This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File:                     I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier:          36lww8uX30br4a+hgMKh/ahBEVu/4sqkf6rlUdI52NY=
Subject key identifier:   86:3B:90:AF:F1:06:B0:21:7F:18:82:98:49:30:58:FE:2C:17:9E:F8
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer:       /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial:       019C22F275867714E043DF161E7C01BEFFF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number:          0BC6
Signing time:             Tue 03 Feb 2026 10:00:40 +0000
Manifest this update:     Tue 03 Feb 2026 10:00:40 +0000
Manifest next update:     Wed 04 Feb 2026 10:00:40 +0000
Files and hashes:         1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: D5+35E2NCUSXk8cFaRHYglJ2AZr2USb+/8fnZHjtZSg=)
                          2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
                          3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:22:f2:75:86:77:14:e0:43:df:16:1e:7c:01:be:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
        Validity
            Not Before: Feb  3 10:00:40 2026 GMT
            Not After : Feb  4 10:00:40 2026 GMT
        Subject: CN=863b90aff106b0217f188298493058fe2c179ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:27:ec:a0:fb:24:f3:1b:5b:24:aa:d7:7e:
                    b6:82:82:65:fc:50:58:ea:1b:17:11:20:f1:98:ef:
                    9e:19:99:73:36:67:5a:9c:f1:85:0a:79:49:d5:47:
                    23:4e:67:c4:cf:23:ec:26:b5:81:6e:50:5d:1d:3d:
                    ba:b5:a6:d7:2f:49:d9:86:5a:b2:cf:ef:5f:51:d8:
                    6f:d4:75:4a:be:61:fa:ab:c4:f0:69:a7:72:9b:e7:
                    f7:3c:29:75:47:bd:d5:ef:dc:16:a9:a2:41:21:3c:
                    69:fb:3b:55:06:52:a6:80:81:84:c7:1b:94:ba:9e:
                    12:5e:6a:cb:b8:a5:9d:61:ad:f6:fc:c1:7b:fe:db:
                    2a:1c:17:ca:c4:44:b9:f3:5b:83:59:79:4b:44:a0:
                    4c:25:2c:09:80:ad:38:6e:41:08:5e:66:3d:ed:c2:
                    b4:f6:d1:6c:e1:bd:24:ee:d2:c6:f6:be:87:20:e6:
                    d7:c8:36:01:3a:7b:f7:06:47:45:d4:9f:46:5f:e6:
                    ba:85:64:cb:00:90:9f:3d:41:a9:03:e7:a9:ed:5e:
                    04:dc:6d:5f:6c:33:e7:8e:5f:15:30:27:d8:2e:ae:
                    a5:25:5c:f1:a4:8f:8c:54:a0:69:c3:ce:c3:63:d8:
                    c4:5f:8b:02:a1:01:a5:69:a3:25:50:e8:fd:f2:5c:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3B:90:AF:F1:06:B0:21:7F:18:82:98:49:30:58:FE:2C:17:9E:F8
            X509v3 Authority Key Identifier:
                keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:af:fe:57:1a:6b:91:cd:07:87:98:7c:d0:d6:48:d4:95:d4:
         43:48:23:b6:72:1a:68:f2:a3:ac:4f:fb:55:93:36:51:5f:87:
         a3:8d:9d:87:c5:22:3f:59:c9:d7:18:d6:45:12:a0:57:eb:59:
         a7:12:27:6b:72:38:80:ec:30:b6:ef:e3:ee:6a:dd:a4:db:d1:
         ad:bd:6f:4e:e7:e4:99:1c:d4:59:79:f9:6d:fd:ae:50:0d:ea:
         26:e4:0e:36:f9:e3:19:32:c4:56:b1:be:e2:1e:73:e6:28:cf:
         46:a0:0c:8d:91:c5:4d:5e:89:7a:dd:94:34:b2:32:0f:80:03:
         93:bc:cf:46:06:18:6a:67:ed:06:57:ee:f1:bc:28:c8:69:8e:
         f5:7b:4a:64:c1:2b:b8:50:f6:e0:f7:b2:79:f1:5a:b8:2e:31:
         a0:dc:f9:8a:6b:ef:d6:31:b3:6b:3d:ea:d1:66:4e:9e:19:1d:
         da:77:61:b6:66:f4:d3:9e:34:fe:cb:0c:56:ee:07:3c:95:4f:
         10:4b:ac:02:45:bd:85:14:50:6c:88:62:0f:ea:30:c6:d8:a8:
         e0:12:fa:bf:8b:56:6e:df:b6:a1:bb:17:2d:7c:5e:9b:49:4f:
         57:ec:bb:e4:6a:5e:26:12:31:53:f2:d1:2c:9d:dc:ee:4f:8d:
         42:19:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 21:13:45 2026 by rpki-client