This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
File:                     biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json)
Hash identifier:          Ql7lOZZQ2y/tgShukeauO/YitBRWY6PuYGN5ueGaXLc=
Subject key identifier:   A2:08:57:E1:50:ED:65:4E:20:08:12:A5:DF:E1:34:E3:95:74:B1:97
Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
Certificate issuer:       /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Certificate serial:       019C4322A5755F55D6DC2397B3323A63FA80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
Manifest number:          01AE
Signing time:             Mon 09 Feb 2026 16:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:09 +0000
Files and hashes:         1: 5wY_n2E9m5Fm8AHGBhePkR6VYWk.roa (hash: ZBwa+iIbx4TsdQ1LjVsQwUbo717HhRLxWJOE/WzCBUk=)
                          2: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: sEH/nit3HbzBWeCrSaicE2UEviB0pT4te1rxvQ0fCBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a5:75:5f:55:d6:dc:23:97:b3:32:3a:63:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
        Validity
            Not Before: Feb  9 16:01:09 2026 GMT
            Not After : Feb 10 16:01:09 2026 GMT
        Subject: CN=a20857e150ed654e200812a5dfe134e39574b197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:64:bd:93:e7:f9:ee:51:49:06:4b:97:bf:
                    eb:14:c8:bc:47:39:9e:03:d5:c5:ee:8b:be:cd:40:
                    06:4b:69:1d:06:e5:ea:83:af:95:10:3c:65:13:91:
                    9f:e1:90:49:7f:4e:38:b3:1c:d4:71:fa:83:07:e4:
                    cf:e6:ac:ec:aa:ea:6b:cc:61:cb:8c:55:41:5e:29:
                    0f:12:fe:4d:3c:34:04:df:da:c0:22:8a:89:77:bb:
                    de:ca:16:7c:49:e4:1c:b4:0c:ba:97:21:0e:69:bb:
                    24:5e:51:87:4c:a7:0f:f4:dc:4b:0b:c7:b9:65:94:
                    91:bb:56:80:a3:a8:ab:c4:b5:9c:60:f5:ea:0c:df:
                    8e:53:87:8b:c9:66:d2:2a:88:8a:a2:84:df:1b:73:
                    f1:d9:0b:96:3b:72:f9:ce:c8:86:ae:21:32:1e:c4:
                    e3:11:53:f1:66:67:42:36:14:11:3e:0b:77:83:4e:
                    b8:c4:60:0b:4a:dd:a4:40:02:b9:f8:fe:ff:a7:be:
                    11:49:f1:91:48:49:c7:05:15:7e:91:c2:55:d8:11:
                    7f:a8:5b:14:11:60:70:1c:5b:e4:b1:9b:64:0a:40:
                    7d:b6:63:1d:6e:96:39:de:88:80:d8:91:a0:fb:f3:
                    47:5d:de:6b:37:65:bb:b7:2c:de:67:e2:64:b2:92:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:08:57:E1:50:ED:65:4E:20:08:12:A5:DF:E1:34:E3:95:74:B1:97
            X509v3 Authority Key Identifier:
                keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:a3:e1:cc:2d:e1:e2:ac:7c:0e:70:d9:2e:72:10:03:02:
         fb:0b:41:4d:a1:c2:b9:ba:c8:8b:04:05:8f:33:2b:de:fe:70:
         e8:c7:98:a8:8e:4a:a9:6c:4b:7c:34:c4:64:21:9b:dd:0d:07:
         04:87:8f:73:a8:99:3b:7a:99:40:bd:93:9b:db:43:03:25:9a:
         2e:df:68:51:ae:be:f5:86:ae:bd:17:79:ec:7e:11:5f:f0:4d:
         58:16:2e:d7:96:e0:13:8c:04:3b:2e:2f:3c:92:15:95:2a:ac:
         fd:34:3f:c4:0b:d8:ab:ee:10:db:57:ae:b6:a3:79:05:84:2f:
         30:2a:07:2b:2e:21:9a:af:14:9f:86:e7:ec:a5:0b:39:84:16:
         c7:c9:f7:84:d4:9c:fa:72:e0:d5:9d:d4:c1:58:f9:ea:9b:e4:
         72:16:3b:1d:32:f9:cc:7c:71:68:87:c9:0f:44:2e:f8:9f:30:
         99:2f:7e:36:e9:82:c7:1d:09:53:33:ba:dc:8a:a8:c4:67:da:
         84:43:a3:ea:54:4a:88:45:be:95:95:ba:11:9f:09:37:65:b1:
         ce:4c:38:5d:e8:a9:a4:b0:56:ed:45:43:77:ec:ef:b8:0f:54:
         ee:bf:9f:6a:b4:d3:b3:fa:7d:51:79:70:53:c7:08:57:7f:51:
         67:e3:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:25 2026 by rpki-client