This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File:                     Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier:          DaLNgLK0kZjaw9EiJ+KBVKN2sh/vhL0XmtAQQgNgBbI=
Subject key identifier:   62:46:4D:7A:C2:06:51:68:3A:05:32:18:55:48:B4:C4:3D:BF:F3:0B
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer:       /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial:       019C420FF8A4E4A232409CCAD434C7A5F591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 11:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:08 +0000
Files and hashes:         1: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: wKXk8FyA9ABKvSDxa4Dc64yg3qg01lcuxX9k8vpFNso=)
                          2: G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa (hash: qWjL1bQeFwXeFmjLRN8X3nUGN5tctakBOqZVOMvExME=)
                          3: kUqj_jeUDh3dlpjWljMC7msoL3g.roa (hash: 6Qbo5xUNd0YNqPivHOfLW5ZqEfhVypLSM8N0TdqoUjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:f8:a4:e4:a2:32:40:9c:ca:d4:34:c7:a5:f5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ad79492e809934d693b11855e75103241569eb
        Validity
            Not Before: Feb  9 11:01:08 2026 GMT
            Not After : Feb 10 11:01:08 2026 GMT
        Subject: CN=62464d7ac20651683a0532185548b4c43dbff30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:d5:9a:16:fc:70:11:e3:57:7c:72:24:f5:
                    fe:64:ee:49:a3:af:f1:38:31:e3:09:31:69:4d:89:
                    b7:43:9d:70:89:b9:42:34:74:45:e9:07:78:ed:ba:
                    cf:0b:e7:7c:bd:6f:fa:24:54:fd:ba:3f:e3:34:bd:
                    3a:b4:16:64:c3:05:f2:ed:f0:1c:93:ad:a5:b7:c2:
                    a9:f3:ca:6b:af:83:2a:3c:fe:9d:69:17:95:4f:77:
                    d8:88:5a:80:40:e4:34:0e:c0:a0:bc:89:31:20:86:
                    e4:1d:7a:af:05:e2:4f:40:1b:60:a6:d5:38:4a:cd:
                    54:17:c7:10:89:80:c6:11:c7:72:ff:c6:d7:a6:35:
                    de:af:3f:2e:af:50:82:54:91:e4:8a:d7:66:d8:ea:
                    6f:29:46:64:7d:61:d8:ef:35:4b:7e:c1:25:16:e8:
                    61:7d:21:95:98:e4:24:14:ac:5f:24:1a:20:82:98:
                    99:d7:68:80:59:bc:0e:84:7d:e6:1c:44:9d:fa:15:
                    e9:ff:d4:61:98:df:d7:57:b7:7f:d9:17:95:79:76:
                    c4:ee:0f:82:7a:62:33:57:ac:b4:91:df:1d:94:a6:
                    45:64:95:d0:9e:99:10:6b:cf:2e:a7:6f:4a:4f:11:
                    29:d5:82:43:72:5e:3d:8c:e2:67:e1:37:a4:95:87:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:4D:7A:C2:06:51:68:3A:05:32:18:55:48:B4:C4:3D:BF:F3:0B
            X509v3 Authority Key Identifier:
                keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6d:1a:93:16:11:f7:61:5e:c0:9b:3a:5b:52:cd:15:ec:7b:
         be:15:d2:ed:7e:84:ff:54:a2:e2:51:d6:1e:94:9e:cd:9a:11:
         0c:85:93:eb:58:29:01:65:1c:88:fe:50:3b:6c:3d:88:bd:d3:
         92:09:19:d1:a6:74:51:cd:45:7f:3e:31:6f:e6:b3:57:f2:ed:
         f9:9b:f9:3f:24:37:ab:47:2c:c8:9d:c9:b5:7d:86:3e:55:d2:
         96:9b:be:7c:8f:b4:71:ce:c6:5f:67:5d:a9:30:06:23:58:9a:
         c6:42:ff:b0:c6:30:7c:7e:9a:05:75:4d:f0:fa:bd:2f:b0:99:
         9d:d1:52:04:14:9e:be:18:10:d6:c3:8a:ce:12:53:0c:3f:31:
         80:8c:8d:6e:f4:7a:7c:da:a3:59:10:32:db:de:d4:4f:f4:46:
         9e:13:39:c4:26:6d:5d:2b:ec:65:9f:43:c4:74:83:34:5a:1e:
         bd:38:ef:8a:92:e5:d5:62:41:6f:0b:6a:3b:46:b3:58:ce:c2:
         b0:e2:1a:5f:be:85:e2:15:8d:a6:4e:ed:d5:87:43:75:99:c6:
         45:09:26:d0:f6:a1:a5:74:59:9b:44:e7:f3:17:2d:9b:78:08:
         a4:8e:9c:d5:26:89:d3:f8:ad:9c:be:a6:f5:7a:f6:f2:c6:4d:
         f9:77:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:40 2026 by rpki-client