This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          yOSjEbqXIDLYSXFE4XwIxovKucb+ExmjzLTI0JiRHrA=
Subject key identifier:   12:62:4D:C7:2B:CE:5F:40:18:B5:72:A3:A8:7D:12:B4:CB:E1:52:7C
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       019C42B46825573F8FD3D87EDFB6BB11CD1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          136D
Signing time:             Mon 09 Feb 2026 14:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:45 +0000
Files and hashes:         1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
                          2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: EprrBUL9VuAlJkgXzZOp/LGiGjYJw7Er8W1AqV6+rvc=)
                          3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
                          4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:68:25:57:3f:8f:d3:d8:7e:df:b6:bb:11:cd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: Feb  9 14:00:45 2026 GMT
            Not After : Feb 10 14:00:45 2026 GMT
        Subject: CN=12624dc72bce5f4018b572a3a87d12b4cbe1527c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:75:74:32:1f:a4:7a:a3:a9:4f:55:15:1a:
                    dd:c2:c2:dd:ab:f3:33:19:d5:54:b6:f0:3e:95:69:
                    ea:f5:67:50:a9:33:53:90:e3:ef:7f:e8:d2:0b:bb:
                    37:fe:55:cc:40:5f:07:ac:2d:d7:f5:1d:f8:a6:b8:
                    5b:b9:ab:2c:af:c5:ef:a7:90:90:0e:3c:88:6a:98:
                    93:01:5f:a9:f6:1a:52:3a:03:52:c9:b6:03:46:6c:
                    15:7c:8a:04:be:f9:0a:68:7e:bf:e5:48:f6:78:ff:
                    f7:5f:65:07:89:9b:13:7b:80:9e:39:bd:a8:12:20:
                    03:43:49:55:0c:05:f1:f8:98:49:d2:23:dd:d1:2b:
                    f0:89:f8:b2:04:9c:9d:c4:ae:e3:bc:7b:43:10:67:
                    11:98:3a:c8:d4:19:0d:ff:7d:20:bc:3b:87:66:ba:
                    24:7c:fd:8f:7e:b9:20:f4:d6:30:30:20:fe:0e:c5:
                    93:9d:a5:df:b3:98:6a:68:4c:b1:94:18:2b:4d:2f:
                    47:88:ef:ab:15:77:fd:74:03:53:78:8d:d9:fa:72:
                    b9:37:44:3d:26:a8:c2:39:78:0a:7e:8c:73:47:01:
                    b4:a6:0a:a7:65:d6:68:7a:2d:07:8c:b9:49:41:d2:
                    b1:bb:e5:33:e5:9d:f9:ca:bb:12:71:84:57:c8:b1:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:4D:C7:2B:CE:5F:40:18:B5:72:A3:A8:7D:12:B4:CB:E1:52:7C
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:71:c3:0d:4b:87:45:c9:20:57:fd:05:5e:8e:ba:25:55:
         21:45:2d:02:2c:7f:94:86:c9:ec:ab:36:be:4f:30:fd:b0:4a:
         20:0f:d8:1d:7b:1e:66:60:2e:00:1c:25:cf:1d:3f:42:8c:d8:
         55:7b:bd:a9:7b:0e:81:85:b5:7f:c0:95:cb:05:ff:61:76:83:
         93:46:e9:bc:98:ca:60:29:68:71:e6:df:96:0a:bf:79:93:2e:
         f2:49:f4:9d:ea:6d:56:10:d7:b6:93:7b:e4:4c:d7:83:cb:2b:
         d2:92:2e:df:00:b6:53:f3:92:2c:7e:26:3f:ea:ad:71:ec:04:
         47:63:d5:4d:44:8f:26:ee:cd:0b:32:0d:00:9b:4b:fb:28:21:
         c2:24:ee:90:c3:22:3e:e4:e0:90:5c:20:72:c4:e9:1f:22:23:
         d1:e4:0b:e5:ff:84:54:4a:c1:f9:81:75:d6:70:ef:2d:31:c3:
         38:b7:e0:d2:4e:a2:0d:25:3b:9a:61:55:91:2b:a4:fc:4b:80:
         99:ac:89:40:54:70:0a:9e:4a:ce:dd:3f:5c:40:34:45:72:29:
         9c:ca:3c:82:5f:46:6a:aa:c0:e8:ec:69:76:d5:f3:58:a5:b6:
         71:3d:ad:f5:38:d5:ae:2c:dc:ba:54:e4:94:92:51:65:1f:c8:
         0e:3c:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:10 2026 by rpki-client