This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File:                     0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier:          NAqDojSoqlzPAXuk+vfL9fhL4J8UaHXndpk6iOu1ELA=
Subject key identifier:   AA:53:53:2E:A4:67:84:E1:31:8C:0F:4A:4A:9B:94:93:CE:67:AF:56
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer:       /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial:       019C424640A5835CD8A6DA69E415135D29E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 12:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:26 +0000
Files and hashes:         1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: TSyKXCwdZCz9U5LmGo4vSHeUKQl7gL6vzfrYfLT94bM=)
                          2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:40:a5:83:5c:d8:a6:da:69:e4:15:13:5d:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
        Validity
            Not Before: Feb  9 12:00:26 2026 GMT
            Not After : Feb 10 12:00:26 2026 GMT
        Subject: CN=aa53532ea46784e1318c0f4a4a9b9493ce67af56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:20:85:b5:af:0d:49:29:10:7f:8d:6c:13:
                    de:c2:7e:97:54:cc:65:21:18:1a:a6:08:85:f6:38:
                    b5:8a:31:a9:78:f8:2f:56:46:f5:52:af:84:f3:e5:
                    e3:5b:ce:c7:b6:3d:91:f4:69:d5:5e:59:06:70:63:
                    ab:cf:c6:4c:f6:76:62:25:77:f7:0e:d7:01:24:b7:
                    2b:da:f4:d3:30:76:6d:d9:b5:50:60:20:6d:61:45:
                    10:1a:c4:29:33:cc:bb:00:1c:39:40:86:71:dc:4e:
                    2d:4b:71:bb:91:85:01:b5:84:91:7b:5b:88:af:f0:
                    af:f3:d4:e2:95:a4:ac:18:7f:eb:6a:37:cc:1f:4e:
                    12:85:51:4c:fe:3a:1d:09:31:c2:20:e5:c8:25:e7:
                    5a:33:a2:fd:12:ed:a2:02:26:8a:98:0f:13:03:77:
                    ad:41:33:e8:f7:38:b7:b6:a0:ec:b0:5a:db:0c:15:
                    30:07:4b:1c:e2:8b:fe:9d:23:91:ec:02:7c:e2:e3:
                    de:81:cf:62:b5:b3:35:cc:81:19:0f:af:3a:6a:a5:
                    03:89:0e:30:8f:18:b4:63:33:de:97:66:eb:86:06:
                    6f:da:ee:f6:f6:81:62:92:0c:db:ba:0c:d8:8b:bf:
                    c4:63:09:3a:07:4e:f0:b0:c5:5c:36:20:93:16:c5:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:53:53:2E:A4:67:84:E1:31:8C:0F:4A:4A:9B:94:93:CE:67:AF:56
            X509v3 Authority Key Identifier:
                keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:56:8c:42:39:49:a2:f7:d3:0c:b9:fa:50:dd:59:89:07:f7:
         be:ab:b4:f7:bc:14:40:3b:c2:7c:66:22:84:e4:f9:e8:33:37:
         95:61:b4:70:65:f4:91:aa:d5:0d:23:a3:98:e1:25:80:9b:0c:
         98:51:e8:ff:de:a9:ab:2b:57:2a:18:b5:ff:a5:45:12:d6:65:
         3b:d8:0d:c3:2a:fc:d8:f7:27:c2:a8:69:08:05:cb:9f:e4:cc:
         47:e4:15:e5:ae:d9:f5:f8:7d:66:87:db:cd:12:57:16:01:da:
         74:f0:df:a5:b3:85:18:ec:8a:ac:97:7f:16:ff:2a:13:1b:99:
         bb:c1:17:84:93:c4:66:05:67:52:1b:33:6a:36:f0:bf:ae:0c:
         df:5c:07:08:20:08:9c:05:0c:02:eb:13:e3:5d:f5:e8:44:76:
         1e:30:0c:10:49:3a:20:bf:63:71:60:eb:bd:46:0f:dd:02:0f:
         2b:bf:ae:c7:3e:7f:89:1a:49:34:c6:ec:74:33:99:a5:38:f4:
         91:d3:1f:3a:50:76:93:8e:3d:ab:2c:94:4c:10:24:40:60:93:
         af:e8:84:bb:28:97:29:63:18:b4:87:4e:57:2d:2a:74:d7:f8:
         e4:03:04:c9:c3:2d:01:d8:9b:19:eb:cc:49:6c:3d:d6:3f:cb:
         0a:5e:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:24 2026 by rpki-client