This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File:                     cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier:          /l7R2bUllJSkd0B8Q/Ms3QTTj48J0xK+YOjppvp5myI=
Subject key identifier:   37:9A:B3:41:3C:47:A6:6A:B6:EA:6E:91:9A:4E:E6:DD:7F:54:AD:A7
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer:       /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial:       019C42B46B669F7615B3E9E0E6D173A70735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number:          0FAB
Signing time:             Mon 09 Feb 2026 14:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:46 +0000
Files and hashes:         1: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: 47Bre+ywI14V4GzhGvNG0tooMm3fJHe1vmgWTgJghrA=)
                          2: zbGnMHvperUTVfkkQ2o3OIxLJb4.roa (hash: yA4AYsSS3JozPB6SQxRvVSqD1ZvucRznxAMaRPbA/Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:6b:66:9f:76:15:b3:e9:e0:e6:d1:73:a7:07:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
        Validity
            Not Before: Feb  9 14:00:46 2026 GMT
            Not After : Feb 10 14:00:46 2026 GMT
        Subject: CN=379ab3413c47a66ab6ea6e919a4ee6dd7f54ada7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:4d:1e:1d:5f:56:64:93:8d:0a:10:25:8a:
                    5a:6a:a0:b4:3d:c3:b7:33:99:05:42:3b:3d:7c:77:
                    6c:e1:88:e4:31:74:db:4d:e0:2c:69:06:ed:31:4d:
                    25:8b:61:4b:4e:a0:e4:8b:3f:a8:36:9c:96:a9:f5:
                    1a:c7:79:e2:25:f4:15:77:b9:06:f6:be:f0:09:d3:
                    96:42:80:e6:6b:8c:67:0d:66:49:33:cb:3d:a8:a0:
                    97:ed:26:7d:a5:4f:f3:10:14:f9:c7:a5:e2:fe:ce:
                    64:43:18:10:9b:09:df:ee:3e:aa:db:d7:83:09:e6:
                    64:43:c2:53:ad:db:da:0b:df:06:8b:0b:46:c0:88:
                    df:ed:f8:5e:81:40:5a:2c:84:de:1b:19:39:51:47:
                    c6:32:40:69:b9:93:d0:4f:a5:b2:7d:b7:49:e6:61:
                    3e:74:2b:b9:43:cc:49:3a:f6:29:fb:05:ee:dd:51:
                    70:76:46:0b:01:d7:0c:52:63:36:1d:85:ff:6a:4d:
                    78:64:7e:22:7e:81:06:e0:65:dd:24:f0:9f:bd:97:
                    fa:01:3c:81:45:64:2d:71:81:1b:af:4e:02:70:5f:
                    fe:f4:d9:db:8e:7d:77:be:b8:33:21:d8:05:ec:43:
                    f9:ac:78:72:b0:d1:80:35:ed:0a:30:cc:5e:c1:d0:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:B3:41:3C:47:A6:6A:B6:EA:6E:91:9A:4E:E6:DD:7F:54:AD:A7
            X509v3 Authority Key Identifier:
                keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:c5:66:48:2c:29:d8:7b:6c:e2:17:27:08:8c:46:92:e5:
         72:48:b6:b2:95:55:9f:d6:cb:f5:25:6a:07:61:7d:72:79:89:
         a5:62:d4:e3:0b:88:fa:23:7d:5d:e5:e6:b4:4e:2c:13:52:7d:
         7c:dc:60:fd:84:f0:fd:f0:82:73:ab:f1:2c:29:0e:ce:52:86:
         bd:9f:ed:fb:04:ff:e4:59:0d:74:5f:59:d7:fe:03:19:a2:b8:
         65:29:c0:55:3d:83:a9:1b:df:aa:f9:2f:32:8d:3d:9b:49:3c:
         8b:5e:44:4a:8b:f8:8b:ac:81:ce:97:d1:53:0e:a2:f0:fb:12:
         79:21:1d:10:27:a1:8f:8a:dc:52:ec:3a:05:cf:10:32:a0:3a:
         90:22:d3:33:d5:be:e6:8e:25:f5:19:a9:4c:8f:3a:c4:a9:6d:
         e6:5a:2f:1b:e2:a2:7c:cf:89:3a:63:a1:63:ea:32:01:10:ef:
         30:c5:0e:11:e2:b6:68:d4:0d:04:17:46:c9:fa:2f:d8:b5:97:
         6d:7d:c7:23:6d:39:36:30:d5:9d:29:b8:3e:2e:7b:e8:43:d3:
         11:ef:81:56:8a:86:94:b2:71:3d:5e:3a:2b:4e:d4:6a:b6:ae:
         74:f8:39:7b:96:0e:ac:23:37:42:a2:d5:1f:2b:20:f4:0f:49:
         20:8e:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:09 2026 by rpki-client