This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File:                     dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier:          6fxFwxVH0iv94yxM25eCuX/uNnlyQmALaGDHO/H4k7Y=
Subject key identifier:   6B:C5:C6:0E:C0:39:31:AD:04:D3:D3:6A:31:E9:9E:62:CB:14:0E:2E
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer:       /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial:       019C41D853A7418886036B90033D6148F56F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number:          0370
Signing time:             Mon 09 Feb 2026 10:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:22 +0000
Files and hashes:         1: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: Bj8JXu6GMCDDXVBgJRcpqkxVRCLrkI7XUKVaiaVMT84=)
                          2: sSTPNFsIM_pP58lAmJ2VifEkHkE.roa (hash: U/3F8egAN1yDpn1UU3R15xmn8D/CQ/5823ShE3x+1Nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:53:a7:41:88:86:03:6b:90:03:3d:61:48:f5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
        Validity
            Not Before: Feb  9 10:00:22 2026 GMT
            Not After : Feb 10 10:00:22 2026 GMT
        Subject: CN=6bc5c60ec03931ad04d3d36a31e99e62cb140e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:5f:ef:fc:52:7d:a7:62:bd:b2:35:2a:88:
                    af:d4:eb:6a:28:d5:02:b1:18:0a:28:6b:33:06:47:
                    b2:de:a0:55:e2:42:cb:b8:73:3c:89:29:c7:8f:36:
                    e0:f2:76:43:ac:f7:0e:e6:6a:22:bc:1e:9c:ca:54:
                    20:fb:2c:e4:fe:8e:5b:da:85:8d:41:30:bc:ba:b4:
                    da:05:38:16:77:b3:01:b3:cb:81:86:56:f2:46:8b:
                    9c:8f:33:b7:24:40:fe:f3:57:1b:ba:92:35:bd:33:
                    30:1f:3f:03:99:77:6c:f4:13:a0:72:84:4f:ed:56:
                    64:76:69:ee:6b:33:6b:c2:50:bb:f6:4e:e1:8c:37:
                    28:a7:a7:bf:d6:4c:aa:1b:a5:da:62:42:30:41:71:
                    22:6f:0f:71:f8:b4:65:43:76:32:82:c1:71:42:c7:
                    47:51:fc:00:22:ec:6a:9d:76:e8:89:74:b3:63:02:
                    80:6e:3b:21:e2:4b:b3:ac:0a:38:6d:ac:7d:49:1c:
                    28:61:df:a7:05:f6:50:a2:51:2e:b9:e5:6d:d0:24:
                    38:57:1b:09:0d:66:97:9b:94:b6:85:08:d5:ea:bb:
                    43:34:66:4f:60:7b:91:b8:81:0f:d9:14:55:e5:b6:
                    ce:19:73:dc:84:e0:4f:30:b0:33:d9:b4:d0:42:02:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:C6:0E:C0:39:31:AD:04:D3:D3:6A:31:E9:9E:62:CB:14:0E:2E
            X509v3 Authority Key Identifier:
                keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:4a:62:b3:29:d0:34:af:47:c9:88:0a:8e:0d:24:2b:3e:
         50:f0:3c:b9:07:f6:6e:d1:2e:ae:9f:3e:5e:cb:24:03:2f:19:
         01:21:8b:ce:f4:d9:ac:39:36:b9:ad:08:19:be:16:32:3f:9a:
         7b:65:e2:2e:50:11:5d:24:db:1b:61:93:21:07:be:1f:5a:17:
         09:b7:c1:f2:14:9b:45:a4:d5:14:e9:25:77:84:92:e3:80:d7:
         f7:db:6f:e4:85:eb:53:5b:26:0f:9e:bc:21:5e:35:b5:1b:3e:
         dc:1c:00:d1:f5:bb:ed:12:3b:b1:de:f9:e0:f6:45:46:30:2c:
         74:f3:5d:a9:46:60:c3:e8:ac:89:5f:a9:45:33:d0:ec:94:66:
         ed:82:4e:fa:6c:58:5b:86:66:4c:e1:0a:85:cd:81:f0:69:d5:
         f3:98:32:a9:28:e4:4e:13:f1:83:e4:78:f2:42:f0:20:fa:8b:
         64:ff:79:87:26:0b:43:8e:2b:0d:6d:2d:b6:1d:b7:01:ea:ff:
         4f:21:e2:20:94:c1:4c:c3:b4:a9:32:40:8a:4f:89:07:16:43:
         f2:a4:51:f9:8d:73:72:7d:3a:e8:25:5e:95:13:32:96:97:01:
         11:82:a8:ce:a4:7d:58:ec:23:95:dd:0b:94:5e:c9:bd:12:43:
         2f:e6:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:25 2026 by rpki-client