This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          rIiOtXJB6LGZwi8c9HPxIPAEUW6SQ8D6opoVZA5nZmM=
Subject key identifier:   D1:D8:51:18:B2:BB:15:CE:D1:ED:85:A9:D7:C8:82:AD:44:A3:8F:65
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       019C4358CAA2F1A5AC9D7B431E053D39C0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          0F49
Signing time:             Mon 09 Feb 2026 17:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:18 +0000
Files and hashes:         1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: vYos5QsOeLtr4w5DvqzSQRvS8qVffX/CAHjm1p6uCB0=)
                          2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ca:a2:f1:a5:ac:9d:7b:43:1e:05:3d:39:c0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: Feb  9 17:00:18 2026 GMT
            Not After : Feb 10 17:00:18 2026 GMT
        Subject: CN=d1d85118b2bb15ced1ed85a9d7c882ad44a38f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:75:75:59:c9:1b:ed:8d:b7:d4:2f:31:ff:
                    ab:16:46:f9:d2:23:ab:4f:a2:8c:58:1b:e8:4a:55:
                    c6:da:b4:4e:50:ca:90:96:9d:5d:87:52:1e:94:4c:
                    8b:b4:10:f6:92:a5:a5:eb:78:ef:c8:6e:6b:b7:c3:
                    98:db:97:df:36:52:17:17:1d:05:e6:d0:b8:98:3a:
                    a7:e2:ac:e0:bf:91:bb:19:2a:e8:df:2b:c8:1f:4e:
                    15:1e:9c:1f:df:f0:15:b1:80:c6:f6:af:fc:83:87:
                    9e:bf:ed:ee:85:03:33:72:77:f9:85:a7:a5:32:fd:
                    4d:cb:0b:20:80:30:5c:2c:ab:cd:b0:59:05:10:71:
                    ad:7f:12:d4:97:d7:f0:b8:fd:35:6e:e9:04:a7:f7:
                    e7:43:c0:4e:27:e4:d1:e9:4f:54:8b:ca:7e:a2:ad:
                    e1:7b:69:37:98:dd:48:9d:ff:11:58:41:39:31:83:
                    4a:95:2e:f4:cd:92:68:d8:9e:0a:ab:24:d9:18:a1:
                    45:70:20:fb:b7:8c:c2:fb:98:4c:e7:91:3f:5b:37:
                    5d:f0:9e:05:3f:cc:2f:ba:40:e9:bb:44:59:5d:84:
                    f5:c7:cf:de:45:d5:d9:d6:ce:c0:7a:75:28:0a:c0:
                    7a:17:01:1c:fa:ac:ac:17:79:cb:8c:c9:08:04:93:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:51:18:B2:BB:15:CE:D1:ED:85:A9:D7:C8:82:AD:44:A3:8F:65
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e4:67:11:50:91:10:b4:a3:31:e3:1f:50:e3:d7:65:73:c2:
         5d:16:69:ae:08:2b:c8:52:cf:72:80:d6:24:1b:60:f7:e0:d2:
         99:fb:68:17:00:c8:45:04:93:03:d2:5a:69:29:53:6c:af:ec:
         fb:44:97:ea:b4:fb:9a:83:95:e6:c4:1c:49:4f:50:22:0a:7a:
         85:09:4d:3b:86:cf:0c:d3:f4:94:0a:d5:f5:24:a3:fe:05:24:
         f9:9d:71:d6:c4:05:36:57:87:08:24:6d:ec:06:03:64:8f:ba:
         7a:ca:9e:34:f6:37:d6:3d:d7:6b:49:bc:f3:15:01:32:cf:4d:
         c0:c0:40:9c:77:ba:07:37:9a:a8:04:6c:49:a5:56:4a:98:a0:
         ae:65:56:6d:1b:0e:17:8c:a1:2e:6f:6a:de:c9:20:69:0c:53:
         fb:64:cf:2b:1d:1a:a6:ff:b7:96:61:00:a4:74:a6:52:09:79:
         4c:55:b9:e0:63:2d:6f:db:6d:13:a4:f9:b8:e8:b9:23:ee:33:
         ae:b3:a2:42:ca:75:3e:79:b0:51:40:13:19:17:65:ce:88:c2:
         4c:fb:3b:41:70:6b:75:62:0f:d5:ed:fc:33:28:ed:01:bf:79:
         15:c6:de:18:ba:45:c7:24:9e:8c:72:78:7d:74:40:df:06:3e:
         85:17:9c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWMqi8aWsnXtDHgU9OcCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjYwMjA5MTcwMDE4WhcNMjYwMjEwMTcwMDE4WjAzMTEwLwYDVQQD
EyhkMWQ4NTExOGIyYmIxNWNlZDFlZDg1YTlkN2M4ODJhZDQ0YTM4ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HV1dVnJG+2Nt9QvMf+rFkb50iOr
T6KMWBvoSlXG2rROUMqQlp1dh1IelEyLtBD2kqWl63jvyG5rt8OY25ffNlIXFx0F
5tC4mDqn4qzgv5G7GSro3yvIH04VHpwf3/AVsYDG9q/8g4eev+3uhQMzcnf5hael
Mv1NywsggDBcLKvNsFkFEHGtfxLUl9fwuP01bukEp/fnQ8BOJ+TR6U9Ui8p+oq3h
e2k3mN1Inf8RWEE5MYNKlS70zZJo2J4KqyTZGKFFcCD7t4zC+5hM55E/Wzdd8J4F
P8wvukDpu0RZXYT1x8/eRdXZ1s7AenUoCsB6FwEc+qysF3nLjMkIBJPGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHYURiyuxXO0e2FqdfIgq1Eo49lMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeRnEVCR
ELSjMeMfUOPXZXPCXRZprggryFLPcoDWJBtg9+DSmftoFwDIRQSTA9JaaSlTbK/s
+0SX6rT7moOV5sQcSU9QIgp6hQlNO4bPDNP0lArV9SSj/gUk+Z1x1sQFNleHCCRt
7AYDZI+6esqeNPY31j3Xa0m88xUBMs9NwMBAnHe6BzeaqARsSaVWSpigrmVWbRsO
F4yhLm9q3skgaQxT+2TPKx0apv+3lmEApHSmUgl5TFW54GMtb9ttE6T5uOi5I+4z
rrOiQsp1PnmwUUATGRdlzojCTPs7QXBrdWIP1e38MyjtAb95FcbeGLpFxySejHJ4
fXRA3wY+hRecCg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:57 2026 by rpki-client