This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File:                     W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier:          mGtV5WpgpQ2BSsHTf8rhe9ImiEXCkGOVoWz4CEei6oE=
Subject key identifier:   3F:22:F9:31:E3:94:B6:6A:A6:A4:6A:1E:DB:63:F6:90:E8:95:3A:8D
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer:       /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial:       019C41A1D3BFA42F539548A205F1CD6965DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number:          0BE8
Signing time:             Mon 09 Feb 2026 09:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:50 +0000
Files and hashes:         1: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: XtyZPZbMBRkiRYEjdYD+F7NG1kUMeAneL8fcgc+Zy4U=)
                          2: hANHew_LKnwXLhQEqSyCSLozpjo.roa (hash: dvAoBldq4IsXBYE3jIxDiPUa2vvECDMQ4VTSUJ1/ngo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d3:bf:a4:2f:53:95:48:a2:05:f1:cd:69:65:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
        Validity
            Not Before: Feb  9 09:00:50 2026 GMT
            Not After : Feb 10 09:00:50 2026 GMT
        Subject: CN=3f22f931e394b66aa6a46a1edb63f690e8953a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:da:fb:ef:80:fc:da:97:b1:db:a7:b4:e6:
                    71:e1:2d:a1:ea:d8:63:f3:dd:6c:51:22:2e:67:14:
                    bb:f7:27:3b:17:b1:53:f8:5f:6d:89:3f:b5:a6:28:
                    78:3d:67:8c:f0:85:1a:29:26:e4:97:e9:a9:c7:90:
                    62:c8:65:bf:af:8e:34:c9:0a:1d:c1:7d:a3:e3:bd:
                    52:64:c2:07:c5:6b:7c:c9:08:d9:04:4b:e5:c6:35:
                    95:c5:7a:76:06:47:10:fc:65:5b:c6:fe:af:99:6c:
                    0f:f6:e8:d1:1b:72:1a:a4:a9:c8:a8:09:17:1c:8e:
                    09:7b:20:0d:98:40:3e:f5:33:d6:8c:ba:ce:fe:12:
                    e8:5f:cb:a2:0c:42:6c:ed:4f:8c:79:10:ba:81:68:
                    d3:3b:2b:d1:1d:2e:ae:ba:dd:fd:9d:bd:82:6a:ed:
                    c3:f7:cc:66:e0:17:52:b7:12:e1:fe:40:09:90:7f:
                    4e:96:0b:44:dc:8e:94:70:53:2a:f5:6a:1d:54:9d:
                    94:1e:04:87:7c:ff:bb:0c:0e:53:9f:f0:bb:c6:88:
                    cb:ae:cf:61:66:35:30:63:24:34:74:fb:e1:09:f1:
                    6e:76:22:f9:f2:98:86:6d:ac:19:bf:49:cd:54:1f:
                    36:06:0f:c5:d8:08:8f:70:35:0f:dc:34:b9:07:b0:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:F9:31:E3:94:B6:6A:A6:A4:6A:1E:DB:63:F6:90:E8:95:3A:8D
            X509v3 Authority Key Identifier:
                keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:5f:c8:22:5b:1f:5c:12:74:8f:89:37:f8:91:e6:27:bb:
         8e:81:65:f0:ef:40:81:c2:ab:cb:02:26:ae:38:d1:8f:c5:12:
         bd:b9:e1:80:63:b0:94:74:cb:66:76:1c:86:38:c9:45:a5:ff:
         8d:cb:d7:59:29:f9:c3:5c:c9:7d:53:82:fb:38:0a:b7:7c:bf:
         90:1c:55:33:f0:a9:82:8f:6e:3a:5c:b8:a9:2e:bc:5d:62:39:
         54:09:17:8a:fc:57:eb:84:4c:bc:9d:09:67:07:92:2e:ea:88:
         4e:22:17:1f:fd:9b:de:ae:c9:01:0c:0c:5f:32:0c:79:a1:73:
         1e:c6:e8:e2:9e:01:e3:3d:0f:62:92:a6:61:30:08:c0:11:e5:
         99:8a:33:68:d0:30:aa:09:9c:28:79:ce:76:3d:8e:93:7f:03:
         98:88:08:0c:d9:34:f3:9d:36:3f:bf:49:dd:46:39:ac:39:f0:
         c4:20:f7:2b:5c:04:1d:76:2b:ed:c8:9d:4b:a7:22:b5:42:3b:
         aa:f6:a1:f7:f5:0d:73:f2:91:a7:b0:59:05:dd:c5:37:7d:26:
         3f:7a:57:39:65:3a:91:10:5e:03:e6:70:a7:cd:00:35:64:7d:
         b7:d0:c1:bd:32:d9:cf:9d:2c:16:f6:e9:57:d0:5d:eb:59:70:
         b4:91:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:53 2026 by rpki-client