This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          FRR7rbjr2g3XTG4kOtns0aAJgt/SCxNds2QFYj5tt28=
Subject key identifier:   DA:9F:BC:D6:DD:E6:03:2A:CC:4C:6F:15:6D:CB:01:6D:E5:F0:62:97
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       019C420FF47AAFDF4FFD6DB92B2BFCBE76D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          155B
Signing time:             Mon 09 Feb 2026 11:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:07 +0000
Files and hashes:         1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
                          2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
                          3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
                          4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
                          5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
                          6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: CSjvji5vLePHLoMrSK3lXP3DKw1+okmIvrkmyFy9OOM=)
                          7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:f4:7a:af:df:4f:fd:6d:b9:2b:2b:fc:be:76:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Feb  9 11:01:07 2026 GMT
            Not After : Feb 10 11:01:07 2026 GMT
        Subject: CN=da9fbcd6dde6032acc4c6f156dcb016de5f06297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:7b:45:e9:a6:b0:a3:d9:40:f8:0e:27:8c:
                    63:04:c6:68:af:24:11:c5:aa:3c:63:02:6a:f7:8b:
                    c0:87:56:13:f1:41:ce:88:f9:cf:5c:1b:1d:12:e2:
                    7e:ac:fc:67:e0:d3:de:4c:3f:56:78:e0:85:e4:ca:
                    e5:21:3d:6b:c0:13:22:2f:43:93:17:44:86:42:a0:
                    99:73:a9:b7:0e:53:f7:36:b7:58:9b:b2:10:06:a2:
                    5a:41:d1:97:3e:92:41:55:f1:01:e6:af:83:c3:e6:
                    82:13:08:ca:4c:6f:c0:22:89:3f:27:13:76:30:9d:
                    e6:ec:54:44:3f:f8:6c:2d:ff:22:40:93:69:a2:98:
                    75:ee:df:77:7d:df:ed:c7:84:ed:ee:93:a0:ad:5a:
                    5c:5a:06:23:c8:58:86:57:80:ed:67:a0:c9:a2:ee:
                    d2:a4:42:e8:75:d1:a9:5d:74:ac:47:a4:9c:a4:59:
                    e0:9a:aa:c1:66:87:1d:1d:bd:05:91:22:95:04:78:
                    85:19:7b:1a:d8:89:f4:0e:ef:b1:bf:2a:a0:ee:63:
                    ac:e6:0e:1c:c5:ee:41:cd:0f:ce:69:2d:34:be:a2:
                    b2:31:f4:cf:36:a7:7b:27:34:45:68:bf:ec:dc:55:
                    66:c9:0a:ed:6b:e0:0a:ef:3a:e2:14:45:f5:2b:f8:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:BC:D6:DD:E6:03:2A:CC:4C:6F:15:6D:CB:01:6D:E5:F0:62:97
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:13:d9:a6:1c:e7:fa:19:5d:0b:ae:3d:3d:8f:aa:6c:28:5c:
         d9:9e:eb:12:8d:85:7d:2b:f1:f0:aa:67:a8:a7:3b:96:c4:2f:
         a8:ec:e7:50:ee:f6:8a:c1:00:0b:51:df:76:bf:b1:fd:7d:fc:
         1d:5c:67:24:82:8e:ec:ac:60:17:35:52:02:5e:e4:9b:b9:fd:
         e1:55:0c:7a:6e:9f:88:ae:22:30:2a:d6:46:73:f7:ae:48:d4:
         16:e0:a7:3c:86:24:8d:95:89:c1:8d:37:2d:e7:16:b0:90:cb:
         42:1d:20:b5:e6:b2:0a:f8:32:d9:92:e0:7d:30:60:1c:69:9a:
         42:38:9c:a0:d8:a1:69:6c:56:44:73:5f:b9:dc:2a:10:fd:ea:
         98:4b:52:49:aa:98:f4:5b:83:13:84:aa:54:3f:34:be:80:c6:
         88:56:3b:6f:75:4d:b9:cd:1e:dd:85:a5:e0:d3:d9:fa:ee:05:
         a3:33:33:85:ea:b2:34:88:96:ec:09:63:fe:df:fc:8d:66:8e:
         f9:a6:b0:14:cd:0c:4c:07:e1:4a:cc:f6:a1:27:c7:e7:52:50:
         c0:f9:ab:88:15:88:0a:62:41:38:6b:09:70:5a:bf:33:5b:2d:
         b5:10:9e:ba:fb:b7:39:3e:11:29:0c:79:e1:4e:26:4b:14:ff:
         3f:39:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:42 2026 by rpki-client