This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          yah06a2LsorVq0MJJsKFdDylUkwRnaf5ym5VZU/LtZo=
Subject key identifier:   8B:0C:8D:EB:9C:FD:56:02:26:D2:31:06:2E:CE:37:4F:05:A9:2C:DF
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       019C4246B3B36CE6824D28722DB97BEF74E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          05A0
Signing time:             Mon 09 Feb 2026 12:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:55 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: VgwlWyv9dWfp+JeSnJq5cxxXFKE1CcVnaKQEhT+nZrE=)
                          2: oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa (hash: FGb9nSTivNu/mVtaJHoZo1Y7HN3bgy2TP4MFuiqpk7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b3:b3:6c:e6:82:4d:28:72:2d:b9:7b:ef:74:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: Feb  9 12:00:55 2026 GMT
            Not After : Feb 10 12:00:55 2026 GMT
        Subject: CN=8b0c8deb9cfd560226d231062ece374f05a92cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:f2:40:8a:23:52:3e:04:e7:5b:43:7f:29:
                    8b:7d:16:21:7a:31:5e:ad:d2:a1:9e:cc:d9:ff:f4:
                    b4:75:52:04:e9:5d:23:6e:47:93:09:46:82:a4:b8:
                    07:25:54:bc:13:4d:f5:70:ad:66:69:ea:a3:16:88:
                    c1:32:d0:c4:e4:73:55:66:7a:91:87:24:f5:ee:22:
                    21:ac:45:2b:66:db:76:2b:a5:8f:44:e2:a2:7f:77:
                    b5:1e:9b:0e:d4:6b:c1:bb:13:82:a6:f7:9e:0f:1e:
                    6e:bc:95:a8:03:22:94:cc:a1:9e:b1:ee:35:58:19:
                    64:73:28:85:af:ac:af:cc:32:be:d9:98:4e:df:be:
                    25:35:2b:bb:42:3a:d4:f0:ab:89:7d:dc:f8:24:2b:
                    52:7b:eb:3b:c2:f7:36:12:b5:10:ce:d7:6c:ff:af:
                    02:1c:3e:32:04:6b:8f:f5:71:93:00:8a:eb:8a:13:
                    11:01:0e:a7:d0:1e:eb:31:94:c2:df:37:b3:2a:28:
                    4a:8e:61:7a:7e:62:44:54:a5:b5:eb:81:3b:24:90:
                    16:ac:fd:40:7e:8d:13:c9:a8:c9:6e:10:02:5b:21:
                    ea:46:80:a4:67:71:60:08:f5:bd:52:08:5c:db:6b:
                    c3:0f:e6:17:6e:31:16:10:33:2d:b4:07:af:8d:84:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0C:8D:EB:9C:FD:56:02:26:D2:31:06:2E:CE:37:4F:05:A9:2C:DF
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:7e:93:24:ad:87:68:f6:30:c6:71:35:e2:4b:f4:86:a8:
         5c:1f:ab:74:5a:08:ca:04:d8:77:e6:b0:47:5c:a6:61:62:4e:
         6c:17:86:30:7e:a7:84:ba:58:2a:ed:d1:e7:c6:13:48:4d:48:
         1b:8f:f7:73:62:b3:fb:40:73:db:d1:f3:b2:10:70:7d:fe:17:
         7f:5c:68:f1:e8:02:2b:1d:78:c5:eb:a0:a8:10:31:b3:db:7f:
         43:c5:b0:56:48:d9:ad:92:f2:1f:e0:59:e9:dc:da:60:f5:3e:
         b5:b2:86:0b:d2:a7:c3:8f:fd:28:38:fd:44:fb:dc:58:2b:3b:
         67:59:11:9b:96:53:29:36:42:e3:50:97:c6:82:1f:85:e5:6b:
         bb:10:bc:53:05:db:36:79:4b:f8:9d:80:13:77:4d:01:0f:56:
         36:21:af:ca:3e:9f:41:24:f4:db:e4:4c:3a:d6:b0:af:5f:34:
         99:f6:97:21:6d:7c:16:f6:f8:e7:b7:b0:d1:85:39:54:ff:eb:
         0c:0c:a8:ed:8f:36:30:80:4e:28:ef:a8:8e:71:6a:93:13:0e:
         27:50:78:6b:36:37:c7:fe:3f:5f:7e:c9:66:3f:8d:de:a4:df:
         68:59:df:aa:01:af:0b:08:52:b7:6c:ca:e6:4f:d7:68:ce:b2:
         5f:7f:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:20 2026 by rpki-client