This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File:                     au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier:          d5Tkyrxm6x1Jt8jeMhz8uBowyEf69DCEHjiclPJ4y/k=
Subject key identifier:   E5:A6:52:45:8F:7E:B4:15:E7:41:92:5B:F5:C4:B6:61:AB:DB:DB:56
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer:       /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial:       019C420F74107177B485F215A16126AE5C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number:          028A
Signing time:             Mon 09 Feb 2026 11:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:34 +0000
Files and hashes:         1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
                          2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: tZhKB1u5HQnTpUkodMUeuN9sNGwvN8CSYhjZZy5/DF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:74:10:71:77:b4:85:f2:15:a1:61:26:ae:5c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
        Validity
            Not Before: Feb  9 11:00:34 2026 GMT
            Not After : Feb 10 11:00:34 2026 GMT
        Subject: CN=e5a652458f7eb415e741925bf5c4b661abdbdb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:34:30:5e:e5:e3:c0:d0:20:0b:75:e3:e7:
                    d0:03:58:2a:1b:9e:a6:38:90:73:4c:1c:27:35:1a:
                    81:92:5a:0f:a3:f6:42:88:45:ba:21:b2:c6:97:af:
                    c7:b0:7e:97:ec:0a:c0:2e:db:7b:43:c8:31:28:4b:
                    06:43:a0:f1:f7:46:36:5b:02:a6:18:dc:db:43:d3:
                    da:db:de:92:1e:6f:89:8c:92:62:77:9a:5c:2b:35:
                    13:4f:15:91:b8:62:73:b5:99:ca:bb:a2:b2:f9:7d:
                    b3:45:b2:0c:2c:8b:e9:56:d4:e8:9f:e6:4d:91:82:
                    7d:bb:e2:12:c3:58:55:b0:65:77:68:a1:00:ca:f3:
                    ae:e4:84:ce:3f:34:dc:46:27:ab:0e:63:b5:85:e4:
                    f4:31:03:49:d6:a9:59:e5:a2:14:ea:f9:8f:d5:c2:
                    72:7d:83:58:78:ca:c1:8e:64:70:c5:ef:c5:15:b6:
                    a7:a1:cb:40:e5:dd:ef:31:80:60:be:76:1b:63:81:
                    9d:c9:9d:0c:48:a3:67:bc:1d:83:6f:df:64:f7:cd:
                    11:5a:85:77:99:00:e4:e7:e6:56:ed:d5:64:4b:c7:
                    6d:4c:4d:45:33:d3:85:bd:8d:d3:60:de:f5:92:2c:
                    54:d9:3b:7f:46:ab:e8:25:51:79:0b:34:d8:70:69:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:52:45:8F:7E:B4:15:E7:41:92:5B:F5:C4:B6:61:AB:DB:DB:56
            X509v3 Authority Key Identifier:
                keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:0d:3f:ea:ea:75:56:9a:c2:24:30:70:ae:5c:a8:af:14:
         9c:49:74:ff:a9:4d:5c:df:42:6d:84:c2:34:2f:75:9a:21:49:
         35:74:44:40:f7:36:51:69:21:56:f8:ef:9f:e9:39:2e:56:d0:
         62:ed:1f:d7:41:3d:9b:d7:18:f6:16:22:4d:b7:ac:84:0e:ff:
         87:d9:4e:22:4b:56:09:d7:77:db:ee:4b:b2:30:1b:cf:f7:6b:
         0b:b1:ae:d0:83:13:2e:b0:fa:a2:aa:be:56:a9:0e:bc:b0:23:
         4f:84:32:5e:3b:91:11:1e:b6:7f:37:7c:29:18:59:ec:d1:f0:
         3f:d1:98:d3:48:e7:18:ce:d0:a4:1b:73:e0:7e:9d:fe:39:90:
         67:7c:40:54:6d:2e:41:04:c1:62:50:13:98:24:cf:7e:d4:f1:
         72:8c:ef:3d:38:f7:99:88:96:34:4c:8d:27:85:f3:90:84:80:
         73:b7:33:25:ad:25:29:df:d1:38:46:08:47:33:02:a2:75:72:
         e0:25:61:49:e6:44:61:c5:74:78:c5:fc:16:ef:f9:2e:c5:89:
         cb:d9:8f:3a:7d:2c:2e:e6:22:f0:67:54:0f:e7:49:bd:df:b2:
         d9:d4:b9:b6:d7:a3:c6:ab:68:d7:30:9e:2d:9c:96:d7:59:46:
         31:c4:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:18 2026 by rpki-client