This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File:                     p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier:          kn+2F7pFWrXaphsGOeml6bwg/5a5NvFTFN+S0ovrhjw=
Subject key identifier:   F3:E0:64:69:45:93:9F:57:26:BB:73:AE:D4:20:42:1E:97:A2:2E:89
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer:       /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial:       019C42EB749057EA7A9922FD96E91664641D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number:          1450
Signing time:             Mon 09 Feb 2026 15:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:52 +0000
Files and hashes:         1: BIbEENkk1VYHKgEjraLUKclwiTY.roa (hash: Xt3A7RQYaDzUTGNw8VMdtqurMB1YlizmqkVXb08fVNk=)
                          2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: rNWAnnGyytQUX/xoGlf+OizLAF/LV82mFDG2f45sk5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:74:90:57:ea:7a:99:22:fd:96:e9:16:64:64:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
        Validity
            Not Before: Feb  9 15:00:52 2026 GMT
            Not After : Feb 10 15:00:52 2026 GMT
        Subject: CN=f3e0646945939f5726bb73aed420421e97a22e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:3a:4e:bc:6d:39:76:ff:75:6e:4b:68:23:
                    06:90:46:ee:c5:41:3d:88:98:18:98:22:65:b3:95:
                    f2:9d:70:97:80:02:d3:bc:b7:07:97:3d:28:94:f1:
                    08:64:5d:94:2e:e1:d4:0e:73:3a:e4:28:79:07:58:
                    08:99:9f:6f:a2:c7:12:98:6d:fb:64:4f:03:96:93:
                    91:27:b6:4f:e0:8d:0a:f5:d0:44:ec:23:4c:c5:7c:
                    97:e0:8f:7c:35:37:54:52:e5:5f:69:59:56:76:58:
                    1f:f6:18:10:6d:35:c1:e0:5f:8a:e9:d0:50:33:4a:
                    ef:5b:cf:6b:1f:8b:36:f3:31:a2:b5:2e:d1:22:a2:
                    49:08:ca:e0:0f:48:6b:47:4d:3e:40:86:f7:ef:7d:
                    42:05:eb:43:f3:5d:80:d1:3f:92:2b:aa:2c:f0:ed:
                    c8:69:d5:28:f6:05:5b:ef:b6:6e:86:27:78:8f:fa:
                    df:db:f6:d6:87:7a:d4:5a:3a:e1:1d:41:19:97:dc:
                    4a:59:d6:43:0c:e6:85:22:d3:9c:73:26:f8:da:94:
                    24:3e:a2:08:84:9f:79:42:3b:aa:6e:41:94:10:27:
                    99:27:d7:ad:10:ed:ab:7d:54:f9:06:a6:ec:30:44:
                    da:ba:b6:af:87:03:64:1e:95:36:88:71:f5:54:86:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E0:64:69:45:93:9F:57:26:BB:73:AE:D4:20:42:1E:97:A2:2E:89
            X509v3 Authority Key Identifier:
                keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:9e:39:d6:b7:eb:a4:b9:08:65:4a:33:56:52:69:42:f7:
         d1:5d:fe:da:c2:e4:cd:f8:83:3a:d3:e4:8f:4f:48:58:46:5b:
         a4:c2:6b:31:67:26:d4:9d:72:66:39:20:09:cd:3e:5c:5c:a3:
         be:94:37:67:ac:7b:5b:c5:2a:7d:01:8b:48:ef:9a:6f:8d:1a:
         35:b8:9a:db:7c:57:5e:cf:1a:07:75:46:b8:da:f0:b1:be:17:
         ed:8b:7b:75:68:0e:29:10:59:85:32:5f:0c:cc:08:35:5b:12:
         1b:97:6d:2d:48:11:cf:b5:42:ac:b7:46:cb:42:a8:d3:97:0c:
         47:3a:a7:e2:ac:23:6e:f8:d9:02:b2:33:97:55:41:20:ac:6c:
         a3:a9:18:8a:31:f4:5f:86:7a:be:a1:1e:83:e9:b8:09:d9:3d:
         a6:c1:61:96:e8:d9:93:f4:37:6a:e8:25:44:d5:bd:a8:4e:fb:
         cd:f0:6e:be:4f:48:85:8b:cb:4c:5e:0a:e9:37:8f:e0:5d:cc:
         2d:23:6e:a1:28:9e:51:ec:7d:81:00:e4:77:10:4d:cc:9a:dc:
         48:f3:07:58:3a:1d:4f:9e:a1:b2:c0:37:41:fc:fe:25:79:f1:
         10:e2:66:db:29:2e:07:50:4a:c5:ae:48:e7:ef:94:69:c1:e5:
         14:9f:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:10 2026 by rpki-client