This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
File:                     atlkHKRH6y4wxdtRkcFrzUdyids.mft (raw, json)
Hash identifier:          cF0RDQQX2GR9SC8tBFOtFBdvqz7SXoLbI2nAGLbU0Nk=
Subject key identifier:   7C:E1:33:43:4F:7F:AD:79:B3:A6:72:09:E8:E6:9F:D4:66:C6:32:F7
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Certificate issuer:       /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial:       019C420F33332A00908DD2F4CB693C550AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
Manifest number:          1764
Signing time:             Mon 09 Feb 2026 11:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:18 +0000
Files and hashes:         1: SaVujfTiEW7eIhJiwtzGISk3J7c.roa (hash: ojyOqfyhqMrakPrBeTa1q21z4BPjR20mz69yF35BNRM=)
                          2: atlkHKRH6y4wxdtRkcFrzUdyids.crl (hash: JwOSF+N5Gjaw8l/9u6S3Jy6OlCBr+DXAVcvIorATvLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:33:33:2a:00:90:8d:d2:f4:cb:69:3c:55:0a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
        Validity
            Not Before: Feb  9 11:00:18 2026 GMT
            Not After : Feb 10 11:00:18 2026 GMT
        Subject: CN=7ce133434f7fad79b3a67209e8e69fd466c632f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:c7:c4:d7:59:b0:58:74:8a:f1:a8:23:00:
                    b0:57:3a:3b:21:40:0c:78:46:ba:a0:4c:2e:e9:79:
                    1f:fd:e0:fa:61:e1:69:3f:e1:06:e7:76:b1:0d:70:
                    c8:cd:9f:b4:a5:4f:bb:de:c2:07:a0:29:59:cf:9c:
                    51:ca:a9:6a:6a:e7:f4:4a:f5:49:18:87:6d:3f:8d:
                    e2:ee:5e:b6:b7:8c:d3:d4:fc:cb:52:c5:68:ea:08:
                    94:92:36:4b:fc:8a:6a:14:ca:ad:55:5d:76:84:33:
                    3f:40:40:a4:90:d5:25:fa:8b:c1:ac:b5:29:00:4d:
                    b2:e4:15:8e:21:6e:ba:67:39:9b:38:70:49:9f:95:
                    56:be:d2:7b:c6:5d:15:4f:6c:99:1e:1f:ad:5f:20:
                    23:68:88:ea:df:38:1b:95:43:4b:41:ed:e7:4e:55:
                    0d:b6:ff:61:78:0b:03:d0:4f:76:b5:c9:83:30:64:
                    38:b1:47:1d:de:25:7c:e3:ef:f3:e2:98:b8:b0:c6:
                    87:71:be:fc:73:e5:7c:71:6d:1c:7b:d8:1e:e4:17:
                    fe:e8:6e:c6:58:58:c8:3f:49:74:f9:07:66:fa:1d:
                    d7:ac:20:e6:d3:e1:6b:f8:4d:5f:84:35:ec:ab:a6:
                    70:63:a3:ea:65:da:17:67:92:f4:df:c6:e5:ac:51:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:33:43:4F:7F:AD:79:B3:A6:72:09:E8:E6:9F:D4:66:C6:32:F7
            X509v3 Authority Key Identifier:
                keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:58:59:35:79:e2:0c:7b:d9:d4:d0:fa:03:e0:5d:f9:07:2f:
         a8:ad:1f:f9:63:7d:ba:11:52:f6:ca:27:07:77:f1:6b:44:4b:
         8f:97:25:35:ee:95:0a:7e:b5:0f:89:15:e1:d6:7b:bf:48:95:
         3e:3d:1a:67:c0:59:12:30:eb:5d:21:7c:6f:7a:e4:fd:fb:44:
         c8:e2:ff:80:89:fe:0c:de:26:92:8c:d5:1b:cd:bb:5b:d1:49:
         9f:ef:ce:b0:1e:43:c3:ec:28:9e:e9:9b:ca:e6:f0:d6:76:95:
         3e:21:51:a6:52:c6:32:f4:e2:8d:06:1b:49:4e:29:a8:c7:57:
         53:49:b2:38:96:22:26:6e:01:bb:e8:08:24:75:36:91:23:32:
         cf:f1:3d:a9:09:7c:06:78:f2:b6:e1:66:6e:e2:3d:74:cc:c4:
         15:58:0e:dd:46:42:5d:be:ee:0b:99:4b:97:39:21:70:c9:b2:
         34:89:9c:f5:bc:8a:d7:04:97:38:05:c3:aa:d4:c8:7f:37:34:
         09:68:2e:a9:0e:84:b7:aa:2e:4a:b5:fe:c7:c4:72:ea:d6:52:
         b1:07:74:e0:8b:a4:b5:2d:41:f4:e5:44:09:92:02:fc:0c:ef:
         b3:9c:78:99:cd:fd:26:cb:b7:e3:91:69:40:d9:ed:ed:16:97:
         e8:d8:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:14 2026 by rpki-client