This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File:                     aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier:          QPEOXHocp/C4807Xd13yvOoMvb4xYrF0hAs00tkWZhk=
Subject key identifier:   3D:9B:B6:C4:00:E5:41:8E:A0:31:E7:05:D3:FE:1D:75:E2:F9:20:EE
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer:       /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial:       019C420F3D28AFA2FA19881CBEFD5EECC2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number:          03EA
Signing time:             Mon 09 Feb 2026 11:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:20 +0000
Files and hashes:         1: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: z5b+TeVr0p7JV1qPHN9BVIFdK7hw7XmZYpes22DTBBk=)
                          2: zm22SYQDssPVyPUHKsbO-cFBVo8.roa (hash: e95IhW6weWHIteUAYq4kEbRjvuNFmWrzWP7IgPh5MEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:3d:28:af:a2:fa:19:88:1c:be:fd:5e:ec:c2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
        Validity
            Not Before: Feb  9 11:00:20 2026 GMT
            Not After : Feb 10 11:00:20 2026 GMT
        Subject: CN=3d9bb6c400e5418ea031e705d3fe1d75e2f920ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:97:e3:f9:e3:d7:7c:b0:85:21:4e:4c:27:
                    8f:55:2e:93:84:be:c3:ea:f3:27:3b:f2:02:e7:e3:
                    7b:78:b9:b1:9c:8a:c4:41:ec:b9:b1:e5:aa:34:23:
                    7d:b7:81:80:0f:41:81:bd:a3:33:1d:17:b5:07:35:
                    13:73:81:ba:53:9e:0b:96:87:9e:37:ea:e5:06:5b:
                    5c:6a:be:72:8c:3c:a6:4a:ca:22:c6:7c:cf:97:fa:
                    fe:e2:37:6d:7a:ae:d5:dd:45:1b:81:47:d6:4c:75:
                    26:1f:f5:2c:e8:ad:66:89:51:38:f8:d7:10:11:63:
                    84:49:46:a9:57:a6:bb:d2:75:d2:d0:44:ca:2d:4f:
                    b4:9b:36:80:5e:cc:8a:99:76:e2:db:08:e5:79:b6:
                    2e:e8:fe:76:c0:1a:7f:5b:48:56:ad:2d:de:df:fe:
                    e4:60:05:8c:10:35:f4:d3:7c:17:a9:b0:fe:00:b9:
                    18:3b:44:b1:23:33:03:af:4f:79:ec:1b:0a:a7:87:
                    67:eb:0c:be:74:9a:aa:bf:24:4c:c6:43:3d:7e:a7:
                    bc:33:78:f2:e0:61:68:88:6e:e6:87:94:ab:f3:9a:
                    96:22:01:69:2b:9b:72:36:4c:45:42:29:36:af:94:
                    e8:e9:74:ad:9e:3b:1c:e0:47:dc:ce:66:dd:b3:a2:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9B:B6:C4:00:E5:41:8E:A0:31:E7:05:D3:FE:1D:75:E2:F9:20:EE
            X509v3 Authority Key Identifier:
                keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8e:68:f9:4a:94:ac:c5:cf:25:43:a1:e2:db:5d:9c:f0:ad:
         66:4a:cf:7f:f5:45:2b:b1:2c:da:4b:10:c7:27:26:81:a8:4c:
         20:3a:1c:97:39:b7:4c:16:0b:2b:a5:77:8b:a0:88:50:23:53:
         74:bf:5b:82:3b:a6:6f:7b:d9:fe:b3:f5:da:4f:8d:f1:7c:2a:
         4d:31:57:2d:55:f6:53:c7:08:47:85:42:24:fd:16:34:eb:bf:
         64:cb:b7:1b:d8:60:ae:6f:cb:7f:b3:68:82:16:88:cc:ed:fc:
         b4:44:62:85:1f:d0:b8:9d:29:a3:8a:d3:41:a0:9e:56:c0:dd:
         e0:c2:6f:3f:41:9e:a9:75:39:c8:f2:d0:63:a9:13:cc:b8:de:
         5c:58:e8:b8:b3:7d:09:5c:5c:dd:4b:ff:ca:d3:bc:7b:1c:ed:
         4b:1d:62:7a:20:3a:b4:fe:12:a9:18:8c:18:fa:14:9c:fd:96:
         86:c3:6f:eb:9a:40:a2:8a:db:d5:89:e9:cb:77:99:e0:cf:1f:
         f6:80:14:3c:09:30:d3:3c:31:3f:a7:a1:ef:a0:59:d9:07:9f:
         f5:7c:80:0a:88:40:c5:6b:d8:a9:f7:d3:c9:54:0a:59:f9:4c:
         6c:39:d7:79:25:c8:28:1f:b0:db:83:20:7c:3a:f0:75:89:75:
         bf:f3:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:10 2026 by rpki-client