This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          v7aanksXYzWwtOrAw2/4lISA+lbxDUtNYPZTzeliTLE=
Subject key identifier:   A6:B4:9E:9B:3E:9B:34:2F:16:13:F8:3B:32:27:88:12:AB:77:B0:55
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       019C42B49617542132225B3503EAE987B835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          16E7
Signing time:             Mon 09 Feb 2026 14:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:56 +0000
Files and hashes:         1: 7H6l8W7mloQmdCFME5bjkjpVqlI.roa (hash: T59Tl9zcDPQTjILJPoiX/wQPlxPSK4JPOrKNgwU40yY=)
                          2: JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa (hash: +WZonE26u6Ny7SxSfdG+AH9dSkHMv7bOOSC0aT4GGz8=)
                          3: qPRMij18b3UBdhNaWj9X6XYBXVk.roa (hash: FnJYS8FAenTkSU7Qc1cYhhd/LFBxGNSv7vOsAQbJDN8=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: SKKJDICUGM6+5dGahvrK/nEJkrmWELBlaSb2WO1FOE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:96:17:54:21:32:22:5b:35:03:ea:e9:87:b8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: Feb  9 14:00:56 2026 GMT
            Not After : Feb 10 14:00:56 2026 GMT
        Subject: CN=a6b49e9b3e9b342f1613f83b32278812ab77b055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:e1:5d:c9:f5:43:ab:0d:19:71:57:8b:33:
                    32:a1:f7:87:1c:1d:1c:d9:a4:79:d9:37:9b:d6:58:
                    67:59:f8:94:85:41:b7:ed:1c:29:c4:94:2a:0a:2c:
                    e8:0b:d7:f0:8b:de:c7:cf:39:5f:f0:12:b2:39:62:
                    a5:b5:9e:64:cd:ca:55:14:57:04:84:2d:da:7c:65:
                    bc:b0:60:26:d0:82:78:1c:14:f4:c2:bc:5e:f7:0f:
                    97:a0:f6:08:7b:cc:c7:07:0c:87:12:c9:86:c6:42:
                    dd:4f:2e:70:1f:a3:41:fe:ae:e8:54:2d:84:b2:00:
                    75:69:ef:0e:17:dd:bf:44:2d:96:b1:43:64:63:29:
                    c8:78:5e:dd:b9:14:ef:08:31:db:64:bd:ef:cb:13:
                    a5:34:bc:7a:60:b4:22:df:5a:e3:52:44:07:6f:46:
                    f7:1a:22:6d:15:c7:c3:b0:e9:67:7f:fd:79:de:62:
                    04:a6:2f:10:e1:da:08:69:54:6f:68:d2:c2:19:3c:
                    97:0d:0d:5a:17:c3:98:06:5f:61:d1:e0:a2:aa:94:
                    c9:8a:03:60:91:e4:c3:8e:cc:50:c6:a1:ff:ab:3a:
                    02:50:1f:c8:ea:8f:33:2d:23:1f:9e:84:52:5b:29:
                    d1:1c:dc:9e:87:87:c3:bd:d7:77:ba:3c:c9:7c:1f:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:9E:9B:3E:9B:34:2F:16:13:F8:3B:32:27:88:12:AB:77:B0:55
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:92:cc:fb:f9:b3:7b:8e:03:d0:c9:ec:37:9d:05:20:79:67:
         13:44:4f:c3:af:41:fb:2a:be:f5:3d:93:f7:f4:33:52:52:57:
         e5:63:10:e1:8f:56:c4:c3:63:76:0b:ab:b7:c4:52:14:a6:da:
         60:84:88:35:54:62:09:54:f6:c2:4c:d9:9e:d0:43:3a:47:3b:
         97:e8:bf:fb:55:25:58:5e:fe:9c:49:ec:22:7e:af:3b:e8:16:
         2d:4d:6b:2b:ad:a9:37:95:7e:36:69:9e:45:cd:f7:18:33:48:
         60:8f:e7:2d:a7:35:04:b4:8d:47:1d:a1:2b:4d:a7:00:12:f6:
         de:13:e6:fc:2d:c7:49:f6:31:77:1b:46:8a:ac:28:9d:44:00:
         e3:b4:57:42:44:5b:56:09:e7:72:55:3e:2c:5e:04:7b:05:0e:
         d0:05:38:ba:8a:78:a0:9a:d6:9c:d0:7a:4f:fc:6d:4c:f3:77:
         8c:79:c2:4a:b5:a5:36:11:7a:9e:ea:9e:6b:d9:dd:81:0f:5b:
         9e:af:9e:07:27:4a:84:b5:ba:cd:98:ab:08:95:9f:d1:a3:a2:
         1b:be:a7:25:d6:1d:37:cc:17:10:04:08:0d:1e:7c:25:f6:01:
         43:cb:a6:e2:16:df:ae:1c:f5:72:0d:df:17:e4:30:b6:bc:4b:
         9c:dd:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:47 2026 by rpki-client