This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File:                     a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier:          /uBJK0ouEmuiL4JWWOVDbwTLbLcykOJeBEAXeiPa+f0=
Subject key identifier:   E8:9E:2E:21:77:6E:4B:0B:F7:73:76:57:FF:8F:8A:2A:B1:34:54:EB
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer:       /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial:       019C427DC2B430DC0AAFE59AE96F9918E6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number:          05D0
Signing time:             Mon 09 Feb 2026 13:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:03 +0000
Files and hashes:         1: 0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa (hash: qG/3sEaE6hIKkBZX7yiUf0VUZdejvNknPMp0eVon50w=)
                          2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: RK0YXwAy02gD09gBECb/6UeJa7XuqlsM0DKeyZCv0ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:c2:b4:30:dc:0a:af:e5:9a:e9:6f:99:18:e6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
        Validity
            Not Before: Feb  9 13:01:03 2026 GMT
            Not After : Feb 10 13:01:03 2026 GMT
        Subject: CN=e89e2e21776e4b0bf7737657ff8f8a2ab13454eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:b7:93:85:61:ee:3b:f6:df:15:8e:95:e5:
                    e2:14:dd:56:b0:b8:1b:5e:a9:39:5a:ce:6c:cd:87:
                    ca:53:26:4e:26:0f:1f:f5:0d:d4:10:ab:c4:9a:f5:
                    b4:c4:cc:6f:f8:ab:8e:ce:a1:b5:12:7b:ce:90:13:
                    f1:46:dd:32:76:82:64:c7:35:68:26:aa:d3:05:de:
                    8b:ab:16:77:57:f3:b5:28:41:87:0d:85:1e:40:34:
                    b2:5b:cb:b1:3d:e9:a6:39:57:4f:60:82:8c:ba:fa:
                    c7:b1:9c:ba:15:eb:8f:bf:92:0d:ff:c6:c5:79:1f:
                    59:20:ec:47:2e:14:26:d3:57:f3:69:ca:ba:e5:7f:
                    b6:3c:23:16:dd:91:4a:ab:c8:6c:9f:82:0d:0e:3f:
                    26:c6:51:0b:4e:89:9f:4b:57:91:2f:d3:72:f9:87:
                    4f:70:4b:ab:2d:04:53:87:62:8b:90:33:1d:b5:f0:
                    f0:98:8d:85:b3:1f:b2:72:8e:88:97:cd:1e:a8:29:
                    c1:f0:08:19:84:a4:c8:39:ca:20:1c:fc:93:b0:cd:
                    2e:19:8e:c3:21:f0:27:1b:ee:8d:ac:e1:22:5b:44:
                    95:63:aa:78:13:e3:2b:ea:db:e5:5c:fc:03:0d:8d:
                    8c:b8:d7:26:9c:77:55:03:9f:fa:30:56:8c:02:b7:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:2E:21:77:6E:4B:0B:F7:73:76:57:FF:8F:8A:2A:B1:34:54:EB
            X509v3 Authority Key Identifier:
                keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:02:63:2c:16:74:2b:f4:68:6c:ee:55:79:4b:41:06:cd:cc:
         f4:76:16:fd:53:ff:81:eb:1e:b7:58:23:01:a2:69:a0:25:be:
         22:47:ad:79:85:fb:b6:64:d6:40:bc:22:fb:8d:0e:04:3d:da:
         4f:08:a2:71:c7:9d:57:d5:39:2b:d1:b2:5f:ab:50:fc:91:32:
         5f:8f:e8:fe:78:ad:f6:8c:0b:84:9b:61:7b:05:5d:9a:86:08:
         5a:2b:68:35:39:10:a4:7d:d3:84:f1:19:cf:83:71:e9:f7:72:
         09:15:e2:55:4a:bf:0a:cc:ae:14:46:c3:8d:31:c2:13:c1:96:
         9e:a5:81:82:1c:d7:d1:e4:89:b0:74:55:b8:81:71:5e:31:a3:
         df:66:cb:9c:f1:2c:6e:c3:8f:74:63:44:ca:0b:26:2d:9a:d1:
         97:5c:ea:1a:68:ce:88:f8:58:a7:33:55:63:28:12:89:f7:4b:
         98:c1:2f:d9:2a:b4:b3:05:c3:ad:55:ed:52:24:ba:3c:43:54:
         5b:69:75:f7:18:24:9d:39:ba:3f:9d:39:23:b1:4d:e6:38:22:
         57:46:4f:9b:51:76:02:1c:25:68:1d:4d:0f:b9:29:20:ce:18:
         6e:90:8e:21:8f:84:99:05:33:ad:ba:0d:54:65:b7:ad:9f:73:
         c7:1f:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:57 2026 by rpki-client