This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          HaAqOjcU8Q1TmeOLgPlw0z3nOKhZEGq48FyGWGpoEIA=
Subject key identifier:   6D:B9:DC:43:B9:1E:B2:D9:EE:62:83:24:8F:9A:5C:F3:1C:DE:66:E1
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       019C41D86CC79190FE611F46231B503305A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 10:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:28 +0000
Files and hashes:         1: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (hash: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg=)
                          2: n5pV2dNWRA_f9PGG9onX31tv0X4.roa (hash: D07pEt8gK/cdGWqE9Zyt/+iA5IXUOBq9V7PLS+yh6/A=)
                          3: sEzlM5R6zA-ZnYv0970VvpCyW2s.roa (hash: QcSUN0qNT/RW84mhkqVzl01FcB1TS7ALX77ko6AurMc=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: jgKlSER8XxQugrhKkz7BuJ69UCj6wyQmIFkI224yp8U=)
                          5: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (hash: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:6c:c7:91:90:fe:61:1f:46:23:1b:50:33:05:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Feb  9 10:00:28 2026 GMT
            Not After : Feb 10 10:00:28 2026 GMT
        Subject: CN=6db9dc43b91eb2d9ee6283248f9a5cf31cde66e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:3a:fe:ca:30:e2:07:98:5b:f0:62:60:7d:
                    30:3f:69:d4:ef:a7:8d:b8:0c:23:d4:08:d6:45:39:
                    86:08:72:89:d4:dd:e5:09:a7:88:34:c4:6f:a3:b8:
                    09:7f:68:e9:b8:e5:55:ac:80:bb:3e:89:b6:20:ef:
                    66:40:fe:e1:ed:c6:f0:2f:5c:c5:d4:bf:d4:50:fa:
                    09:f1:53:78:9a:50:ee:53:9d:b8:5d:62:5a:2e:e8:
                    74:b2:c0:e9:eb:f1:cb:4b:a9:17:2a:b3:70:ae:af:
                    59:29:62:d6:95:15:c1:1b:d8:99:18:40:88:40:e9:
                    a7:5e:6f:cb:b6:82:c6:7d:92:56:06:fb:56:d7:41:
                    1d:06:fc:a2:a7:45:3a:c0:72:bc:be:ab:8d:33:6c:
                    d7:83:1c:0f:01:8f:57:c5:e3:d1:1a:f4:53:12:36:
                    9e:71:8e:6a:21:e4:0b:78:6b:3e:c3:42:c0:c4:3f:
                    b3:25:e0:a8:67:80:90:29:52:ac:6b:bd:d7:bd:f1:
                    10:69:ac:dc:24:1c:6c:7b:7e:06:d6:6b:d1:e3:46:
                    62:80:31:70:86:88:69:e0:55:63:c3:b6:84:8f:13:
                    bd:05:13:a5:36:f1:f7:00:11:80:ce:bd:c3:99:a8:
                    3b:37:39:40:ba:a7:db:b2:8a:62:59:8d:52:2d:b7:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B9:DC:43:B9:1E:B2:D9:EE:62:83:24:8F:9A:5C:F3:1C:DE:66:E1
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:ef:3a:13:bd:c4:fa:09:2c:7c:39:54:38:46:57:b1:87:
         03:f4:3a:8e:fe:18:16:b6:16:8b:2e:58:db:ff:78:3c:1e:7f:
         3e:e9:45:43:01:12:b5:76:ee:38:8e:08:d4:79:01:a9:d1:8e:
         42:ec:08:7e:86:79:1e:14:3b:39:6a:98:cb:aa:56:ae:51:5a:
         c6:60:d6:5d:e7:b9:d8:f3:66:f0:00:93:bd:69:eb:c0:da:51:
         0c:99:16:4f:c3:10:9c:a5:09:04:6a:35:c1:40:64:7a:df:b2:
         11:b0:b3:f0:bd:09:b7:fd:72:31:c4:28:3c:ed:e8:51:26:0e:
         66:d7:73:3c:97:42:19:52:59:12:e3:69:c7:59:ec:f9:17:b7:
         ad:9e:dd:ac:08:30:75:e2:58:1e:19:7d:7b:5c:3a:4d:f6:16:
         55:30:ac:ed:28:f4:eb:78:34:6e:05:cd:99:2e:17:64:fe:46:
         16:ca:c7:a4:ab:38:f8:73:6e:dc:a0:69:10:4c:c4:35:78:fe:
         b7:cc:44:41:a2:3a:9c:99:fe:7d:ec:2e:33:b7:ad:eb:45:0d:
         63:4d:68:ec:9c:ca:5a:6a:65:94:bb:ff:81:5f:b8:a3:e9:ce:
         32:38:44:86:cd:3d:68:3b:c3:9d:0f:6e:d9:d7:d8:cd:ff:1e:
         db:ad:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:42 2026 by rpki-client