This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File:                     aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier:          zxxeMdCifB2K73JQn4lJaHOQfJB0aVil3AKN/Srr+9Y=
Subject key identifier:   74:DA:72:AB:65:BF:7A:F7:69:19:40:1E:07:B9:C2:B2:D9:1D:76:CC
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer:       /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial:       019C43902481B40BBB0CC6023BCB9411FDBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number:          074E
Signing time:             Mon 09 Feb 2026 18:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:45 +0000
Files and hashes:         1: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: FvBebdCzjKKX3ZQFycnE1SXtS7VON0iJ/tMizUhu+iI=)
                          2: oJbVnfo8nfXDxx0xOHsViY24X4g.roa (hash: uemM8M2q02VORXRg6zfmvzJH/l3Oxb3V5/KirOrQjq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:24:81:b4:0b:bb:0c:c6:02:3b:cb:94:11:fd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
        Validity
            Not Before: Feb  9 18:00:45 2026 GMT
            Not After : Feb 10 18:00:45 2026 GMT
        Subject: CN=74da72ab65bf7af76919401e07b9c2b2d91d76cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:bb:68:08:39:3a:5f:ee:b9:bf:44:08:20:
                    07:6c:06:64:90:10:7a:7f:20:68:4d:ea:79:4c:af:
                    76:2c:93:4b:43:1d:12:14:05:25:7f:51:9a:9e:78:
                    27:a1:eb:71:83:cf:50:4a:42:bb:2d:1f:9f:f3:a8:
                    21:13:04:41:58:3e:7b:32:86:1c:05:94:15:c4:a6:
                    af:7a:91:26:68:3f:e4:53:0b:81:b5:a4:af:45:ca:
                    3d:1d:54:87:35:b3:65:c6:f2:36:86:af:f6:34:7f:
                    7a:2f:63:eb:42:51:fc:89:dc:c2:e1:ee:ae:18:5a:
                    5a:9a:ea:b2:ed:f8:3f:fa:87:19:d2:cb:76:ae:e7:
                    07:4b:41:4e:29:8a:7e:10:d4:fa:13:16:2d:7b:18:
                    14:86:10:98:f7:aa:ca:c2:47:99:61:2f:98:9a:da:
                    cd:e5:23:9b:9d:a5:82:a8:cb:ae:5b:a0:ed:49:60:
                    40:d2:c3:c4:19:7e:b7:d2:48:a5:74:bc:bc:f0:4f:
                    6b:1e:22:d2:c6:fc:e3:60:86:6f:3c:74:d4:11:7b:
                    f1:5d:a1:a7:37:48:c3:a2:7b:7b:05:55:07:e8:ec:
                    04:db:91:c6:8e:2c:f3:67:19:5f:66:ec:b1:ae:73:
                    5a:1a:55:16:3b:69:a7:1d:02:96:eb:c2:e4:f6:d3:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:72:AB:65:BF:7A:F7:69:19:40:1E:07:B9:C2:B2:D9:1D:76:CC
            X509v3 Authority Key Identifier:
                keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:11:56:e3:54:fa:af:32:f1:f4:aa:c5:45:ff:a4:65:47:85:
         8b:6a:44:f7:4c:45:f2:0f:a2:fb:60:3d:d0:f2:9e:30:8c:9c:
         c8:17:f7:96:af:fb:3f:02:c9:00:e1:7e:5f:48:db:7d:84:cc:
         72:0e:2c:6e:cd:09:ea:8b:04:1b:3c:c1:d6:58:50:72:7b:46:
         91:7c:0a:95:63:51:a0:41:f5:32:0c:5c:4e:fa:9f:68:34:f3:
         fe:b9:a8:64:9f:1f:7a:bc:0c:1a:66:b9:90:0c:1a:b5:00:e7:
         ea:8e:2c:13:41:ab:87:14:88:53:66:00:e1:9e:50:0f:d4:a0:
         68:da:2f:88:f6:10:1c:32:a4:ba:30:4b:3c:b8:59:59:a4:1a:
         75:75:25:53:ef:aa:b4:93:7d:49:37:8e:43:87:23:5c:15:ee:
         91:30:a0:16:25:2c:bd:a4:53:ff:d6:90:50:5d:4e:56:61:bf:
         25:db:e5:93:21:59:97:0f:02:39:19:ee:82:b0:75:2e:d3:5f:
         df:91:4b:37:67:ac:cb:40:62:cc:0f:55:26:08:c1:b6:98:cb:
         2b:82:8a:15:59:c1:d4:07:62:8a:3e:54:41:c7:18:d1:63:6d:
         ff:58:ad:27:03:f4:c2:7d:34:89:ab:12:33:5f:b6:e1:51:81:
         6c:2d:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:19 2026 by rpki-client