This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File:                     atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier:          JvFiYEzfxRndu6Bkqk5WYIdZaIbnWameOaGI6BP29OI=
Subject key identifier:   62:87:D1:5A:C9:F4:9D:59:E6:6A:B8:A3:D3:18:DE:CC:FF:6C:BB:5D
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer:       /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial:       019C2B8757C31CE2E914B326B3561ED00684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number:          0802
Signing time:             Thu 05 Feb 2026 02:00:15 +0000
Manifest this update:     Thu 05 Feb 2026 02:00:15 +0000
Manifest next update:     Fri 06 Feb 2026 02:00:15 +0000
Files and hashes:         1: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 2wx3qt0tm7rjeN2aCSTPJS5S8nMITl+5Wu1dhmU1L14=)
                          2: yfIVfxN62mXPNIQcBAIr1HDWsQ0.roa (hash: IDg/3WOtqztOAgh+Loowhsk9bIJzHnk5Pz6kWQuqSiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:87:57:c3:1c:e2:e9:14:b3:26:b3:56:1e:d0:06:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
        Validity
            Not Before: Feb  5 02:00:15 2026 GMT
            Not After : Feb  6 02:00:15 2026 GMT
        Subject: CN=6287d15ac9f49d59e66ab8a3d318deccff6cbb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:0f:de:6d:c3:44:aa:21:ce:95:8a:e2:34:
                    8f:9e:f6:a4:9f:fe:a5:58:49:60:b8:dc:f3:00:e0:
                    b3:fc:93:d4:c3:1a:cc:cd:89:5a:bc:42:f7:52:39:
                    a3:43:6e:90:e6:92:ac:64:e8:82:81:1b:87:4b:b1:
                    b8:15:0a:af:7b:ac:0c:c3:78:c7:51:34:72:95:ae:
                    70:4c:1a:8f:fd:1d:e7:23:1f:0b:ee:58:9a:ee:3a:
                    03:54:66:45:ac:fe:3a:9c:3d:35:e3:55:a2:34:ed:
                    42:2f:10:68:75:1b:be:25:05:dd:ff:3a:7f:74:7b:
                    bd:8e:aa:05:2b:2f:ef:d8:14:21:c5:85:08:56:b3:
                    78:30:b3:34:86:2b:ff:96:a7:f5:2b:1a:4c:7d:09:
                    35:9b:ae:a6:d0:18:08:63:77:bb:75:91:39:e0:d4:
                    40:43:39:17:f9:bd:6e:ad:fe:aa:9f:76:a1:64:48:
                    db:1e:41:0b:61:aa:a7:20:b4:23:63:3f:fa:d3:60:
                    4e:e1:d9:f7:08:20:4f:49:da:80:ef:80:ac:8c:d4:
                    41:25:59:e6:59:fb:8a:ef:3f:ce:a0:8b:58:3b:a4:
                    08:34:33:e8:43:4c:94:d3:68:66:40:93:54:d3:a2:
                    0f:0f:f1:c7:22:00:15:c3:05:bf:69:ca:ee:8b:1b:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:87:D1:5A:C9:F4:9D:59:E6:6A:B8:A3:D3:18:DE:CC:FF:6C:BB:5D
            X509v3 Authority Key Identifier:
                keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:33:13:cd:87:ee:b2:0d:f7:71:25:fd:9a:ec:a7:6a:cf:72:
         97:ad:fd:0b:39:dd:74:a7:d5:a1:a9:29:52:6d:e8:98:6d:c8:
         d7:d1:e2:7e:e6:c5:2e:1d:dd:b1:d8:36:df:2b:e8:06:90:14:
         32:ab:29:fa:1c:2c:54:43:8d:37:38:e6:98:3c:07:f5:c9:ed:
         d1:77:e7:e9:eb:f7:57:2e:33:c4:3a:1a:7e:50:0d:15:ae:ac:
         71:94:f3:cb:5e:d7:08:ef:f3:c2:f9:8e:68:76:3c:93:8f:3e:
         e6:a0:56:3a:02:e3:01:89:0f:28:e8:ca:d1:82:07:6d:f7:0a:
         04:e4:37:8e:ab:18:0e:1e:b1:71:8a:d2:84:3b:86:12:dc:20:
         0b:1e:8a:13:2f:94:da:9b:02:4c:28:8e:8e:ef:b5:2c:4c:a9:
         0b:c8:f4:6b:1d:63:c5:51:bb:56:b3:9c:3f:af:3d:01:59:3c:
         ed:05:61:0c:d1:86:50:c9:1b:92:c7:5e:57:b9:25:62:3e:d6:
         bb:af:24:cd:cc:55:53:39:e4:c3:06:4d:ca:57:2e:d1:b2:82:
         3a:32:c1:8c:96:ac:c7:74:2e:29:4f:56:7e:24:37:6f:2c:ba:
         03:66:be:fa:c7:fb:9e:de:1d:7c:82:86:ba:6f:0d:b8:db:50:
         83:3c:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:04:42 2026 by rpki-client