This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File:                     IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier:          beMXxpliCq0RvuaQhLslVKovAfva/BHyK+zMlI/Jjyg=
Subject key identifier:   6E:C9:1D:96:70:81:BA:EE:19:79:94:55:02:A1:B2:ED:78:0C:A0:F2
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer:       /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial:       019C30775D79F28128ADDE62F5D8E00B8E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number:          0BBE
Signing time:             Fri 06 Feb 2026 01:00:54 +0000
Manifest this update:     Fri 06 Feb 2026 01:00:54 +0000
Manifest next update:     Sat 07 Feb 2026 01:00:54 +0000
Files and hashes:         1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
                          2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: q36DbLPaWCjK/NvGQBuxmqkpBDhbLGwwlVe/Ss/5cK0=)
                          3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:30:77:5d:79:f2:81:28:ad:de:62:f5:d8:e0:0b:8e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
        Validity
            Not Before: Feb  6 01:00:54 2026 GMT
            Not After : Feb  7 01:00:54 2026 GMT
        Subject: CN=6ec91d967081baee1979945502a1b2ed780ca0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c9:87:34:72:2e:69:09:d9:84:21:17:6d:e9:
                    d8:35:64:8f:8f:7e:37:68:e0:c4:02:df:02:a4:c1:
                    76:72:21:90:82:f0:eb:bd:ff:27:eb:4d:b1:a6:4d:
                    70:4d:b7:a5:cc:0b:28:51:2e:91:9f:94:93:53:d3:
                    c8:46:c5:0b:5d:c2:42:c8:10:ba:c4:82:c6:28:9a:
                    66:fb:b2:ef:44:73:e2:57:6a:23:00:d5:ae:ff:d6:
                    bc:2c:b9:76:a9:2d:34:3c:37:ce:80:80:da:0c:87:
                    20:f8:f9:e6:c1:e1:bb:bf:75:b8:a4:da:5b:0e:e0:
                    05:c2:e4:e6:86:95:9c:20:c8:0c:42:2a:aa:53:58:
                    53:91:cc:42:c9:4d:ac:97:d7:4b:4a:05:28:66:73:
                    da:30:1d:71:c7:fc:86:44:2f:ce:ff:32:68:ae:ba:
                    22:76:06:83:ad:e1:03:6c:c2:54:54:72:f4:46:cc:
                    c6:9c:47:87:09:32:25:d8:0e:aa:2b:a1:c2:3c:2c:
                    f2:07:43:ab:97:46:ea:ef:d7:6b:8b:01:87:c3:42:
                    e0:7b:68:7b:02:da:92:e0:a8:5a:4f:0a:a6:a9:2a:
                    a1:5e:94:be:39:c9:48:fb:a6:c4:3e:bb:fe:e6:aa:
                    88:c0:b7:1d:9d:dc:0b:e0:fa:c5:44:71:d5:05:c0:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:1D:96:70:81:BA:EE:19:79:94:55:02:A1:B2:ED:78:0C:A0:F2
            X509v3 Authority Key Identifier:
                keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:59:24:6f:5d:da:cf:99:57:8e:9a:26:63:d4:c4:d3:9d:df:
         fc:4d:20:42:b9:ba:6f:8d:ad:33:b0:e4:74:7e:bd:93:bd:77:
         2e:5f:db:db:ad:ca:85:b4:10:77:b6:55:88:d1:83:20:ff:c1:
         6e:2b:c4:2d:67:f3:68:34:5b:37:2b:ab:bb:51:fd:23:97:ea:
         fa:c5:65:4d:e9:29:18:1b:72:64:43:fc:f1:52:dd:5f:37:a3:
         c5:99:8c:00:b4:ec:99:2e:02:58:64:7e:ee:5c:ea:5a:82:b3:
         6a:0e:35:88:3a:25:c8:46:ab:72:ec:d1:2e:9c:a0:cf:24:47:
         50:ca:99:cb:c9:9f:70:cb:be:2d:51:b9:e0:d9:5e:c4:80:84:
         9a:4e:fe:2c:68:eb:8c:33:aa:a9:fe:4b:1c:67:6c:4a:43:db:
         98:bb:b5:57:1d:05:99:b4:3b:ff:e5:56:0f:b1:98:23:65:f4:
         bf:d1:0c:bc:2e:cb:36:e8:27:0a:53:75:95:25:b4:45:40:2b:
         8b:b6:66:1f:c3:f1:91:e3:05:de:56:8c:94:59:14:0c:46:42:
         f6:ba:f0:ec:eb:a5:30:e2:3c:8d:a9:84:a2:45:9d:82:e2:d3:
         b9:9b:43:d2:6e:1f:cb:04:6d:20:61:31:26:a1:c0:ab:24:83:
         7b:30:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 09:40:48 2026 by rpki-client