This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File:                     MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier:          lj55lwmCZHeeGHI6QP8QLT8NFFUmrBtGqUxBCeDcbiU=
Subject key identifier:   6E:FC:69:45:80:CE:0C:80:FE:A3:44:60:22:76:F7:82:D1:0D:7A:22
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer:       /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial:       019C42463505F616B11310BF2968FFC5999E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number:          06B8
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: h/1A0axvpPelkWZoF7X1h6jdnFmIHawmR5MR0yb2NtA=)
                          2: j7653T51F6EUoDPqs_2ecZYygWM.roa (hash: iqkpEFsJy76DXov6xlk9ejYQADnbYUIfX+Z+h7UJP2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:35:05:f6:16:b1:13:10:bf:29:68:ff:c5:99:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=6efc694580ce0c80fea344602276f782d10d7a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:a8:70:5d:cf:05:37:93:f1:e8:52:58:6c:
                    be:51:c2:55:4d:12:89:70:86:fc:fb:8f:4f:3b:3f:
                    a0:da:0e:93:a4:6d:4b:57:3f:1b:5c:63:c8:d0:86:
                    ac:a8:ed:1f:2c:d7:9d:52:f5:11:62:9c:02:a0:c1:
                    46:51:5b:b8:61:d9:0e:eb:dc:da:4d:63:ca:02:e2:
                    c4:1c:a9:30:9f:59:a3:03:85:f8:61:c5:3c:f1:f8:
                    3b:7a:5e:a7:ae:26:c0:93:0a:23:dc:d8:47:ef:06:
                    23:a0:c9:00:ab:a6:93:7e:57:f9:9b:c2:ee:ba:ba:
                    8b:55:2a:98:00:81:13:74:46:d8:12:2f:47:f7:70:
                    2e:44:51:1a:ee:e9:5f:7e:fc:e8:b4:60:7f:c3:7b:
                    ea:5e:78:20:08:0e:68:d2:a8:f4:a8:0e:c4:05:14:
                    7a:19:31:1a:bf:ee:e5:4b:44:60:88:4c:6d:f3:13:
                    f6:fb:53:e4:7a:3e:53:84:8b:94:fc:11:94:89:80:
                    ce:71:64:ae:c5:4f:52:47:69:b2:68:04:04:b8:30:
                    67:7f:f6:0a:19:3e:5b:92:2a:26:45:13:34:e6:3e:
                    f2:eb:a9:d5:53:f8:57:06:78:5b:8f:52:89:be:b1:
                    b7:b4:65:32:ec:e3:e0:f0:12:12:0a:b4:ff:3c:4c:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:69:45:80:CE:0C:80:FE:A3:44:60:22:76:F7:82:D1:0D:7A:22
            X509v3 Authority Key Identifier:
                keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:6c:9c:65:68:9f:da:c6:cc:d3:12:55:75:c3:7f:61:36:
         c5:ef:f0:cd:09:53:2f:45:c1:b4:75:11:0b:f4:63:3d:ff:13:
         96:71:ac:67:e0:c2:df:0c:b2:a7:cc:c9:57:30:2e:a2:61:8b:
         2c:3a:8b:e1:3d:d9:2e:ae:5a:cf:14:6a:80:d3:ea:34:6c:92:
         d9:49:08:ff:1c:78:6c:3d:c1:89:da:6b:fd:70:2b:7b:7b:1d:
         a0:7b:bf:66:d6:52:dc:8b:6f:d4:eb:52:1a:49:7b:ee:74:b8:
         dd:7c:20:df:db:24:99:ab:10:c0:9f:29:03:b9:f4:f2:1f:34:
         b4:e4:5f:0e:e3:03:2b:58:4a:c1:87:b2:d3:15:2b:f4:10:c3:
         da:5d:85:00:1f:c1:7b:06:db:70:7c:dc:4d:9a:d0:00:10:10:
         bf:6a:fb:05:b6:ee:2b:72:3e:e6:aa:05:3e:5a:3e:d4:b8:12:
         e7:77:f9:81:05:48:d6:d9:5c:c3:9a:d0:b1:c6:3a:df:5c:33:
         d5:c9:15:a7:6f:fd:20:c4:84:d8:10:cc:8f:81:20:86:6f:43:
         8d:c4:d4:26:c6:48:95:fa:4c:74:7e:d7:2b:c5:de:17:bd:38:
         cc:39:0b:d4:25:2e:b2:30:a9:4a:3e:f8:51:53:f9:67:78:47:
         51:a0:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:45 2026 by rpki-client