This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
File:                     1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft (raw, json)
Hash identifier:          Wyn2WSPEb/KAIM38HZeM+Ptd2j746aHnxVqTzTVLRy8=
Subject key identifier:   BC:88:A8:7F:8C:E3:18:C3:49:21:87:C9:CD:3A:65:35:54:EE:BB:7E
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Certificate issuer:       /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial:       019C1F4CAFA8CD8DBC6066184E59A2946058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
Manifest number:          10D0
Signing time:             Mon 02 Feb 2026 17:00:45 +0000
Manifest this update:     Mon 02 Feb 2026 17:00:45 +0000
Manifest next update:     Tue 03 Feb 2026 17:00:45 +0000
Files and hashes:         1: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl (hash: 9M0Rt4y21lHpUXefr5B52AdCe1iSrT3nhQW38scSpmY=)
                          2: CXq1ehXWNMHefU8KADZSUiW5JNQ.roa (hash: IQLBY624JMgfLXTy5NdATSOazp1jTQpenvXMhkZX3P0=)
                          3: U_-oEqDoqq4pyChyVJLsATa4hF0.roa (hash: 8Yj0FUG+yJPUHzOrojBoyPpjqX+h2j3Dx9uPO5dyJKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:4c:af:a8:cd:8d:bc:60:66:18:4e:59:a2:94:60:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
        Validity
            Not Before: Feb  2 17:00:45 2026 GMT
            Not After : Feb  3 17:00:45 2026 GMT
        Subject: CN=bc88a87f8ce318c3492187c9cd3a653554eebb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:e0:64:03:bf:c8:9e:cd:95:54:7e:9a:13:
                    f5:7b:d7:59:ca:ea:38:a8:07:e9:3f:c8:9c:e3:92:
                    3b:40:cb:55:df:d9:23:ee:f1:f5:61:5d:75:d9:0f:
                    fb:48:0a:cb:c6:7a:90:ce:02:ee:7b:d4:b6:6d:b0:
                    6a:5b:6b:77:19:af:70:99:1c:25:85:d7:5d:b5:64:
                    fe:57:47:ad:3e:6a:d0:11:57:82:ec:85:8c:68:dd:
                    96:74:15:80:c1:aa:c5:d5:f4:45:c0:8c:ad:ac:4e:
                    69:79:ed:ae:8b:9a:88:04:aa:41:0d:f1:45:0f:2a:
                    c3:4c:d6:6d:6e:6b:e0:0c:ab:74:90:7f:b7:2a:e1:
                    8f:15:07:f9:00:bb:dd:5c:ba:87:79:8e:9a:9a:6a:
                    16:a3:a9:ed:e4:b8:10:30:f6:34:3d:87:10:19:9d:
                    d5:8c:d5:de:86:db:48:f9:b9:c6:a8:29:35:99:27:
                    44:b9:e9:fc:a1:7e:85:69:2a:98:60:a8:b1:aa:e1:
                    d8:8d:bd:94:6d:6d:7a:b8:96:5d:14:7d:84:c4:55:
                    6a:c5:c4:de:ae:d5:65:19:ea:20:dc:67:64:28:be:
                    db:ea:9b:ad:e8:5b:50:ca:7a:fd:2e:d8:28:3f:e3:
                    34:c4:37:5b:13:2a:b5:69:07:31:99:ed:ec:c8:d0:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:A8:7F:8C:E3:18:C3:49:21:87:C9:CD:3A:65:35:54:EE:BB:7E
            X509v3 Authority Key Identifier:
                keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:04:7d:c8:67:16:b3:7d:9e:85:ea:20:a1:36:ea:97:25:
         33:64:1d:c1:20:94:a5:d8:bb:a7:99:95:82:4d:72:37:59:5b:
         2f:02:93:a9:47:4d:38:4d:98:de:84:1a:a3:69:1c:c5:82:75:
         9c:f5:02:0c:6a:c6:0a:b9:63:46:53:db:d9:d1:ee:e6:6d:a4:
         da:b6:18:62:4a:a9:12:1d:2d:4c:6c:2c:53:cf:cb:ff:29:2f:
         ca:a9:d7:fc:cb:e0:4f:dc:65:a5:1e:03:a9:a0:4f:b8:29:3a:
         64:89:f5:6f:7c:48:1e:bd:e5:61:b7:7e:d1:2a:48:5e:a7:95:
         4b:ab:45:59:73:6f:aa:49:13:fb:95:1d:25:5d:b7:72:c3:d0:
         7a:73:52:78:ed:fc:c7:67:68:d8:2e:2a:f7:8e:2f:59:ca:f7:
         25:5e:71:52:5b:ce:41:b7:f7:58:d1:3b:6c:bd:9d:a9:da:b8:
         c2:20:49:0f:1e:eb:01:8d:22:7c:59:e6:a0:32:13:ef:2b:26:
         06:75:29:3e:5d:8c:b8:91:df:85:ce:d8:9c:84:b7:b2:13:14:
         0f:be:66:4e:9b:0e:c6:97:d6:8e:3b:ae:54:6a:c9:88:c8:ef:
         63:1e:ff:d3:4f:62:04:93:47:e7:c7:16:6d:87:b8:3c:74:7e:
         e4:0f:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:55:04 2026 by rpki-client