This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File:                     a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier:          nTekyLSN3yU3aq9QcwNDnKaWypE5KEAeeAVdz4f4bjo=
Subject key identifier:   B7:A8:5A:B1:AA:E1:6F:07:94:B5:9D:DF:0A:44:AE:C9:B9:BF:5D:36
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer:       /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial:       019C427D9C5115C0DFE28BAA7D96DE4C5FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number:          17EF
Signing time:             Mon 09 Feb 2026 13:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:54 +0000
Files and hashes:         1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=)
                          2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=)
                          3: 8pV9FFO-tES_JuUHxRKhch63PEo.roa (hash: 540XzD9mn0yvC46UKHgIPXJPTkeY5N8Mqtv1H6BSjos=)
                          4: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=)
                          5: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=)
                          6: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=)
                          7: XN2j2ZnyCgistBzzXo98ceyqR5E.roa (hash: /uVeuVZywozOmzMeKf0pUlvlMBObR5bHXnc9LBKX9hg=)
                          8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: L1Z7/nRwTDi8kawWMnRAOuQpPoT9pSEShjPUvt/vOa8=)
                          9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=)
                          10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=)
                          11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=)
                          12: roN-7lMrJBJshC3odG7CfsyJC9w.roa (hash: HgaVm7vJPKp3DvkA5zpgY89s+4B3e4bWrP23hUJHt/k=)
                          13: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:9c:51:15:c0:df:e2:8b:aa:7d:96:de:4c:5f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
        Validity
            Not Before: Feb  9 13:00:54 2026 GMT
            Not After : Feb 10 13:00:54 2026 GMT
        Subject: CN=b7a85ab1aae16f0794b59ddf0a44aec9b9bf5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:41:3d:a1:b9:97:92:a7:41:df:60:10:71:
                    07:49:09:ae:84:bf:7a:3c:f4:ab:b5:96:b8:de:77:
                    73:b1:81:91:65:6f:f5:f4:9d:90:45:5b:ed:a0:e7:
                    d3:7e:38:34:67:b8:52:77:19:be:4d:8c:6e:0f:2f:
                    16:82:91:6b:6f:5f:d0:01:eb:65:6d:61:55:ed:ec:
                    0a:40:4e:52:2d:1e:b9:be:83:5b:bd:61:f3:79:47:
                    9c:86:78:94:cd:96:7e:83:52:62:2e:01:b2:bd:32:
                    03:28:c8:5c:3d:e0:fd:cc:79:37:ba:77:84:a7:ff:
                    cb:5b:a8:97:e0:80:0e:cc:b9:c9:0e:dd:aa:f7:ac:
                    a6:31:3e:c8:c4:e0:8b:7e:8b:2d:3d:2f:3c:f6:82:
                    cb:d5:45:6a:98:63:74:c8:80:03:cc:b7:06:df:54:
                    20:db:47:8c:7e:dc:6b:be:59:8a:c4:2e:29:d6:5a:
                    9b:90:7d:9a:37:f0:75:81:c3:0d:48:a2:d2:70:94:
                    49:e6:50:a0:cf:93:8f:23:41:70:de:3e:e2:c0:67:
                    54:88:58:ae:e2:b3:8a:6a:a6:38:37:7a:ba:d3:62:
                    19:a3:75:34:d1:3c:c7:a2:75:78:18:a8:4c:38:1c:
                    2e:e7:ef:f5:f8:7a:a6:49:ae:0b:44:f8:ef:2f:f2:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A8:5A:B1:AA:E1:6F:07:94:B5:9D:DF:0A:44:AE:C9:B9:BF:5D:36
            X509v3 Authority Key Identifier:
                keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:9a:d0:08:a3:bb:71:c2:fa:83:7b:30:c9:6a:29:08:eb:
         b0:e0:5b:0a:7b:57:46:df:3d:6d:2d:fe:70:c7:2f:0c:c5:d8:
         7c:0d:ba:b9:09:81:40:b3:57:97:07:15:cd:f8:b0:9b:04:bb:
         6c:87:84:e8:39:a0:33:72:8a:4a:01:e1:19:92:90:5f:6c:b3:
         f9:94:a3:6c:c8:2c:dc:7e:f4:ed:79:05:31:b9:08:af:c4:59:
         fb:6a:2e:3b:c3:3a:80:30:be:4a:90:c2:1b:9f:32:d5:95:8c:
         da:eb:f2:da:a8:ff:94:0a:3b:7a:a5:e1:74:40:c5:11:eb:d9:
         2d:4a:12:26:b8:41:86:fd:a5:d9:e1:bc:d7:b2:bd:e0:df:a5:
         c7:4d:ab:6e:82:d2:2f:25:6f:63:72:f2:e6:77:de:7b:5f:4e:
         83:0b:66:02:69:d1:d4:fe:42:a0:ce:02:86:c9:e8:62:37:54:
         c1:a9:4e:60:17:cf:cf:fe:98:e4:22:44:f4:bb:73:8b:eb:79:
         e2:a4:11:a8:c0:13:a8:b1:02:6f:4d:d5:7c:b3:6d:70:12:b0:
         09:b5:26:f0:5e:eb:8e:0e:0e:06:bb:67:e9:b7:63:8d:75:71:
         ec:84:cc:98:69:3d:3f:61:73:b9:5e:52:37:ee:da:cf:18:ad:
         55:40:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:02 2026 by rpki-client