This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File:                     ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier:          Q6T910r70ckfzx7b/nQ0+GPDTYIdj6YLXVY1tkC+rmE=
Subject key identifier:   AF:FC:F1:58:C5:95:44:E6:97:92:6B:4B:C7:3A:1D:2A:BE:C2:BF:2D
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer:       /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial:       019C446B871F2A9DCD4DDB6D91CAD1831FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number:          031F
Signing time:             Mon 09 Feb 2026 22:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:23 +0000
Files and hashes:         1: E2O5g-3u7QFDSnqyhGOqtBMannc.roa (hash: LyXDleKJ3gZrrfu8ZQu1gqPieNpy6nIwJ9/Oz5vq8aE=)
                          2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: BPqjjOBNvyZWouw4XecmaBUvbiBKRG/Gn/gr4iTHAbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:87:1f:2a:9d:cd:4d:db:6d:91:ca:d1:83:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
        Validity
            Not Before: Feb  9 22:00:23 2026 GMT
            Not After : Feb 10 22:00:23 2026 GMT
        Subject: CN=affcf158c59544e697926b4bc73a1d2abec2bf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:f7:35:50:88:71:68:ee:c2:ab:eb:82:03:
                    c6:88:b6:d0:1a:4f:e5:e5:09:aa:a3:28:84:8f:84:
                    09:3f:a0:f0:5e:4e:b4:14:d6:36:f9:5a:b0:57:0b:
                    f3:87:b5:88:17:ea:db:7e:be:52:19:af:a2:78:b3:
                    4e:06:44:a7:70:50:b6:d0:9a:fd:77:3f:2b:cf:1d:
                    c4:4f:d3:8a:65:c5:bb:9f:1f:76:43:40:a9:09:cf:
                    e2:13:a9:26:c2:f8:ff:bc:96:7d:cf:a4:81:09:47:
                    29:00:6b:80:61:fc:6c:76:d0:e9:2f:6b:54:65:64:
                    1c:6e:a9:ac:0a:4e:1f:37:46:81:00:81:05:fb:fe:
                    25:00:64:91:2f:23:99:47:65:4d:61:2d:aa:66:8f:
                    75:06:0f:38:b2:5e:24:0b:62:20:98:84:d6:23:d4:
                    2b:97:db:5c:bd:04:ee:eb:0e:4e:74:0e:9a:bb:f6:
                    11:ff:3e:23:41:97:36:00:5c:5e:ac:e0:0f:d0:4e:
                    6d:57:3a:d6:5e:a0:ed:5d:91:46:f5:75:43:34:1b:
                    5f:98:dc:11:65:67:c6:e6:c4:6a:a2:3e:71:45:8c:
                    df:64:b9:d4:fb:7c:6d:35:16:93:65:50:85:0e:f9:
                    a3:72:26:f8:6a:79:16:5a:87:c9:c0:3d:a8:1e:9b:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FC:F1:58:C5:95:44:E6:97:92:6B:4B:C7:3A:1D:2A:BE:C2:BF:2D
            X509v3 Authority Key Identifier:
                keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:83:cc:8a:9e:cf:c3:12:50:34:fb:b0:15:f7:57:42:b0:29:
         12:52:f2:9c:86:54:cc:66:df:5b:2c:bc:9a:a8:da:d0:13:31:
         f3:56:86:12:e2:6e:01:39:fa:47:f5:19:de:cd:c0:d2:86:c4:
         78:1c:da:e2:fe:be:26:3d:48:28:4b:ea:d5:bd:c0:5e:08:59:
         1d:05:a3:92:11:a2:cd:13:8a:23:6c:e4:f1:61:df:c4:03:22:
         f7:ad:f3:28:95:e5:4d:94:e1:30:fe:e0:99:84:72:e7:42:c0:
         67:1f:99:c9:cc:32:84:03:d3:03:9f:3d:8d:12:ab:52:80:1b:
         53:8a:bd:08:1f:bf:6c:5b:42:7f:53:8a:8b:fe:7b:15:3d:51:
         66:5d:91:7d:50:30:7a:fc:0a:49:57:c1:81:d9:45:22:13:f7:
         31:4d:2e:ba:53:b1:ab:82:59:d4:3e:ae:5b:6f:d8:ef:43:61:
         a7:d5:33:a6:76:f3:cf:84:cf:07:e7:66:27:c3:71:98:c4:3a:
         7c:6a:89:d9:58:29:9c:3f:1a:40:58:bf:4a:3c:2d:bb:1f:d3:
         84:49:19:0b:00:2b:5b:6c:7d:9f:7b:5d:69:11:93:0e:b4:83:
         31:b6:97:db:31:1f:fd:6d:92:5c:44:7e:20:df:5b:43:1c:9b:
         4f:a5:0c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:19 2026 by rpki-client