This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File:                     aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier:          mN9ZJqqj4ssxOD/eggjeysf40OFqJnnvlDpQCbcMAT8=
Subject key identifier:   26:95:D5:E2:BD:74:8B:89:CB:EA:88:65:5E:B1:5D:4A:D2:6E:04:C5
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       019C4246947C406402EDB3968621A9C77384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number:          1201
Signing time:             Mon 09 Feb 2026 12:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:47 +0000
Files and hashes:         1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=)
                          2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: IftcHIfyRFkJoTx33T1BrzwuzWJEBVIPVoQv3AWOfqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:94:7c:40:64:02:ed:b3:96:86:21:a9:c7:73:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Feb  9 12:00:47 2026 GMT
            Not After : Feb 10 12:00:47 2026 GMT
        Subject: CN=2695d5e2bd748b89cbea88655eb15d4ad26e04c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:bd:1c:ba:ab:34:06:b4:dc:85:73:2f:c4:
                    6f:82:a5:92:f2:19:70:99:34:74:a9:f0:92:be:62:
                    02:aa:01:98:bc:36:a0:0d:9c:49:e9:fd:e1:17:16:
                    71:d7:06:47:e7:11:d6:b1:d4:e8:f2:40:04:e9:a0:
                    97:92:56:a3:a6:19:6a:b1:b5:2c:6d:db:17:9f:73:
                    ea:80:e9:5f:5a:ad:f5:3b:a6:16:1b:da:69:b1:b6:
                    8e:e0:ee:0f:98:73:05:b0:e7:f1:40:46:51:9e:bc:
                    97:9a:37:28:0f:35:c0:f1:1a:8c:b4:36:12:46:31:
                    d1:35:59:56:58:46:65:e0:3c:61:4a:e1:5c:63:0d:
                    aa:ad:90:bf:38:30:e5:69:37:7b:75:13:e0:e5:f3:
                    a8:66:98:67:ae:c5:65:fc:b7:b2:c9:c1:b4:44:cf:
                    25:5c:98:25:70:02:eb:31:88:a2:ee:af:23:98:85:
                    ef:46:d1:4f:74:45:74:b7:f3:a4:ce:6d:78:9e:76:
                    b9:ca:b0:47:b0:df:c0:65:63:b4:49:35:63:4d:88:
                    7f:be:29:70:8e:eb:20:96:20:9d:1d:e7:b1:d2:13:
                    19:4e:bb:b1:89:86:d7:07:5e:7d:d0:28:20:2b:6c:
                    17:c5:f0:57:d3:e7:16:11:3f:a0:de:9c:fa:bb:1e:
                    ea:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:D5:E2:BD:74:8B:89:CB:EA:88:65:5E:B1:5D:4A:D2:6E:04:C5
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:a7:81:c1:ca:d5:bc:03:7b:47:64:f6:74:47:9f:5e:2d:
         06:56:84:11:ec:a4:eb:fb:9a:34:56:75:6d:56:eb:39:20:41:
         d9:d1:15:ac:c8:d1:29:73:0d:d6:07:0c:bc:4e:82:ef:7f:c1:
         69:70:81:b9:6e:cd:f2:d0:d3:ea:32:fc:f2:40:69:e2:a0:6f:
         8b:05:5f:f3:86:c8:e2:d7:a2:9e:1c:3d:3b:70:47:01:84:d0:
         36:2e:34:6f:42:d0:52:9a:84:9f:ff:4e:98:b6:25:d5:f3:b8:
         45:13:70:86:a8:93:e6:11:45:22:95:3d:2a:9d:2f:df:14:9c:
         8f:0f:cf:d3:81:61:ac:3f:19:8e:1c:ea:cd:be:c7:5a:ac:8d:
         e1:96:26:e1:5b:d9:87:ea:c5:56:20:d2:79:88:3e:cf:33:c2:
         27:36:ba:1e:3e:b0:8d:58:51:4a:7b:a6:ab:64:f5:f7:c1:e4:
         9a:41:0e:4c:2c:f7:76:81:a2:76:b0:9e:f1:ff:3e:9d:c5:fc:
         3a:e9:36:1c:a3:2b:ed:22:1c:07:17:92:3b:3e:7e:62:2b:3c:
         08:0d:39:53:6b:21:5b:cf:12:eb:55:0a:9c:c7:39:47:de:4c:
         86:0b:30:c9:ac:16:50:22:b5:85:c6:81:a7:72:b5:21:95:c1:
         5e:b3:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:18 2026 by rpki-client