This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File:                     a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier:          2c2KhvWpBtCYkdA2+3a7Pp0Sn0z7MNVW2kdUFabJic4=
Subject key identifier:   AE:A5:27:15:95:B9:6A:AF:5A:B9:27:34:01:62:4C:20:1B:EB:AA:3A
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer:       /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial:       019C4246D27A7787D6709EF843DD6C063F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number:          0837
Signing time:             Mon 09 Feb 2026 12:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:03 +0000
Files and hashes:         1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
                          2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: LwlfenvuHngBhHHlxvdaFmBjMlpUaEtYi+4sq8SMh0g=)
                          3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:d2:7a:77:87:d6:70:9e:f8:43:dd:6c:06:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
        Validity
            Not Before: Feb  9 12:01:03 2026 GMT
            Not After : Feb 10 12:01:03 2026 GMT
        Subject: CN=aea5271595b96aaf5ab9273401624c201bebaa3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fe:15:53:7b:72:05:31:9e:9b:4b:ea:27:9b:
                    0c:78:ee:82:72:d8:de:6a:a6:ed:43:2e:a4:3a:5f:
                    55:08:44:cd:e3:fc:6d:fa:42:b7:80:6c:2d:45:ab:
                    71:85:69:cb:fd:b4:cc:03:8b:15:19:0a:67:86:1f:
                    8c:bf:c3:93:d5:13:da:f1:a7:6f:ba:ec:4b:6c:ff:
                    10:45:3f:a3:00:34:95:4d:1d:35:a2:4f:82:69:42:
                    72:c6:97:46:9d:aa:12:ba:3e:62:4e:e8:f5:f2:00:
                    28:2b:72:18:96:63:0b:f1:04:91:8f:be:9a:88:49:
                    f1:c1:ec:a9:40:e3:b1:73:90:be:96:30:c6:d3:a8:
                    6d:f8:df:de:8d:2e:a0:a2:4e:f7:1b:05:a9:55:9f:
                    f6:b8:f3:60:ab:32:e3:25:de:32:ac:39:b0:c2:2e:
                    a1:08:fd:43:a9:5a:93:ba:ee:22:1b:7c:7e:dc:cc:
                    de:8b:be:86:8e:23:a4:57:0c:d3:15:68:5e:a2:a2:
                    11:26:fd:8c:c1:34:56:81:d3:34:ed:23:9c:d3:88:
                    f2:af:09:25:e4:43:e0:b8:c4:aa:f9:b0:c7:d8:4c:
                    d8:92:2f:2b:05:18:c0:c8:99:3c:98:28:7f:eb:bd:
                    8a:7e:4e:0a:cc:3f:4d:a1:99:73:d7:a8:79:62:bc:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A5:27:15:95:B9:6A:AF:5A:B9:27:34:01:62:4C:20:1B:EB:AA:3A
            X509v3 Authority Key Identifier:
                keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:06:37:4a:51:a9:36:38:47:43:70:6e:a5:b6:6d:ed:e3:3b:
         fd:c9:73:e2:c6:da:34:97:4e:f2:fc:39:28:d1:5e:4d:7a:39:
         46:0d:d2:71:18:87:6c:41:d5:9b:79:a2:a2:cf:38:db:79:32:
         11:ea:e5:cd:9d:14:b1:71:93:30:43:d3:92:96:b6:4c:2c:49:
         24:15:a7:b2:c8:6a:a2:50:07:82:fc:2c:c4:ed:20:c7:85:76:
         a9:10:9f:72:e8:85:0d:19:fb:ca:7a:95:8b:f6:54:19:70:32:
         af:fb:17:6b:99:ef:12:84:3a:19:f6:e7:6f:7e:6d:32:05:4f:
         f7:f4:22:62:56:fa:d6:e6:a8:a1:a8:ce:c9:6d:27:25:d8:97:
         04:53:93:bd:3b:b2:f9:df:50:c7:f5:b3:a1:ce:50:0e:e7:46:
         2e:a2:50:43:6d:ba:90:87:53:fd:88:cc:c4:37:ca:36:64:0f:
         e0:ce:7e:f3:dc:3e:21:77:b1:d5:74:ef:1d:6a:bb:48:ca:3b:
         45:59:59:0c:cc:8b:ed:17:8c:ec:26:46:99:b6:3f:d8:e1:65:
         d9:e5:bd:e2:bd:e7:93:7c:d3:05:05:15:5d:7a:61:85:89:af:
         f5:c4:a5:af:40:d0:b0:a4:22:c7:05:9f:e4:05:47:c0:e4:50:
         37:90:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:05 2026 by rpki-client