This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          Vmec83T+jW0Eo9tIf9cQTCklhQDQu6VDGZlnIscQ7v4=
Subject key identifier:   AC:C1:D7:E2:FC:02:33:C7:74:4C:29:70:39:43:E0:29:2A:16:0D:05
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       019C41D8B8F25B74CBD55D1C389952FFA32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          1856
Signing time:             Mon 09 Feb 2026 10:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:47 +0000
Files and hashes:         1: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
                          2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: ZhUSQX4lki8xZcaq/JLrgOxAs4VErgyKNWI+5OFR9is=)
                          3: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
                          4: xKB-gvs-euwz3d_b9BnHQpCCtJc.roa (hash: U/h1+7ybxnTVaMUZc7RxOORKsI/8MXX3aNGOU/pi2Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:b8:f2:5b:74:cb:d5:5d:1c:38:99:52:ff:a3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Feb  9 10:00:47 2026 GMT
            Not After : Feb 10 10:00:47 2026 GMT
        Subject: CN=acc1d7e2fc0233c7744c29703943e0292a160d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:5d:ad:bb:ca:fe:84:44:10:79:19:c0:90:
                    c3:d2:25:bb:3b:9b:8e:9c:7b:de:fb:fc:b3:88:5d:
                    07:6d:1d:d0:26:3e:77:d3:8e:8a:54:f6:ef:f6:93:
                    f1:43:b1:b2:e9:d7:f1:ad:a8:40:49:81:48:9e:f9:
                    c1:41:f3:43:df:33:db:43:4a:ac:dd:1c:c2:03:bf:
                    56:01:d7:d4:fa:3d:81:03:81:3e:ec:95:51:70:94:
                    4f:4b:9d:61:c9:4b:35:13:4c:fe:af:04:01:94:a3:
                    9f:41:90:fb:67:6f:2f:5f:83:97:02:8c:dd:ac:c8:
                    22:82:c2:8f:51:7f:a3:2a:2a:c4:12:ed:d6:5f:f9:
                    33:0a:91:cd:ec:2c:d8:09:16:03:57:58:83:cf:46:
                    ad:9d:6b:52:bc:2c:b3:c8:40:7d:8b:95:66:ed:ae:
                    0a:3c:f7:64:1b:72:4a:a9:09:9d:4a:cd:fa:d7:ca:
                    76:b9:4f:77:11:61:d7:0b:a0:ce:42:73:01:a5:20:
                    4f:8c:e8:f3:ad:66:17:a7:0d:e8:e9:2b:6f:9c:4a:
                    a4:28:a6:db:80:51:53:9f:da:15:9f:b3:b1:67:9f:
                    4e:88:06:fe:c3:21:15:a5:08:24:48:23:d1:5e:c2:
                    40:d1:87:77:1c:a4:83:ca:18:85:ab:30:d2:86:2a:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C1:D7:E2:FC:02:33:C7:74:4C:29:70:39:43:E0:29:2A:16:0D:05
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:46:c1:fa:94:e6:a0:c4:3e:76:25:13:54:4d:8b:7c:94:3d:
         d5:e7:69:d8:9e:7a:5b:b4:39:ca:31:42:d6:09:96:d0:43:2c:
         91:1c:21:5e:15:0a:f9:2e:cc:b2:ce:d1:0e:1e:62:50:1e:d0:
         f1:b2:b6:1d:a5:4d:aa:7a:62:bb:7c:bd:ae:67:be:cc:95:6b:
         0c:db:55:d1:f8:eb:14:9a:53:09:28:9c:6b:82:cf:cf:35:dd:
         1c:e3:78:8d:17:29:7f:87:a8:d9:b3:e7:4d:0a:6d:78:f9:31:
         44:6b:1c:74:50:07:a0:c2:ef:de:b5:69:30:14:df:f7:8b:23:
         7e:d5:a6:2b:ff:7a:e2:51:44:3f:89:dc:5c:2a:e0:9c:5e:68:
         78:be:c7:d0:26:32:92:20:99:93:87:3f:a0:f1:4c:ba:01:01:
         c7:8f:f9:c5:15:6a:5b:24:42:c2:4f:1d:04:a2:de:44:5b:6f:
         10:ee:8c:c6:6e:3f:88:c7:1d:5f:54:07:cc:59:e1:59:91:98:
         20:90:a8:cc:fc:49:24:63:da:dd:25:3e:ad:c0:0f:b8:62:5e:
         2f:7b:48:2b:ae:cf:b2:df:a4:75:fe:88:ae:35:73:da:1c:21:
         6a:cc:53:df:5b:ce:3b:10:b2:a0:a9:51:aa:a7:b1:59:31:2e:
         3f:f3:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:55 2026 by rpki-client