This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File:                     aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier:          pq5gRqmlBaowj/Qa9RDjEutIQHHKV81o1xZg6LXBNuE=
Subject key identifier:   C9:0F:51:3B:E1:EF:F7:BF:FD:F3:75:91:DA:D8:37:71:72:4D:EE:63
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer:       /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial:       019C42EBB004D00683B0805EB8F162CEB074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 15:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:07 +0000
Files and hashes:         1: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (hash: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y=)
                          2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: iaAPS+g9wRddFocgNHsg/wsC1wdL+Tn8nFKGPO8Zbfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b0:04:d0:06:83:b0:80:5e:b8:f1:62:ce:b0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
        Validity
            Not Before: Feb  9 15:01:07 2026 GMT
            Not After : Feb 10 15:01:07 2026 GMT
        Subject: CN=c90f513be1eff7bffdf37591dad83771724dee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:8e:ab:4b:cc:1d:42:01:c9:1d:1d:b2:bf:
                    6f:58:c6:10:1b:6f:9b:fa:32:25:c1:f7:7f:7a:f5:
                    73:1b:df:b4:d1:c4:f4:a0:4d:43:1b:8a:91:ec:c8:
                    ac:76:29:60:00:b8:e3:6d:05:61:02:fd:af:42:dc:
                    f3:3a:b5:5b:35:4f:e0:f1:0a:67:86:87:fd:57:75:
                    26:bb:ca:aa:20:e2:a6:7f:e2:8d:de:f1:8a:e2:ae:
                    85:80:fa:3b:b9:2f:41:6e:aa:8e:46:55:66:aa:c5:
                    f6:72:7f:fa:e3:39:5b:bb:7d:b0:4a:7e:e6:fa:7f:
                    8c:c2:66:4f:9e:f6:29:72:74:3c:8e:c0:b2:d5:3d:
                    95:73:6c:d6:97:7b:01:83:c0:a5:16:a1:a1:54:ad:
                    14:7f:4c:dd:66:4d:4a:7d:51:6b:ba:45:4d:c7:f0:
                    70:e2:8a:42:e0:01:8a:61:11:05:e9:95:5d:af:dc:
                    9c:dc:86:f9:8d:b8:91:24:f3:30:cc:8f:dc:5b:32:
                    66:ac:64:1e:5d:0f:94:fd:b7:d8:9a:41:f0:a7:65:
                    85:32:27:c4:18:07:8b:9f:53:09:f5:1d:40:51:3a:
                    1f:cf:6a:87:1e:43:15:9a:95:50:ff:62:dd:47:1f:
                    06:37:bc:ef:93:cb:b8:9f:56:54:0a:f0:0e:4c:d7:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0F:51:3B:E1:EF:F7:BF:FD:F3:75:91:DA:D8:37:71:72:4D:EE:63
            X509v3 Authority Key Identifier:
                keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9c:1b:f6:55:36:7f:96:31:80:3e:3c:5b:1d:74:b0:db:5b:
         45:ee:97:00:e8:cd:80:e2:36:22:83:cd:63:11:e7:1d:19:46:
         fa:ae:ae:01:d4:3f:e2:fe:9b:35:43:8c:9b:0c:08:33:45:e8:
         90:3c:3e:2b:92:8f:51:af:ad:fe:16:d0:43:7d:76:3e:48:af:
         4d:02:42:82:0b:99:c4:94:53:04:ac:8a:25:94:0a:a1:1b:6d:
         3f:fd:7d:85:d9:f7:bb:9b:c0:ff:89:94:54:23:e9:01:41:68:
         0a:72:d3:8f:a9:9e:17:84:46:4d:96:9e:ab:02:f2:34:9b:54:
         36:de:41:30:c6:59:25:88:fb:86:31:a5:5e:82:cb:cf:ef:54:
         a5:8c:88:9f:a0:4a:5f:22:2a:8e:43:35:59:66:64:c6:e7:20:
         f1:e1:d0:1b:f2:97:03:9c:f9:5b:3b:f4:02:9c:9b:1c:d4:b4:
         36:8b:db:94:81:02:de:c1:e2:15:e8:bf:96:fb:8f:0e:dc:b7:
         cd:5b:61:cf:c5:bf:5d:aa:a3:a5:d8:41:da:5a:5d:23:74:be:
         1f:19:58:d8:6c:54:a2:07:4d:c7:96:45:0a:be:09:8e:a1:a6:
         86:27:ff:99:c3:3d:1e:2a:0f:28:5f:e1:3b:b9:b6:59:9f:3d:
         a0:4c:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:09 2026 by rpki-client