This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File:                     aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier:          GAEbDwUymLRwT8bUeJk3XiG83TalufeDA0UsA2ZYbtU=
Subject key identifier:   C6:57:58:8E:B7:32:C7:C1:87:B3:C0:A8:19:CE:61:75:89:8C:A8:7D
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer:       /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial:       019C44A255737E218C8F878704D6597749D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 23:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:14 +0000
Files and hashes:         1: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: IUIMkpXp0R2JIOkBls9NODbrZb2aa/YyfWEGRt/RdUs=)
                          2: lomzg8TRXkBkQAJV3SYj7kC0l0k.roa (hash: gnOZFo1e3nzIFcl3On+9oUhEAr2nhDp2g8Ki0TCHhqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:55:73:7e:21:8c:8f:87:87:04:d6:59:77:49:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
        Validity
            Not Before: Feb  9 23:00:14 2026 GMT
            Not After : Feb 10 23:00:14 2026 GMT
        Subject: CN=c657588eb732c7c187b3c0a819ce6175898ca87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:da:40:54:9a:2c:04:14:98:fc:21:f0:85:
                    77:53:5d:6c:1a:89:5d:80:f4:46:df:81:fa:04:2a:
                    5d:1e:78:e0:dc:9d:c3:30:df:f7:a4:31:d1:54:04:
                    8e:79:af:96:92:bc:15:47:cc:3b:6b:c7:82:89:6e:
                    f3:52:62:02:1c:ae:51:93:d6:fc:4f:e5:ec:f4:d8:
                    58:1d:3d:3a:ba:c5:d0:08:b1:f2:29:9e:a8:4d:ff:
                    d0:bb:50:97:30:aa:97:ba:cd:1d:d4:cb:de:da:b8:
                    ec:b3:29:d7:97:b0:95:29:e4:ac:54:d4:d7:50:da:
                    2a:d7:a8:28:73:63:f8:04:6a:0a:f4:39:fa:22:cf:
                    85:b2:51:99:f0:dd:15:40:7c:80:94:ac:3a:cf:c1:
                    a5:28:9d:ea:16:23:bc:e9:ef:26:a1:3d:0a:52:cf:
                    b2:88:c1:c6:98:e8:38:3e:49:d2:a8:28:d9:85:b7:
                    63:39:ac:96:78:c0:4d:4b:c6:bf:f7:ee:e5:e6:16:
                    89:0e:4c:c3:18:b3:8d:5d:f3:f7:27:c4:eb:e6:f6:
                    8d:27:25:a1:31:93:02:e1:07:32:7b:bf:0c:68:98:
                    5a:b8:53:10:83:7f:f1:d7:81:2a:a2:7b:40:88:b2:
                    23:ca:9c:b1:43:d7:2b:f2:73:aa:ca:19:ba:83:13:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:58:8E:B7:32:C7:C1:87:B3:C0:A8:19:CE:61:75:89:8C:A8:7D
            X509v3 Authority Key Identifier:
                keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:d3:df:dd:51:dc:b9:a3:13:7e:c2:06:a8:e7:19:ff:e4:62:
         27:5a:4a:50:e9:8d:92:48:23:a0:1d:20:02:5f:8a:7e:c6:03:
         84:ea:2e:f8:d7:06:65:e3:1b:38:4a:c8:af:ea:00:9a:78:8c:
         97:47:4b:bb:3d:a0:d7:9e:ad:ba:8b:1c:26:1a:9a:9e:12:87:
         aa:fb:3d:ad:b5:b6:2b:fa:af:8c:2b:c0:c3:11:94:cc:e7:35:
         de:2f:3c:9d:b7:90:1a:e6:e7:5a:07:11:05:d8:fe:62:52:04:
         bf:c6:9e:62:33:54:f8:b3:b9:75:95:aa:85:44:fe:ab:0c:27:
         69:86:b2:0e:a8:91:55:d1:5d:e4:e9:5e:47:1c:8c:fb:0f:86:
         42:a9:52:34:cf:af:1b:6e:2c:7d:73:32:76:f0:75:0f:63:61:
         21:0b:51:b8:a8:95:ba:1a:c5:41:97:f6:f8:24:d3:52:75:29:
         fa:9e:d7:f0:b4:e4:68:35:4a:7d:ef:2e:4a:b1:b0:eb:4b:b7:
         1c:b7:dd:3d:fc:53:94:66:58:d8:fc:c5:8f:5a:9d:55:e5:60:
         6e:06:0b:c0:93:60:0f:76:af:60:73:c1:92:01:f0:27:9d:4a:
         36:df:f4:33:9f:19:ab:a6:91:85:43:db:72:59:1f:a7:5f:36:
         78:e2:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:00 2026 by rpki-client