This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File:                     aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier:          lupy7daWURnS3VQ0pcuwZ/WNmRelxVzM3Kav0B1LYfM=
Subject key identifier:   50:1F:DD:EA:CA:74:4E:43:8F:27:6D:C5:FC:A9:AD:4B:37:9B:B9:39
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer:       /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial:       019C40FD7A507B2644F26AD0AF4EA850B2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number:          1644
Signing time:             Mon 09 Feb 2026 06:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:19 +0000
Files and hashes:         1: TzgqeW6rgWZAqUKm2v8BZO8DXGk.roa (hash: M6dwx1AXl/eH7+LUO9NVXM2ZImlSuaZZOmBRbMf7fbE=)
                          2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: 8hQyzioniFdwp0GzB5oYjTW4EPKLwUAkhoZJJq83Vwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:7a:50:7b:26:44:f2:6a:d0:af:4e:a8:50:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
        Validity
            Not Before: Feb  9 06:01:19 2026 GMT
            Not After : Feb 10 06:01:19 2026 GMT
        Subject: CN=501fddeaca744e438f276dc5fca9ad4b379bb939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:51:bc:76:83:4f:98:1a:a7:21:84:3b:37:
                    a9:d5:7c:ac:e7:68:0c:46:8f:4f:53:97:b5:94:e4:
                    7d:9f:7b:3c:26:39:cd:62:3a:7b:a0:73:b2:16:90:
                    8b:12:7a:c5:53:d4:68:88:9e:b5:91:64:4a:7e:3f:
                    e8:10:e2:8c:f1:76:7f:71:75:8c:38:f0:cd:bb:df:
                    88:d7:56:a6:11:3d:17:72:38:a7:6c:3e:6c:fb:11:
                    a9:c2:79:fb:fa:63:83:87:3a:f2:62:7e:f4:93:6c:
                    f4:ae:fe:c9:30:e1:60:62:f3:66:eb:ac:23:f4:46:
                    91:13:9a:ee:ce:6b:bc:f5:9a:dd:10:ff:c8:e7:e2:
                    30:b5:30:aa:b4:77:6c:a7:b6:13:8b:d2:3a:00:e0:
                    9d:ef:99:e1:de:7b:d5:97:d4:50:64:d5:63:3b:fd:
                    68:48:2a:72:ff:14:45:9a:d8:c6:45:b6:55:eb:8f:
                    c4:68:68:ec:83:8d:5e:0b:76:26:26:a0:11:0f:5e:
                    80:4c:dc:c7:e8:b1:37:50:c6:aa:0d:fe:be:0e:6b:
                    79:d8:c7:0a:8b:f9:a5:97:91:16:50:58:b4:d8:3e:
                    65:e9:4b:be:73:24:df:59:cf:27:e0:04:41:79:dd:
                    c3:ac:b7:c2:3e:fb:28:73:16:86:bb:8a:3a:f4:ba:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1F:DD:EA:CA:74:4E:43:8F:27:6D:C5:FC:A9:AD:4B:37:9B:B9:39
            X509v3 Authority Key Identifier:
                keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:ce:25:dd:65:e8:b8:bc:ec:29:02:d8:04:78:bd:87:44:
         d5:e0:05:9e:58:78:0c:dc:27:bd:d5:66:ab:09:38:47:d4:4f:
         ff:52:fa:8d:16:df:50:86:90:a7:7a:d9:aa:33:d0:30:1e:92:
         63:73:e4:64:26:8d:32:f5:62:90:51:8c:96:29:fe:2a:15:3b:
         91:5a:a0:98:39:5b:03:6a:a4:84:28:61:b9:fc:90:49:98:20:
         19:d1:64:ad:da:96:e6:c3:06:bf:8d:19:7a:74:b6:06:65:b8:
         39:e1:a2:50:35:a3:f7:45:11:3e:de:ed:7e:ed:90:66:69:c6:
         f6:ac:40:ee:b7:7d:c3:d0:16:a0:f1:cc:0e:ee:ad:ea:f1:2b:
         96:22:48:a5:ca:0b:2d:22:d5:ff:e2:ad:1d:0a:41:b3:38:88:
         92:89:a1:5a:e9:ce:a8:18:ad:c6:b2:7b:3f:1d:ff:a5:ac:3c:
         17:e8:c2:96:f9:12:d2:d2:36:b8:12:d9:31:c0:76:d5:f7:ad:
         27:84:c1:7c:6f:9b:4f:d1:80:f3:69:a9:78:85:04:8a:96:da:
         54:23:eb:1a:05:fb:b3:58:3c:8e:05:10:73:48:0f:f5:70:71:
         1c:84:1a:49:1f:82:a2:a9:68:bb:06:94:83:65:a7:da:27:2b:
         20:18:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:42 2026 by rpki-client