20COwnQ=
Subject key identifier:   F2:8A:B3:B8:5C:60:F6:89:A5:1D:62:D4:A4:9C:88:F2:1B:B7:DF:84
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer:       /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial:       019C43FE1FB26C859411F1F14D2C0106C922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number:          0327
Signing time:             Mon 09 Feb 2026 20:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:53 +0000
Files and hashes:         1: 04qNzQFDeYtDWOQnUWzTpUuvB9k.roa (hash: JDVg+JID1CY+10mhtydqzj3KZ7OSSxyFlNU6MU9NGN4=)
                          2: apwfqpeD36srelPaP7D970zP6uU.crl (hash: pH4snD1n9u/svIHDN45MuoCmIx42BLCql4Mi5TpFMOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1f:b2:6c:85:94:11:f1:f1:4d:2c:01:06:c9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
        Validity
            Not Before: Feb  9 20:00:53 2026 GMT
            Not After : Feb 10 20:00:53 2026 GMT
        Subject: CN=f28ab3b85c60f689a51d62d4a49c88f21bb7df84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:2e:8c:11:3c:14:77:dd:6e:26:cb:79:63:
                    07:c1:d0:81:3e:e3:22:41:06:b3:dc:fa:bb:ae:af:
                    74:e0:0a:eb:89:45:1f:b7:0f:0d:74:68:8b:66:51:
                    72:57:a0:71:ef:ed:ac:2e:43:6e:c9:24:36:ba:78:
                    69:eb:00:3b:b6:0b:f2:a0:27:e3:9a:b4:ad:63:87:
                    92:4b:77:12:2e:0e:ee:fb:98:e8:37:ae:bb:a3:2d:
                    4b:0e:3e:3c:da:2c:28:a9:36:40:8f:a6:4b:f7:ff:
                    14:fd:4f:8d:09:43:a3:74:75:0c:69:3f:b8:6f:24:
                    aa:59:39:67:cc:b0:0d:c6:3e:0f:e2:12:ec:a2:a6:
                    4f:61:e9:b2:16:9a:ea:86:38:62:0b:36:6c:fc:9e:
                    e8:c7:70:c1:54:c7:48:8a:e1:66:24:46:d8:05:00:
                    bf:ce:72:fb:cc:8c:b8:b8:12:90:0a:03:37:85:8c:
                    e8:57:80:9d:b5:3a:cf:62:c8:fe:79:06:7e:03:b6:
                    cd:a5:27:f2:4f:d2:cb:66:bc:e4:3e:ee:fd:dd:23:
                    9f:39:65:d0:16:ba:30:02:cd:01:d9:fa:a3:0d:06:
                    64:c1:91:49:b8:b8:a7:36:51:9a:ea:ec:48:8f:68:
                    17:af:d3:a0:b8:54:60:db:67:44:2e:c3:6d:30:c6:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:B3:B8:5C:60:F6:89:A5:1D:62:D4:A4:9C:88:F2:1B:B7:DF:84
            X509v3 Authority Key Identifier:
                keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:62:ae:a8:e6:5c:a6:a4:1e:4d:ce:80:aa:e2:28:43:b0:b6:
         ee:bc:59:5f:77:34:bb:68:68:4b:d1:8a:43:8b:ff:cd:d8:25:
         d3:ed:52:0e:1b:c4:bc:0f:51:79:05:b4:37:16:e3:9e:ef:a7:
         6b:f8:c3:00:d3:c3:4a:c3:db:e5:43:ff:9d:c4:56:3d:b8:54:
         89:a2:6d:e3:b2:41:de:2f:ca:75:32:9c:cb:be:5f:b6:c2:03:
         5c:b2:09:81:ef:59:8e:09:b5:be:46:ce:ca:a1:ac:a0:c6:58:
         e3:09:22:a6:45:ec:7c:2e:63:7f:1f:a2:a6:4c:a2:71:b2:66:
         4b:fd:86:56:5e:02:d7:74:3e:08:27:7b:6f:57:3b:02:c1:ee:
         21:4f:3c:8e:6e:d3:3c:d7:d3:a3:23:d7:c2:68:1e:c1:d5:19:
         dd:d8:dc:85:09:e8:c8:3c:45:43:0a:38:cb:6d:4f:97:eb:04:
         25:7f:21:0c:65:9c:ed:f2:11:8f:84:76:a6:b2:f6:d2:e3:dd:
         a8:b8:e8:bf:c3:59:2f:45:b7:cb:65:73:6d:49:79:c2:b9:20:
         37:f9:0e:94:14:b9:6f:be:51:68:cf:d2:57:c5:d2:69:1d:3c:
         f8:d6:41:4b:7d:64:1a:6b:97:30:04:5b:60:51:bd:d9:41:1c:
         d8:73:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:44 2026 by rpki-client