This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File:                     x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier:          hIulk8TEDOC35UX/ANjJCgNq69AukK8hIzQnogw4oRo=
Subject key identifier:   52:9C:35:C2:35:96:49:04:E1:D6:36:E2:04:3F:97:3E:63:48:1C:F4
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer:       /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial:       019C40FD6647F1440A9F5E43A7772731B288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number:          1552
Signing time:             Mon 09 Feb 2026 06:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:14 +0000
Files and hashes:         1: YOiCbjbkGoimIbW3nkdcU24V058.roa (hash: jiSJ+O2fFYcLK2VQfO+2IbVyopzNGD9QLV+WZmnKJXk=)
                          2: qiIZeyX9IxKh6T92ERJD5iYwHJM.roa (hash: wrTzp4KmTWE2/mdXpqaffqeTXDKkOFMqbZCBTP+Yqzg=)
                          3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: E5BagML9Ddwf+MrZvSjMQXXsxENid3UW3IdfgXxZe/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:66:47:f1:44:0a:9f:5e:43:a7:77:27:31:b2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
        Validity
            Not Before: Feb  9 06:01:14 2026 GMT
            Not After : Feb 10 06:01:14 2026 GMT
        Subject: CN=529c35c235964904e1d636e2043f973e63481cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:c8:2f:ea:f0:03:76:b2:d4:bb:25:ad:17:
                    2d:c8:20:eb:76:7a:78:4b:17:c0:0e:8d:c2:bf:40:
                    bb:54:26:bb:2c:4e:ae:a7:66:83:b3:6b:67:41:72:
                    47:6a:c0:a3:d6:6c:a5:ce:ee:dd:e9:71:7d:5f:d2:
                    eb:4f:c5:23:82:44:21:dc:e5:18:23:8b:e5:58:3c:
                    d6:bc:ba:fd:5a:2b:e8:73:8f:94:93:ec:51:9b:13:
                    5f:04:d3:12:9b:12:d6:d2:ca:d6:02:ff:be:09:ff:
                    ea:7a:7e:6f:c5:57:e2:c9:42:40:44:66:3a:a1:d3:
                    39:ef:46:a7:da:59:91:c1:e8:66:29:52:1b:57:48:
                    d6:e6:19:7e:b6:2f:97:80:aa:64:a2:21:38:4b:7b:
                    ed:3e:dc:be:77:fc:c0:c4:09:3b:34:2f:7e:89:ab:
                    8e:51:60:55:81:94:f5:ad:f7:49:36:38:37:88:76:
                    84:d5:e9:51:b1:96:4c:63:11:d6:31:b2:a7:1e:c3:
                    3d:5e:cf:f2:d8:9f:c3:ab:92:d0:97:9c:37:3a:0a:
                    2d:e7:64:aa:6b:bd:19:f2:36:af:b3:9b:da:1c:60:
                    0d:5a:62:80:19:29:29:60:16:ba:93:2b:a5:9b:6d:
                    6e:2c:80:b4:8d:95:2b:59:ba:a5:cf:46:e7:66:18:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9C:35:C2:35:96:49:04:E1:D6:36:E2:04:3F:97:3E:63:48:1C:F4
            X509v3 Authority Key Identifier:
                keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:f8:93:6d:5c:db:55:d7:9f:23:60:40:d3:df:53:0f:11:
         ec:7e:83:45:c0:f5:6a:f0:b1:40:98:95:2d:ae:35:b8:3c:7f:
         a3:b7:53:ea:c5:6f:2f:53:76:0e:1d:16:2c:27:7a:3d:20:4d:
         56:34:bf:7a:f8:d7:fc:6d:52:f2:70:3b:57:b7:1d:57:2e:62:
         3a:7b:ea:67:92:d8:82:9d:73:24:ec:4d:f4:c4:1d:eb:7e:27:
         02:a1:c7:c3:95:90:42:44:46:f9:e6:c7:04:64:3b:07:73:de:
         32:55:72:9a:8a:4a:72:dc:42:a5:f2:a6:d5:41:b8:8f:94:86:
         11:14:03:35:1c:34:d8:a5:ff:60:86:33:ac:6d:44:f1:db:21:
         df:dd:52:53:b5:69:aa:17:1f:1e:4d:ac:07:ed:14:52:4a:ea:
         26:6b:3d:da:ea:8d:99:e5:eb:ca:dd:2b:32:a9:92:68:d8:d5:
         95:e3:1f:7f:a4:d2:ad:e0:d3:1e:5a:1f:87:22:32:c6:3d:d2:
         2b:28:64:ef:44:0e:60:1b:e5:6a:40:26:7d:2d:66:e1:18:35:
         50:5a:89:9d:0d:17:78:1f:7e:a4:a2:41:c7:cf:ab:15:5e:23:
         24:50:58:28:e0:b7:47:d6:c9:c9:48:a8:73:33:ba:23:a3:24:
         6b:7e:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:59 2026 by rpki-client