This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
File:                     U6d_390Uwt8Vjr_C5s_ConmmSME.mft (raw, json)
Hash identifier:          9YlGeDIP+rwzGvuxVMKAu9M6PxYE51f9+17jZhdrEQQ=
Subject key identifier:   BC:62:76:36:C2:D5:93:3E:C2:E9:0E:4B:42:B4:AD:B2:BC:30:45:6E
Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1
Certificate issuer:       /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
Certificate serial:       019C42EB4579FBC35F20920A166D86AC7BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
Manifest number:          121C
Signing time:             Mon 09 Feb 2026 15:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:40 +0000
Files and hashes:         1: U6d_390Uwt8Vjr_C5s_ConmmSME.crl (hash: R+iGxb3SUL1V4oz1OSJxd0DoHDpig1fGP2jdPg4U8D8=)
                          2: n5fGK8uQ1IXVs4gItqnXi96bOCA.roa (hash: 9Xe7j5MzjEYIo3j8TehBH8vYadVuml9WRHAXRG8x2oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:45:79:fb:c3:5f:20:92:0a:16:6d:86:ac:7b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
        Validity
            Not Before: Feb  9 15:00:40 2026 GMT
            Not After : Feb 10 15:00:40 2026 GMT
        Subject: CN=bc627636c2d5933ec2e90e4b42b4adb2bc30456e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:04:9c:0c:49:db:16:be:07:07:1d:3d:aa:
                    6b:d7:ce:d4:d4:4b:bd:a8:d2:09:ec:0e:e5:f0:d0:
                    6e:ba:7c:7b:ea:8f:1b:86:71:23:d9:4c:c1:d1:33:
                    20:f5:12:59:74:23:bc:00:4a:15:34:30:ec:84:dc:
                    09:a2:b5:2e:a1:1c:26:61:54:96:25:eb:3a:3c:de:
                    4a:cc:c2:3f:cc:55:c7:b9:2d:fd:a5:30:bb:5c:73:
                    e6:c4:0b:08:83:b1:71:5c:81:bc:ca:c3:d6:85:68:
                    33:ee:93:4f:a7:8a:34:a1:a9:83:e9:d0:b6:e2:c6:
                    67:2a:7b:02:7c:08:76:9e:d2:08:02:1e:31:c3:f4:
                    fa:c9:8f:45:4f:bf:cc:1d:59:1f:9d:92:b4:5d:00:
                    ec:4c:5d:47:1d:e9:1f:b0:d4:a1:34:c9:f2:fb:74:
                    ae:76:12:b4:bb:25:da:51:2c:0e:74:8e:48:fc:08:
                    eb:5b:2c:14:02:b9:2d:28:1d:6c:ee:af:48:a0:39:
                    60:7c:48:39:ea:1c:6c:ba:1c:73:24:2a:60:26:d4:
                    e1:a2:b4:22:cc:81:be:eb:47:de:28:63:e0:c1:12:
                    db:19:fc:7f:8a:cd:60:96:a6:93:66:94:51:36:fc:
                    ca:ea:df:e1:79:7b:37:19:1c:89:1a:8d:a8:3c:60:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:62:76:36:C2:D5:93:3E:C2:E9:0E:4B:42:B4:AD:B2:BC:30:45:6E
            X509v3 Authority Key Identifier:
                keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:1e:df:20:a1:33:08:42:32:eb:3e:41:cc:58:cb:c1:cf:
         d4:b5:27:f7:e5:1e:08:e9:ef:4d:bf:20:79:09:09:f4:d1:98:
         8f:85:07:8f:d8:6e:9e:50:ab:7d:2a:c5:39:f1:a5:a3:d6:0c:
         e4:30:a0:52:76:9c:b2:c2:03:47:33:f4:28:72:1b:03:b0:44:
         85:7c:d0:58:a7:c1:9e:62:d2:7f:d7:3c:97:51:91:46:b1:4d:
         6e:eb:a0:df:59:9a:81:4e:fb:df:ac:71:ca:5d:3b:83:c7:b8:
         24:5c:9c:91:87:e8:fb:73:1a:d0:2c:8f:ac:57:bb:4b:24:5d:
         13:e2:22:f8:91:80:7b:32:2d:07:32:6b:d4:50:28:cd:ce:33:
         75:75:b3:44:69:78:9d:9d:cc:07:a6:38:db:33:ce:10:33:ae:
         07:d8:8c:d4:3d:af:a2:de:11:39:6e:3a:5c:4a:df:fd:04:6a:
         85:5f:3b:c1:f0:d2:f3:35:f8:72:50:a5:11:a7:4d:0d:20:85:
         b4:1b:57:86:16:23:15:67:50:8b:9a:c2:16:1b:32:ad:20:73:
         01:44:eb:33:2f:1c:a7:6d:3a:0d:05:f6:00:11:e2:b3:51:21:
         92:64:cc:34:80:7c:f3:ca:e7:91:e8:f3:eb:a8:62:6b:04:93:
         fa:c8:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:08 2026 by rpki-client