This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File:                     s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier:          sY/3THGdvdgEOWPOkYQijULGsaA9Nf5PbmkL1TbcaMI=
Subject key identifier:   DA:D1:FE:F6:68:ED:61:2F:E2:B8:A3:DF:58:C5:A8:BC:04:6B:D8:A2
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer:       /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial:       019C427DFC4B295C4E82D94D73EBA5ECE248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number:          157C
Signing time:             Mon 09 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:18 +0000
Files and hashes:         1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
                          2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
                          3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: QEVFWDSxoPAKpcQFa0lITWWgASQdUuPB+0nr8bhqALg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:fc:4b:29:5c:4e:82:d9:4d:73:eb:a5:ec:e2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
        Validity
            Not Before: Feb  9 13:01:18 2026 GMT
            Not After : Feb 10 13:01:18 2026 GMT
        Subject: CN=dad1fef668ed612fe2b8a3df58c5a8bc046bd8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:3d:66:58:e6:98:83:ee:d9:1c:81:d0:d9:
                    3c:fa:b4:f1:9f:73:9f:3b:91:33:e7:4a:f6:1f:ed:
                    fe:89:84:89:47:54:f1:c6:98:27:e7:ef:ba:cc:ec:
                    97:70:e3:82:55:9f:76:e2:c2:e1:37:12:29:60:86:
                    b4:a5:c2:36:d4:17:e2:b4:ea:f9:80:41:68:72:c2:
                    96:d5:9f:d8:e2:97:af:4b:d2:5b:8b:77:e0:c9:95:
                    d2:16:1b:8e:9d:9b:33:6e:88:ec:aa:3a:d0:c3:11:
                    8a:8c:37:81:60:02:51:a5:c9:ea:f6:ed:2a:e0:eb:
                    70:de:fc:5b:54:5a:b5:c2:23:85:cb:c5:2b:c8:3b:
                    70:3c:db:11:c9:bc:3d:fe:8a:a5:64:9a:fb:b0:b5:
                    44:94:7c:f9:0b:5d:2e:db:23:94:c0:89:2e:34:ef:
                    25:08:0f:3b:60:74:cc:3c:07:3e:12:c9:bf:e1:68:
                    a9:c6:61:01:76:dc:c2:fa:3d:f0:88:e2:f5:a8:b6:
                    39:37:fe:60:34:14:7e:dc:64:18:e2:6e:c4:c9:8f:
                    cb:33:aa:b0:b9:39:c6:4a:4f:41:cf:79:44:f9:c3:
                    ae:4c:30:50:e7:34:a2:e0:86:65:2a:38:8e:79:41:
                    80:a5:3d:c1:be:f1:d3:4c:c6:df:eb:f1:37:b7:ab:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D1:FE:F6:68:ED:61:2F:E2:B8:A3:DF:58:C5:A8:BC:04:6B:D8:A2
            X509v3 Authority Key Identifier:
                keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:c8:c0:3e:52:13:e2:b4:ff:8d:3a:13:d8:ae:41:9d:1b:
         b5:63:aa:18:09:7e:d2:d4:19:e5:ed:4a:08:e6:87:e0:a2:d9:
         d0:72:98:da:b3:9d:31:e4:46:1a:5d:1d:3b:a7:19:bc:dc:b7:
         25:56:39:a8:9b:a0:0d:3b:6d:3a:55:1b:9b:33:21:17:23:89:
         85:b2:27:c8:c6:ea:9d:01:6c:77:50:b5:3a:db:42:b3:55:d9:
         5a:54:0b:cc:b8:2d:b0:da:dc:11:d7:be:4e:71:be:f0:36:4e:
         e5:9c:94:20:1c:41:a1:34:19:21:74:8a:c0:4a:43:86:1e:91:
         65:11:15:32:0f:70:c1:3e:1a:ee:b5:c1:42:21:fe:23:28:51:
         e1:30:1a:c8:d8:67:42:c7:05:90:2a:63:07:b7:15:da:23:a5:
         d9:d9:db:07:3b:59:91:2d:fa:fb:25:87:a8:b0:ce:e8:f5:38:
         97:55:fe:b2:ba:30:e8:a2:a0:c6:96:13:e0:f9:e6:e5:61:53:
         4a:55:23:86:48:81:86:3f:c3:6d:7b:73:c0:ec:77:68:5f:27:
         12:8f:cb:99:a5:a8:39:52:ea:d2:a2:49:c8:11:cd:45:d5:e4:
         d6:d2:a6:73:aa:c3:d8:71:a4:17:00:d0:36:f7:4c:d8:32:99:
         b9:2a:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:44 2026 by rpki-client