This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File:                     aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier:          BnwKPWXxtb1jEfmr2t0EAfG35rLqo5k13l5vGFl1jV0=
Subject key identifier:   A8:71:47:65:60:E1:44:64:4A:9B:EA:B9:1F:62:F5:A9:88:B4:50:59
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer:       /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial:       019C42B4642580862C1CE2BF66902B38875E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number:          161C
Signing time:             Mon 09 Feb 2026 14:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:44 +0000
Files and hashes:         1: JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa (hash: qjvEQEZ4+gLBmbSLvlf95+OWTtrvJCq+Fdjb+HE/rTA=)
                          2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: FJUKhBVp5UJ32C3m+kmYeGVmpG19IMY9njsDj/MqwZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:64:25:80:86:2c:1c:e2:bf:66:90:2b:38:87:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
        Validity
            Not Before: Feb  9 14:00:44 2026 GMT
            Not After : Feb 10 14:00:44 2026 GMT
        Subject: CN=a871476560e144644a9beab91f62f5a988b45059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:1c:ca:67:8c:53:52:04:e6:7b:28:3b:ce:
                    e3:84:54:7c:70:24:6d:34:39:1b:94:85:01:f4:22:
                    be:77:82:98:31:b4:86:c3:a3:ab:b0:c2:aa:e8:f8:
                    01:e9:29:70:c9:60:77:9d:dc:6d:32:57:db:29:80:
                    5f:80:cc:ec:62:0a:c8:26:ac:d1:76:a0:11:f4:35:
                    6d:8b:e0:b0:6f:c2:d1:f4:f8:e7:70:c8:90:75:2b:
                    43:8f:2a:38:2e:ab:21:fc:ad:ee:cd:f7:3c:80:d3:
                    bc:eb:36:3a:76:08:f2:2c:61:07:cc:7b:a6:ba:cc:
                    bc:52:e5:aa:d7:bc:38:29:96:75:bf:d7:42:bf:04:
                    2f:40:e2:ce:22:08:08:bc:71:c2:34:3f:98:f0:14:
                    b0:63:d1:b2:f2:a5:0d:8f:9c:0c:6b:47:c0:2d:d4:
                    29:97:e7:f2:17:02:94:85:42:0b:92:31:a3:2c:d2:
                    3a:22:a1:5e:29:b8:87:43:ac:b9:4e:c7:0d:ba:14:
                    88:2c:47:b3:9a:3b:a2:de:d0:f2:9e:f6:88:c0:0b:
                    e3:5f:98:01:e0:92:e9:23:86:bd:d7:f9:7a:0f:06:
                    2b:b3:22:04:b6:49:8d:94:70:00:ba:a9:1b:eb:3a:
                    24:ab:91:f0:c9:27:f8:aa:44:4d:fa:c4:4e:1b:95:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:47:65:60:E1:44:64:4A:9B:EA:B9:1F:62:F5:A9:88:B4:50:59
            X509v3 Authority Key Identifier:
                keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:dd:ab:d2:a9:ad:b5:b0:cd:b8:59:60:44:74:24:eb:ab:
         5e:e4:76:0d:3a:1d:3b:fb:36:01:98:54:be:bc:70:6b:bb:d7:
         52:79:00:dc:15:ad:ea:04:55:6a:37:a8:9e:d9:3b:82:ef:b7:
         fa:5f:e2:1d:e8:d5:ee:88:35:51:b0:19:11:70:63:00:80:02:
         4e:cf:f2:e3:11:1d:fd:51:06:ee:c6:39:a9:cc:57:a2:b7:e8:
         3f:73:eb:de:51:60:f9:1a:c2:99:ee:2a:9b:85:5f:64:c7:35:
         67:0d:88:73:4a:27:7e:2f:da:95:05:b1:6f:8d:fa:0b:42:93:
         08:af:16:43:65:51:c1:7d:6f:13:9e:71:ec:ea:cd:b6:c0:28:
         f0:dd:de:ff:2e:56:a9:57:91:ff:e0:9d:70:9c:ec:b3:6a:5b:
         ab:0d:be:98:41:b9:f7:cc:3c:a2:00:6a:1d:e9:86:46:c7:56:
         09:13:3d:f5:be:c8:f8:dd:a6:46:0c:c5:8b:a0:41:6f:fe:26:
         e3:e9:07:cf:79:84:7b:b2:32:e4:b2:79:55:15:d7:68:80:99:
         48:f5:cc:16:00:4e:b6:ed:0d:ca:dd:b0:99:62:5e:7c:f7:cf:
         5a:40:c7:79:07:36:a2:03:18:b0:15:a0:6e:6b:f8:83:7f:70:
         10:93:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:54 2026 by rpki-client