This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File:                     rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier:          MHRTBy+ky8N/l4asBesTKyYSfrHdR97BIX69Qwb0OlU=
Subject key identifier:   81:18:AE:EB:B3:7C:B9:65:CD:F4:19:FA:F6:A0:BF:D0:4B:01:1D:8C
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer:       /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial:       019C427D57AEB47CB221679DB24B1629ACD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number:          10A6
Signing time:             Mon 09 Feb 2026 13:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:36 +0000
Files and hashes:         1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
                          2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: Lna1AJDo1b1rFnHSD2ZdzgAgOTUaFeiiLDEuSJJ1jl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:57:ae:b4:7c:b2:21:67:9d:b2:4b:16:29:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
        Validity
            Not Before: Feb  9 13:00:36 2026 GMT
            Not After : Feb 10 13:00:36 2026 GMT
        Subject: CN=8118aeebb37cb965cdf419faf6a0bfd04b011d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:ad:7c:0c:f1:9b:ea:b8:71:6b:a6:c4:82:
                    90:a4:16:33:1e:ba:1c:1d:16:33:b9:f3:9b:2e:b8:
                    94:2a:b0:c6:97:2f:6d:b6:a4:3c:6f:b5:df:89:2c:
                    4a:7d:4a:53:6e:f6:90:15:47:0b:df:2a:e3:6d:dc:
                    7c:e4:0a:d1:e7:83:4c:0a:e0:9e:6d:d8:f8:a8:99:
                    e1:7e:3e:a8:5b:6c:91:0e:a6:30:37:64:52:79:7d:
                    1d:c2:2a:4f:48:9d:92:fe:4c:9e:27:ba:ea:f4:4d:
                    09:23:2b:4e:7d:88:c7:60:57:04:c2:c6:2d:1a:41:
                    51:48:b8:81:97:5e:d1:e9:eb:c3:bb:09:14:76:a6:
                    e0:0d:e3:ca:e7:8f:9b:0c:d1:c1:e1:29:21:8f:5e:
                    62:18:db:c7:96:88:e4:12:99:b6:7a:57:0b:ed:d8:
                    f2:8a:95:3a:be:0b:07:97:46:f2:39:92:b7:a9:0e:
                    68:ca:ad:c9:73:21:94:09:42:d5:3f:8c:f0:2c:fa:
                    97:39:1e:92:57:d8:85:d0:ce:52:f1:59:bf:da:33:
                    34:ca:2e:c1:6a:ea:cd:52:01:80:af:49:79:8e:6b:
                    8b:75:0e:b6:b1:44:f5:ed:9c:64:b2:3b:bd:6c:af:
                    89:9a:e1:66:fa:e3:37:34:a7:ad:d2:20:da:29:4e:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:18:AE:EB:B3:7C:B9:65:CD:F4:19:FA:F6:A0:BF:D0:4B:01:1D:8C
            X509v3 Authority Key Identifier:
                keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:02:c9:53:4f:e7:c6:ed:6e:71:c1:04:a8:63:c5:65:93:f5:
         9b:ed:18:66:36:59:64:ca:92:99:15:d6:80:50:29:cc:a3:59:
         37:8a:32:56:0d:47:29:0c:cf:53:d2:90:01:f0:ca:2d:56:8c:
         27:e2:07:55:07:b9:02:3c:48:c2:7f:d6:71:e6:04:a6:a4:6b:
         22:14:f8:26:4b:1d:36:23:c6:e1:d9:3a:ff:96:a5:76:2b:d4:
         c6:da:0d:55:22:c7:a8:c1:73:67:74:58:f5:87:2c:d7:fc:82:
         28:76:52:d7:e6:ef:ac:45:e0:5a:26:f0:27:e6:37:fe:8b:b9:
         0f:54:16:8b:21:d8:f7:96:27:f3:d3:20:d8:f9:a4:32:4c:2a:
         c0:3e:e1:f4:9c:36:be:a9:8b:01:a0:bc:86:68:6d:61:01:be:
         55:5d:6f:50:06:43:d4:eb:cc:23:32:63:4e:ae:7d:87:54:bc:
         7e:99:3e:63:eb:f0:f8:eb:60:4a:c5:e3:18:a6:15:e5:aa:bd:
         9b:40:af:a0:35:b6:be:48:53:cd:55:b1:0e:9d:6b:df:59:18:
         c6:34:d4:0e:47:bb:2f:f0:dd:e4:5a:35:fe:c3:74:cb:6a:fb:
         4f:3b:f2:7d:a3:da:f5:00:fd:ea:69:21:87:8a:44:54:fd:31:
         45:3e:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client