This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File:                     6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier:          xptGMTToTWowAHyEVYNjY5TDM9YF/hRtbg3ZWwGHkJQ=
Subject key identifier:   9A:9B:99:A2:21:34:52:A7:80:B8:4F:93:03:E3:91:F5:E4:9E:82:1E
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer:       /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial:       019C1C1481309D4E79207EFFC486C196D68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number:          05C1
Signing time:             Mon 02 Feb 2026 02:00:31 +0000
Manifest this update:     Mon 02 Feb 2026 02:00:31 +0000
Manifest next update:     Tue 03 Feb 2026 02:00:31 +0000
Files and hashes:         1: 1GJaJ403qul9t0nQgnGsoLcGUtc.roa (hash: bPKln41VhHa/R1nW7OwKkjFaR1ucxre3o10KEPwCiCk=)
                          2: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: 7QDDiP2wNBOc1eByt3X1bx8s/Dw0MhB7K02A2t1GIU4=)
                          3: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (hash: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY=)
                          4: X-_TS1I4t-DVqUxoc-khUSm_viU.roa (hash: ODLd3VbptYoQMKlYYBjJpRqUDy9+T6ytXSUAIjxuWLg=)
                          5: rIDOAUoKFwKwGINXnPmMsHQWi5c.roa (hash: NW5RLPV2D9akEYqeNDha9BvwB/AzK2kgHaHsg+BPsU4=)
                          6: w-rLhAaypTD_I6iuoN-KKwvuNlQ.asa (hash: eCYitRW1G6Cc33aOwx0OJAoFM1Y66Cb/kIX4rvRpfG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:14:81:30:9d:4e:79:20:7e:ff:c4:86:c1:96:d6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
        Validity
            Not Before: Feb  2 02:00:31 2026 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=9a9b99a2213452a780b84f9303e391f5e49e821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:9d:56:26:f3:b4:01:c0:df:69:99:50:b8:
                    6b:df:40:ea:7e:25:0e:48:95:1d:1d:98:ce:df:bb:
                    08:26:95:47:06:8c:4f:09:fe:05:6e:2d:d5:6e:85:
                    96:c8:71:e1:2d:34:22:a2:d7:c0:a8:f6:cb:6b:fa:
                    47:1a:10:57:6a:43:cc:07:a9:cb:dd:d1:3c:8c:48:
                    59:b5:6d:39:d9:72:a3:a2:05:33:2e:a3:6f:37:b1:
                    13:81:ce:9c:21:be:39:57:8a:ab:31:66:03:91:be:
                    05:2c:4b:0c:61:8f:71:7d:33:72:0d:57:b4:48:af:
                    1c:cb:12:16:c7:46:b3:3e:b9:7c:f1:21:53:d0:93:
                    39:69:89:3c:e6:ed:7b:ca:29:2b:75:0e:d6:54:cb:
                    bf:b2:ae:1d:48:0c:b2:96:ee:71:54:91:a9:54:f9:
                    a9:ab:4c:f3:ec:32:aa:f3:12:4d:00:72:01:8f:8f:
                    72:47:7e:bc:dc:44:6b:ce:90:24:8f:33:a5:63:26:
                    61:c7:7b:5f:72:8b:98:7f:77:80:49:ba:3b:34:77:
                    e0:d6:b1:50:9f:e6:33:a2:d9:0c:13:4b:69:97:51:
                    b0:18:38:75:77:26:67:24:ac:19:7b:57:fa:46:a6:
                    a8:ca:94:57:01:73:a6:da:af:af:94:6a:72:0d:d2:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:99:A2:21:34:52:A7:80:B8:4F:93:03:E3:91:F5:E4:9E:82:1E
            X509v3 Authority Key Identifier:
                keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:69:11:ca:cb:cf:1c:f5:42:15:4d:43:92:5b:b5:87:4c:
         5e:91:8d:ae:28:2b:ad:6f:26:4e:ac:ea:5c:cf:76:9d:06:64:
         01:54:dc:6c:92:ee:96:c1:ba:d8:41:1e:b0:61:5a:31:1a:19:
         88:4b:7e:92:25:e0:5c:05:02:18:e7:de:72:a2:ad:7f:78:aa:
         94:1c:99:ad:e4:fa:17:2c:f4:eb:80:2d:ee:27:41:e4:31:fe:
         80:ed:86:97:a3:9c:f0:45:cc:54:2b:ab:96:77:cd:d8:c1:01:
         e5:56:5f:7f:d7:d4:a7:28:22:33:a4:5e:a3:a3:bb:b7:75:5b:
         9d:89:c7:55:17:66:54:20:ef:cf:c4:eb:20:f3:6c:2e:0e:a7:
         19:ee:6d:99:eb:ec:20:77:11:ff:eb:4a:fc:a5:a8:8b:2f:64:
         bf:0e:07:4b:e1:79:58:08:b2:9c:57:77:fd:51:e7:b8:0a:69:
         97:00:f9:0a:11:cc:f7:70:dd:10:38:1a:f4:1b:57:a8:e7:a8:
         d7:f7:e5:c4:45:25:92:f4:31:07:b2:f8:cc:30:2c:56:93:9e:
         d5:b9:5c:c3:86:6e:b6:8c:35:58:d0:1f:ff:8f:c3:5d:e6:c2:
         22:33:68:a4:85:52:32:52:3e:08:87:49:db:21:54:2d:55:d7:
         81:ec:ac:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcFIEwnU55IH7/xIbBltaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj
MjVhNjYwHhcNMjYwMjAyMDIwMDMxWhcNMjYwMjAzMDIwMDMxWjAzMTEwLwYDVQQD
Eyg5YTliOTlhMjIxMzQ1MmE3ODBiODRmOTMwM2UzOTFmNWU0OWU4MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJqdVibztAHA32mZULhr30DqfiUO
SJUdHZjO37sIJpVHBoxPCf4Fbi3VboWWyHHhLTQiotfAqPbLa/pHGhBXakPMB6nL
3dE8jEhZtW052XKjogUzLqNvN7ETgc6cIb45V4qrMWYDkb4FLEsMYY9xfTNyDVe0
SK8cyxIWx0azPrl88SFT0JM5aYk85u17yikrdQ7WVMu/sq4dSAyylu5xVJGpVPmp
q0zz7DKq8xJNAHIBj49yR3683ERrzpAkjzOlYyZhx3tfcouYf3eASbo7NHfg1rFQ
n+YzotkME0tpl1GwGDh1dyZnJKwZe1f6RqaoypRXAXOm2q+vlGpyDdJcQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqbmaIhNFKngLhPkwPjkfXknoIeMB8GA1UdIwQY
MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt
NTBkZDNhNTgxNTRiLzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi
LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih9pEcrL
zxz1QhVNQ5JbtYdMXpGNrigrrW8mTqzqXM92nQZkAVTcbJLulsG62EEesGFaMRoZ
iEt+kiXgXAUCGOfecqKtf3iqlByZreT6Fyz064At7idB5DH+gO2Gl6Oc8EXMVCur
lnfN2MEB5VZff9fUpygiM6Reo6O7t3VbnYnHVRdmVCDvz8TrIPNsLg6nGe5tmevs
IHcR/+tK/KWoiy9kvw4HS+F5WAiynFd3/VHnuApplwD5ChHM93DdEDga9BtXqOeo
1/flxEUlkvQxB7L4zDAsVpOe1blcw4Zutow1WNAf/4/DXebCIjNopIVSMlI+CIdJ
2yFULVXXgeystw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:00 2026 by rpki-client