This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File:                     6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier:          /7zwePvdwI8P5ByQW3XMDb5CcDVfLj4ZZyaCaoMa5xw=
Subject key identifier:   B7:29:1E:C7:9D:F3:9D:28:D3:FE:FA:A0:26:8E:AA:53:8A:59:80:64
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer:       /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial:       019C42B3F690C0B3E6AD5E6964CC0BFD0462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number:          087B
Signing time:             Mon 09 Feb 2026 14:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:16 +0000
Files and hashes:         1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: Gb5SoRn0Cm6T6Nmfawz8y1mKFVPh4oypUsBqN26QiOs=)
                          2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
                          3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f6:90:c0:b3:e6:ad:5e:69:64:cc:0b:fd:04:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
        Validity
            Not Before: Feb  9 14:00:16 2026 GMT
            Not After : Feb 10 14:00:16 2026 GMT
        Subject: CN=b7291ec79df39d28d3fefaa0268eaa538a598064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:66:b5:0a:31:d0:c3:ba:ae:f6:04:1f:64:
                    a0:a8:a4:07:a3:50:ac:66:12:e2:f0:10:1c:e9:24:
                    92:4f:59:40:9a:09:78:8b:1b:a4:d3:92:ae:b8:ed:
                    22:e2:18:ef:65:11:4c:5a:85:96:9e:10:b3:aa:96:
                    a5:40:b4:77:0b:c0:2f:50:5c:a9:68:21:d4:d1:d0:
                    fb:37:a0:c1:a9:0f:9a:b5:ca:63:65:75:66:1b:e7:
                    65:61:56:b5:a9:3b:01:2b:58:db:68:91:0e:1b:67:
                    a2:e8:0e:aa:f7:6b:6b:ca:43:b3:6a:55:0f:67:7a:
                    b9:a4:8a:cf:7c:ce:6d:9c:6b:c3:5d:b0:56:26:ff:
                    89:7d:be:aa:32:68:79:a0:c8:89:dc:42:36:46:a7:
                    5c:ed:36:21:2a:c1:63:50:30:e4:35:8f:43:42:e6:
                    ca:c6:64:15:0e:63:fc:f5:b2:32:e9:9d:e0:f0:d0:
                    38:01:09:a7:cb:5a:17:37:8b:b7:52:6f:7e:1e:f2:
                    0c:89:1d:3d:3e:7e:25:7a:24:1b:f9:b3:34:d3:0d:
                    a3:b2:09:c7:65:2a:d8:6f:29:3b:60:67:a5:30:f1:
                    06:54:12:fc:23:3e:c6:3f:85:e6:8c:ac:41:a7:2c:
                    54:39:b9:61:f0:fa:81:38:e7:04:cd:16:81:bb:36:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:1E:C7:9D:F3:9D:28:D3:FE:FA:A0:26:8E:AA:53:8A:59:80:64
            X509v3 Authority Key Identifier:
                keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:f0:87:46:99:54:85:1d:73:7c:f2:78:d6:93:df:1c:78:
         bc:b4:c4:1c:26:d2:37:3b:e2:4a:9b:31:9c:58:d1:c1:b3:22:
         aa:12:6b:6e:ba:14:c8:b3:38:dd:35:1d:2a:78:04:da:7c:52:
         c3:40:76:6f:35:11:19:96:2b:9c:2d:b3:1d:b0:c1:0a:96:26:
         bd:66:5c:88:4e:e1:c8:21:a5:45:8a:1a:68:42:19:1b:bb:64:
         8d:37:5f:e0:c3:f8:30:99:d4:b2:56:b3:d4:9c:8d:0f:0b:ae:
         50:27:73:d6:f7:cf:e4:60:c5:94:af:02:90:6a:e7:05:6f:57:
         b0:fc:19:9e:8a:31:d6:c9:ee:c2:84:23:df:10:34:40:00:02:
         87:39:ca:28:66:38:b1:74:69:ff:00:9e:49:f4:46:54:30:69:
         3e:f2:44:34:da:bf:37:92:f1:2a:e3:fe:4a:34:82:21:3a:26:
         96:d6:23:83:7f:cf:dc:9c:07:63:44:7b:1c:b7:1d:57:5a:6c:
         d8:b1:03:d1:d6:b4:66:92:9a:dd:3b:7b:8e:61:23:e1:28:d3:
         c3:4c:29:21:59:ce:ed:c1:93:43:c4:d4:fd:6d:85:8e:3b:1b:
         1b:8e:04:7a:84:0e:e1:8b:03:cd:8b:a3:e4:4b:2f:54:d7:c9:
         0f:96:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:47 2026 by rpki-client