This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
File:                     6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json)
Hash identifier:          l5jwSG/f2vaX32V1QiQFrt8DDg85gJMjoiTSjqrFK90=
Subject key identifier:   BF:E8:1C:19:27:B9:A8:62:FF:63:7E:03:FF:E3:FF:D2:D3:3A:A9:16
Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
Certificate issuer:       /CN=e8a247598cc32160328417a1b10db67fdf59f10f
Certificate serial:       019C42B4239EC93B65C2BA84B95F6D25C7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
Manifest number:          EC
Signing time:             Mon 09 Feb 2026 14:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:27 +0000
Files and hashes:         1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: 3whd5cSxYQ4hq8wGxzKyPXNoEltmWbxWLnUo51qEQKQ=)
                          2: yGHbr2ivA9pRP9yvd8p4VSdt5fE.roa (hash: HjBy12YC1Gx1u2mMvJAV9cdmHNtVXZmrkIO3OMSXlIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:23:9e:c9:3b:65:c2:ba:84:b9:5f:6d:25:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f
        Validity
            Not Before: Feb  9 14:00:27 2026 GMT
            Not After : Feb 10 14:00:27 2026 GMT
        Subject: CN=bfe81c1927b9a862ff637e03ffe3ffd2d33aa916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:45:f3:d8:9f:78:e1:8d:68:7f:74:25:d7:
                    2f:a2:5e:f9:e7:84:00:63:5e:0d:0f:be:7f:12:c0:
                    ad:19:0d:6e:50:8c:56:24:05:59:ca:b0:8e:55:56:
                    e7:e0:5b:d7:a5:f2:0e:da:68:55:d7:58:e1:ec:27:
                    e4:94:33:0d:78:53:fa:57:c5:70:81:e5:ad:53:1b:
                    1b:d5:e0:ec:de:fe:3f:fa:1d:16:c8:46:3a:54:63:
                    85:56:ca:2c:6f:d1:5f:ca:be:9d:a7:f7:ec:17:71:
                    e4:3a:3f:ed:b4:28:a6:df:53:2b:24:07:0c:23:02:
                    50:40:9c:5e:6e:ad:2f:3d:03:05:07:88:a3:5f:3e:
                    97:38:fc:86:e1:ca:05:77:be:f3:78:c3:eb:58:94:
                    8d:ba:d4:27:f8:0d:e0:fd:76:a0:18:10:14:9a:14:
                    6c:35:cd:3b:f7:ee:0e:d4:f0:2d:be:4d:82:c5:68:
                    c4:8d:75:a2:db:d6:b8:33:ef:40:3d:9e:07:ba:7f:
                    fa:b8:34:04:0d:95:08:e8:79:68:d8:71:8a:9b:3c:
                    6f:7b:98:53:5a:f0:28:35:0f:34:10:79:c3:70:33:
                    90:65:1f:a3:9d:1a:61:66:7d:48:88:05:5a:8e:66:
                    86:67:4e:a2:0e:ba:7b:6a:62:ef:5b:34:ad:2d:98:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E8:1C:19:27:B9:A8:62:FF:63:7E:03:FF:E3:FF:D2:D3:3A:A9:16
            X509v3 Authority Key Identifier:
                keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:de:d3:67:e5:85:b4:36:3d:4d:6e:52:30:3a:b9:91:8e:
         3f:f1:6b:f8:cd:cb:83:6e:78:88:71:8a:e9:b7:68:b3:e9:1f:
         3c:ac:38:b6:0d:37:49:49:50:3a:73:e6:34:65:37:21:c5:30:
         3d:d0:e0:0b:b3:dd:c8:31:1e:77:c8:ae:b4:fa:08:b0:fa:64:
         8d:61:c3:80:c9:01:f1:05:9a:a3:d4:78:c0:b4:78:a2:8b:24:
         38:8b:fa:d9:d9:4e:fd:0e:dc:da:cf:07:a2:ff:93:4b:96:df:
         31:be:c9:e6:65:10:4f:d3:40:72:51:c2:ac:c9:6f:ec:4b:b3:
         3f:16:47:e5:b2:60:23:03:93:22:41:03:eb:5c:3d:bc:a2:8c:
         20:52:0d:4d:d8:88:3c:5f:4c:f0:84:97:00:cc:72:38:e8:84:
         e8:48:9c:2f:b4:d3:8f:67:11:9b:e5:58:98:a7:80:cb:fc:ad:
         45:ba:5e:53:ec:38:59:d1:dd:de:05:80:b4:2b:51:41:1d:1e:
         81:10:de:c6:b6:1b:d1:9c:31:ea:19:e8:83:b9:c6:e1:fe:73:
         ec:f6:61:f0:32:78:6f:26:ce:af:29:7c:a0:62:3d:a8:89:95:
         43:6f:00:a1:5e:76:ff:0a:9f:2d:e6:12:35:a5:59:23:5f:7e:
         43:c7:d8:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtCOeyTtlwrqEuV9tJce7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTI0NzU5OGNjMzIxNjAzMjg0MTdhMWIxMGRiNjdmZGY1
OWYxMGYwHhcNMjYwMjA5MTQwMDI3WhcNMjYwMjEwMTQwMDI3WjAzMTEwLwYDVQQD
EyhiZmU4MWMxOTI3YjlhODYyZmY2MzdlMDNmZmUzZmZkMmQzM2FhOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK9F89ifeOGNaH90Jdcvol7554QA
Y14ND75/EsCtGQ1uUIxWJAVZyrCOVVbn4FvXpfIO2mhV11jh7CfklDMNeFP6V8Vw
geWtUxsb1eDs3v4/+h0WyEY6VGOFVsosb9Ffyr6dp/fsF3HkOj/ttCim31MrJAcM
IwJQQJxebq0vPQMFB4ijXz6XOPyG4coFd77zeMPrWJSNutQn+A3g/XagGBAUmhRs
Nc079+4O1PAtvk2CxWjEjXWi29a4M+9APZ4Hun/6uDQEDZUI6Hlo2HGKmzxve5hT
WvAoNQ80EHnDcDOQZR+jnRphZn1IiAVajmaGZ06iDrp7amLvWzStLZiNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/oHBknuahi/2N+A//j/9LTOqkWMB8GA1UdIwQY
MBaAFOiiR1mMwyFgMoQXobENtn/fWfEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt
ODE5NjgwZGI0MzU4LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4
LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmure02fl
hbQ2PU1uUjA6uZGOP/Fr+M3Lg254iHGK6bdos+kfPKw4tg03SUlQOnPmNGU3IcUw
PdDgC7PdyDEed8iutPoIsPpkjWHDgMkB8QWao9R4wLR4ooskOIv62dlO/Q7c2s8H
ov+TS5bfMb7J5mUQT9NAclHCrMlv7EuzPxZH5bJgIwOTIkED61w9vKKMIFINTdiI
PF9M8ISXAMxyOOiE6EicL7TTj2cRm+VYmKeAy/ytRbpeU+w4WdHd3gWAtCtRQR0e
gRDexrYb0Zwx6hnog7nG4f5z7PZh8DJ4bybOryl8oGI9qImVQ28AoV52/wqfLeYS
NaVZI19+Q8fY3A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:13 2026 by rpki-client