This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          eAy8ONekKbr4g0PHyBRCLv/BzzEIXklyCsOLHnFTd6U=
Subject key identifier:   B0:D9:69:52:0D:A2:46:36:42:7B:D0:FA:E0:5E:5A:8F:88:66:2B:40
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       019C42EB8D7207654890C6FC04AE352C7678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          1554
Signing time:             Mon 09 Feb 2026 15:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:59 +0000
Files and hashes:         1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
                          2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
                          3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: xH4Uk9n6TabATSk2OQ3slaWLbQ79HijWFe9i2Dl7ADg=)
                          4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
                          5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:8d:72:07:65:48:90:c6:fc:04:ae:35:2c:76:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Feb  9 15:00:59 2026 GMT
            Not After : Feb 10 15:00:59 2026 GMT
        Subject: CN=b0d969520da24636427bd0fae05e5a8f88662b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:62:61:72:77:6e:8f:cd:83:a2:c3:b2:42:
                    85:24:0b:2e:e1:4f:ed:35:7c:d8:4f:95:df:86:29:
                    79:23:a3:1e:6e:26:7a:e9:7a:ef:69:23:e2:97:a2:
                    4d:6d:4e:d4:20:59:fa:b0:7c:a0:81:3f:38:6a:63:
                    f1:22:e7:5c:16:95:56:4a:a1:b6:bc:98:8c:2e:4c:
                    d8:7f:b0:76:8c:a5:f4:82:c0:93:6f:ec:2a:c3:83:
                    2e:e1:2e:57:60:e1:ba:a6:e0:a9:f6:cb:c4:7c:27:
                    ae:25:8b:c0:c3:2e:28:dc:55:97:f0:f5:f1:b6:69:
                    67:87:ae:ed:c2:29:f4:f7:cf:5f:56:74:d2:d3:ab:
                    38:39:0c:ab:23:19:a7:8d:a5:c2:95:d1:8d:60:8f:
                    f1:d9:c4:68:f1:1f:e1:bf:b9:14:b9:79:aa:47:cd:
                    c4:e8:ec:a6:ac:b8:25:76:6f:3d:ce:c4:ee:c1:34:
                    5b:e3:6e:eb:52:df:b8:12:0a:25:b2:69:4a:98:bf:
                    54:8b:e4:2d:aa:9c:90:7f:32:db:61:4a:ca:73:97:
                    ca:e1:c0:b5:b2:db:32:d2:49:dd:24:22:38:fd:ed:
                    09:f2:6e:c6:34:b7:fb:da:27:ce:57:5a:00:84:ba:
                    02:74:5b:8f:15:f7:5f:ca:9a:5d:e4:4b:8d:d0:4d:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:69:52:0D:A2:46:36:42:7B:D0:FA:E0:5E:5A:8F:88:66:2B:40
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:e1:34:36:42:1d:67:b0:d2:e5:b7:e2:80:9e:b9:7a:8d:
         e6:bb:04:34:c2:ad:8d:0b:03:b3:62:c0:36:78:7a:c7:72:08:
         6d:2a:63:01:87:2a:87:af:6b:37:fa:08:cb:df:6e:95:9b:db:
         5a:0e:38:cc:4f:dd:5f:da:65:78:f0:18:ae:a1:4e:1f:dd:57:
         f0:9e:24:e3:77:cd:0c:20:01:01:d7:ea:42:d2:de:be:01:00:
         19:15:6a:c8:e6:ba:76:41:02:f5:35:0c:72:92:0c:08:b6:a4:
         df:20:54:1a:11:ad:55:56:f3:23:7f:dd:00:1d:75:68:9d:73:
         ef:d8:6b:8d:95:c9:37:03:38:bf:0a:b5:46:f8:00:bb:56:3b:
         0b:dd:14:d5:89:14:e1:05:5e:62:2f:80:bc:b7:d5:e1:5c:c1:
         52:04:f6:87:9d:8a:5c:0e:e5:06:9a:4a:23:bd:a0:bd:d9:43:
         88:5b:32:c9:fe:46:ce:3c:64:59:4c:f9:76:6d:bb:3c:8f:e4:
         c7:6c:2a:44:ed:76:35:84:58:5e:05:4e:a0:09:a6:74:7c:e9:
         14:7e:47:3a:79:80:df:ff:10:ee:bd:72:13:28:fb:95:14:50:
         9e:55:63:ca:47:7c:3b:df:de:6e:40:19:43:6c:84:54:44:e3:
         ba:14:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:23 2026 by rpki-client