This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File:                     v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier:          J3RcssbWYd/BcWsoWvjsRHgE3ReKQdR/KaMSYrSnDjw=
Subject key identifier:   3D:0D:90:E6:56:FF:71:D9:B9:52:0D:F1:A3:98:12:49:76:9A:9B:CE
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer:       /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial:       019C42EB1F46D4CDEA0DD3239C5F0C07F183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number:          03F8
Signing time:             Mon 09 Feb 2026 15:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:31 +0000
Files and hashes:         1: oedGpnSFOdSVNyorOdd1uy704_0.roa (hash: 1yu0XFObLRYgYa2uFCs4hzb2YmkMGgpRVokB0kOSiOQ=)
                          2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: cjteiM9R3cc0R6J4qVv6cBiwi4wLDoRpa8wVdYuQnH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1f:46:d4:cd:ea:0d:d3:23:9c:5f:0c:07:f1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
        Validity
            Not Before: Feb  9 15:00:31 2026 GMT
            Not After : Feb 10 15:00:31 2026 GMT
        Subject: CN=3d0d90e656ff71d9b9520df1a3981249769a9bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:cb:39:8b:22:5c:5c:15:59:47:06:c4:9a:
                    07:33:78:f1:96:59:cb:77:7a:11:af:0c:66:7f:69:
                    59:5f:d6:2c:17:ed:f6:97:eb:80:01:8d:90:5e:ea:
                    74:bc:5f:78:a5:bf:af:d0:81:a1:29:4e:25:a2:f0:
                    d9:e2:1f:43:d9:8a:87:82:19:07:24:e6:f9:34:42:
                    d1:0b:dc:d9:14:24:57:cf:8a:4b:3f:22:38:96:b4:
                    1e:a4:58:64:1b:8c:23:6b:ad:3c:34:68:e2:94:e9:
                    34:80:14:94:a8:99:4b:b0:ee:a9:0b:f2:58:32:a0:
                    b3:f3:6b:0e:80:ab:dc:35:0a:8f:b5:11:a6:cb:98:
                    bc:52:31:80:7e:7a:92:d4:4a:ff:46:7b:b3:40:5e:
                    03:a8:88:52:25:ac:07:9b:a9:f3:b0:e2:1a:7b:2a:
                    c9:a2:0e:29:05:c6:6d:fb:5c:0a:bf:49:f1:fd:a0:
                    17:9a:10:35:49:c7:6a:22:e1:bb:c0:30:00:f5:f7:
                    29:7a:cc:13:9f:75:1d:db:88:b0:d8:6b:d3:0f:1f:
                    63:29:8c:ae:36:b5:0f:d6:0e:20:68:99:f0:d8:49:
                    4a:55:44:6d:8b:76:fb:ac:7f:38:37:cd:93:e4:b9:
                    4a:6d:e9:76:ec:57:06:2f:20:95:12:a5:6b:b9:9d:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0D:90:E6:56:FF:71:D9:B9:52:0D:F1:A3:98:12:49:76:9A:9B:CE
            X509v3 Authority Key Identifier:
                keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:0a:50:da:90:e3:36:ee:fc:1d:49:da:68:ec:67:b4:42:
         b5:e0:2b:59:75:f6:59:e1:cf:11:ae:61:35:58:4c:6e:b2:dd:
         6e:53:91:6c:c7:88:95:eb:1d:17:d1:73:6d:96:14:25:28:73:
         30:b4:e0:b9:88:36:fc:13:39:de:e4:ea:62:6f:f9:65:52:22:
         57:17:fe:a9:b9:95:3d:4d:97:f0:b8:6e:ea:c7:47:d4:39:4c:
         02:9c:19:19:13:01:83:17:3b:9d:f9:d8:78:e1:c8:aa:40:ac:
         70:ae:1a:76:9b:de:25:79:8f:60:1b:cc:8a:af:4f:e9:01:d3:
         65:4b:27:ac:d6:c3:bf:e5:c9:99:6f:ee:86:87:8f:f7:77:d9:
         9d:26:57:73:89:c7:5e:93:67:ee:ea:2f:b0:ad:dd:15:23:ad:
         da:ba:62:c1:9d:70:39:e9:6c:c8:e1:18:c9:34:85:38:74:05:
         a7:fd:70:79:43:56:08:af:7d:f1:d8:9f:5e:4b:b4:82:8b:b9:
         13:b1:ac:ce:65:a6:1d:82:74:9e:e0:59:f6:a8:f0:f1:ae:0d:
         a6:63:41:5a:11:48:30:41:1c:8e:fb:7f:df:eb:f3:2c:83:87:
         a4:9f:11:b9:ca:b0:d7:65:ad:70:68:e3:45:5f:e5:f7:bf:94:
         cd:55:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:49 2026 by rpki-client