This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
File:                     t0FAkE6TQngaQguYXmTMNc3vy64.mft (raw, json)
Hash identifier:          jXRVfJXb1oBqAhVRJcyy75finConlAXuqa9JGRhu56U=
Subject key identifier:   D0:89:67:05:16:D8:CC:F0:3E:05:FA:1F:23:13:77:A6:E0:6F:C4:1A
Authority key identifier: B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE
Certificate issuer:       /CN=b74140904e9342781a420b985e64cc35cdefcbae
Certificate serial:       019C4246599218BFD76A950BCE54C45EBF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
Manifest number:          10
Signing time:             Mon 09 Feb 2026 12:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:32 +0000
Files and hashes:         1: cJb3OglO7xZXnqgcS4IiacfQEF0.roa (hash: vl8NCITgrbY5cswSzS8XkdQGpkVi77gvR63+VLkTCM4=)
                          2: t0FAkE6TQngaQguYXmTMNc3vy64.crl (hash: WOrgf7qmcwAdn504nqzaN7/hD/EOFbWT0JJizM1/2xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:59:92:18:bf:d7:6a:95:0b:ce:54:c4:5e:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74140904e9342781a420b985e64cc35cdefcbae
        Validity
            Not Before: Feb  9 12:00:32 2026 GMT
            Not After : Feb 10 12:00:32 2026 GMT
        Subject: CN=d089670516d8ccf03e05fa1f231377a6e06fc41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:76:ac:4a:ef:59:cb:63:bd:d3:a2:24:5b:
                    70:a1:f2:5f:44:6d:f4:04:45:00:d3:ae:73:85:db:
                    03:3c:a0:28:60:c6:c9:7d:28:a6:d5:12:05:a5:1f:
                    6e:85:80:0b:e3:a5:d6:72:43:25:74:6c:96:f3:33:
                    6c:e2:9a:33:fe:ba:98:0c:ea:73:39:b4:b6:a2:94:
                    5d:ed:f6:33:be:4a:f4:ca:98:43:5e:41:f5:bb:51:
                    18:2f:22:b5:30:28:f0:3e:28:ae:8f:50:34:cb:4c:
                    28:fd:7b:dc:9d:44:58:dd:97:49:23:c2:b9:60:f2:
                    d3:a9:39:bf:a5:13:5f:d9:7a:7a:e4:3b:5a:81:0e:
                    8d:54:f8:98:4c:3e:99:ef:63:c4:7d:6b:64:91:de:
                    d5:3d:e1:23:92:c9:85:d9:91:cb:76:41:37:37:0b:
                    9a:ad:97:1f:65:6f:55:9a:a2:3c:51:67:78:1b:a1:
                    48:3f:bb:81:41:76:3d:16:f6:b3:6c:2c:64:f2:e8:
                    2a:32:ce:b9:7e:c3:8f:f9:d6:7c:94:d7:42:3a:3d:
                    ce:4e:de:be:02:8c:5a:3b:98:2f:cc:fb:ab:bd:59:
                    08:5f:08:d7:11:db:3e:80:ee:64:06:de:a7:88:80:
                    7e:e5:ba:ea:83:1e:5c:a0:7f:61:73:63:9e:45:ca:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:67:05:16:D8:CC:F0:3E:05:FA:1F:23:13:77:A6:E0:6F:C4:1A
            X509v3 Authority Key Identifier:
                keyid:B7:41:40:90:4E:93:42:78:1A:42:0B:98:5E:64:CC:35:CD:EF:CB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0FAkE6TQngaQguYXmTMNc3vy64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6e50c2-c5ad-4dd5-acb7-93eb143a3fbf/1/t0FAkE6TQngaQguYXmTMNc3vy64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:29:07:0c:f1:0f:37:16:2e:1b:0e:d3:bf:47:00:2a:9d:
         e3:4a:b8:bd:e0:41:66:13:6b:fd:a8:97:40:d8:a2:79:17:5f:
         86:ef:56:a5:2e:2a:bf:0a:c7:4f:99:67:3d:d8:7d:e2:47:b7:
         cb:cb:21:17:48:26:e3:4c:f2:a4:c5:bd:b3:76:a3:f4:49:72:
         96:48:92:b8:72:11:0d:e6:88:3a:9a:07:ba:df:5d:79:d9:ff:
         19:1f:3a:0b:04:33:dd:98:26:8b:45:71:a5:4e:52:ae:5b:2d:
         8a:ca:99:fc:f5:03:fa:30:cc:6f:89:c7:1c:51:56:ad:95:64:
         5e:d0:f8:a8:36:1d:31:67:6f:ea:b9:d5:9e:08:e0:a7:81:dc:
         f7:0f:bd:de:64:91:e4:72:04:88:1f:be:75:2e:63:af:03:54:
         08:a0:a2:9c:08:35:f3:b1:42:89:13:33:7f:68:82:32:bb:1e:
         44:de:e2:99:01:c8:85:d7:ed:b4:a3:86:7d:e0:da:86:f1:f2:
         84:b7:c7:ab:f2:99:6c:c0:e2:b0:65:72:54:9d:2d:4b:e7:16:
         3a:6f:b0:2c:78:a7:4e:b2:34:3f:90:16:e3:2d:f1:44:1c:e8:
         03:ac:af:c9:9b:7d:2f:bf:cf:32:78:b6:c4:b0:22:34:bc:47:
         4d:7d:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:38 2026 by rpki-client