This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier:          dF7HPE+gdXJOuweQmkDmZ+3pHiWQQUbKttM6ImZRUOU=
Subject key identifier:   8D:CB:AB:8C:27:72:C7:DB:DF:10:66:67:89:A8:2D:50:B6:BF:DE:B2
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       019C1CB9C4A45D7C0258F29891789D521692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number:          B1
Signing time:             Mon 02 Feb 2026 05:01:02 +0000
Manifest this update:     Mon 02 Feb 2026 05:01:02 +0000
Manifest next update:     Tue 03 Feb 2026 05:01:02 +0000
Files and hashes:         1: eTK6_P37nQZzruBHzeHGcO4T3zY.asa (hash: tOEzSunzuWj37U3B09PX4r97OTZ1nR4yyZSVGcYBXmU=)
                          2: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: WVlKs7FCRhkWsQjkWsm4ZWFMqrNhUbEMsuN4I/6gqSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:b9:c4:a4:5d:7c:02:58:f2:98:91:78:9d:52:16:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Feb  2 05:01:02 2026 GMT
            Not After : Feb  3 05:01:02 2026 GMT
        Subject: CN=8dcbab8c2772c7dbdf10666789a82d50b6bfdeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:58:df:07:7d:66:c1:53:0b:49:a5:7f:c1:
                    b7:60:51:87:e0:cf:78:7f:fc:3e:a1:72:a3:a6:f8:
                    a0:11:03:0c:f7:06:3a:3e:71:8c:d5:70:47:95:5b:
                    06:43:6d:2a:cc:29:e5:d4:89:36:e0:f1:d9:fc:79:
                    fc:99:ba:d6:16:d7:df:d1:f6:ab:ef:cb:a4:8e:9a:
                    d1:13:e2:ac:cf:da:b0:7b:cd:20:67:84:ad:1d:ee:
                    73:f2:39:f7:2a:d2:d1:cf:1a:70:cb:5a:67:6f:3a:
                    b9:f7:4a:89:23:53:6e:80:e0:2c:2c:0d:63:96:0a:
                    f5:b1:ff:f7:bb:e0:e9:ee:8a:1a:46:68:dc:8c:59:
                    70:ad:b7:bf:0f:8c:d8:13:78:04:7f:7b:80:64:1d:
                    5d:18:88:30:eb:4b:e9:38:1c:33:12:a1:0c:5a:83:
                    e4:d1:5e:d8:5e:c0:7f:f0:80:a1:32:d6:40:da:b8:
                    0d:cb:90:12:b4:85:66:68:90:2a:ae:fc:22:a4:56:
                    6f:d2:ed:ca:65:01:e4:3f:cc:c8:57:21:c2:1a:38:
                    11:25:af:c4:82:d8:ed:85:d8:7f:5f:92:e0:04:24:
                    5a:ae:ba:c8:21:e1:cf:d1:ae:ca:f2:0a:8c:c4:4b:
                    9e:0a:ba:cb:e3:35:ce:54:41:b7:d9:64:d0:a6:eb:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:AB:8C:27:72:C7:DB:DF:10:66:67:89:A8:2D:50:B6:BF:DE:B2
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:e5:27:d2:d8:87:d8:18:39:5b:43:e6:a8:b2:39:d2:57:
         0e:18:03:9b:ce:64:26:f7:76:82:99:55:cf:a2:64:10:14:ef:
         06:8a:dd:ff:0b:de:10:0e:90:fd:4d:b4:aa:43:dc:6d:88:4d:
         72:b4:cb:53:24:7a:f9:f7:17:25:33:06:6c:a3:e7:65:9f:ed:
         42:77:63:17:e5:d1:9e:da:d1:e6:f4:61:ea:bc:75:a0:6c:4b:
         9d:3e:0f:f7:dd:66:e8:c0:21:c6:d2:1c:37:d9:6c:55:b6:a3:
         2a:e7:fd:33:e6:fc:95:51:1c:eb:64:c6:c7:73:1a:b7:56:30:
         0d:a9:a0:21:f5:19:71:0d:64:2e:7f:d2:cf:a0:ce:39:2c:df:
         bf:f9:be:45:e2:07:33:49:5c:52:04:71:17:da:3d:4b:97:a8:
         18:e2:fd:de:18:a9:3f:fa:db:ee:b9:7f:0f:f1:68:fd:89:58:
         7f:a8:dd:bc:98:af:f6:8d:07:9c:aa:d1:87:a6:72:0a:05:c0:
         cf:9b:7a:9f:54:f9:c3:86:b6:00:8c:3e:29:42:f3:21:ba:2c:
         74:33:d2:6b:1b:4c:0b:f7:39:03:d6:49:e7:1d:36:ea:98:4d:
         ac:79:c8:35:0d:78:29:52:26:53:13:78:de:6a:d3:ba:4a:bf:
         fb:55:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:19 2026 by rpki-client