This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File:                     M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier:          toYJWppb0SJu4HKcU4zANBVgR3+wYzWx38t/887MgzQ=
Subject key identifier:   74:41:2B:E2:EF:C6:9A:FB:3E:4C:03:D8:ED:91:0C:4A:51:DF:B7:23
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer:       /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial:       019C4358E3B21BA42F0336ED2AE528B15C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 17:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:24 +0000
Files and hashes:         1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: XNwl45vm2l7ZjYl9G7seMjMudgFPpU1SfkfCcOo8sSM=)
                          2: sbdmVuFID9uQRYJtZJ4fWH3G57k.roa (hash: 9b8Tb0KDChimmsKiC/A+gQbmV4xXpq9nJ9Cvm1zmBBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e3:b2:1b:a4:2f:03:36:ed:2a:e5:28:b1:5c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
        Validity
            Not Before: Feb  9 17:00:24 2026 GMT
            Not After : Feb 10 17:00:24 2026 GMT
        Subject: CN=74412be2efc69afb3e4c03d8ed910c4a51dfb723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:87:1e:e5:8c:2d:85:c0:78:db:8f:25:c6:
                    43:30:f8:e8:c8:dc:26:8d:ee:47:6d:27:bb:68:f1:
                    c1:7c:ec:8c:93:c0:56:90:da:c0:87:eb:d6:b2:7f:
                    b2:4e:fd:4a:06:84:8c:e4:61:a5:41:64:13:c7:16:
                    e7:30:fc:8a:1d:84:75:46:f8:32:76:1f:f3:76:a4:
                    6f:fe:6c:83:cb:ca:f0:8b:ec:55:38:6c:4a:c0:15:
                    7e:ad:97:bd:49:73:e4:76:dc:d5:68:e1:9d:6d:e0:
                    41:14:3e:0b:74:80:0d:2b:e9:0c:88:4e:34:01:41:
                    7d:e3:2a:55:dd:f3:00:fd:c5:6d:dc:58:4c:72:5c:
                    3b:ae:66:2f:91:f1:76:5b:03:54:10:89:90:d9:d3:
                    16:26:38:3f:9f:53:ae:b9:75:98:bc:f3:30:b0:e4:
                    2c:19:af:dc:8e:b9:14:c5:c0:35:c8:2d:6a:21:51:
                    3d:53:a5:ae:1c:24:15:b7:31:d9:ab:51:1d:8e:5f:
                    d4:46:5a:5b:71:5a:f3:6f:4d:93:2d:d8:69:1d:b7:
                    35:dd:14:63:7d:e6:d3:67:cc:26:c4:f5:91:9b:e6:
                    b0:82:2c:04:fd:71:03:fd:b6:69:eb:fd:2d:68:4f:
                    10:f5:a4:34:de:7e:b0:c8:ce:02:48:b2:bb:7b:97:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:2B:E2:EF:C6:9A:FB:3E:4C:03:D8:ED:91:0C:4A:51:DF:B7:23
            X509v3 Authority Key Identifier:
                keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:98:33:5d:df:d7:f2:54:36:6f:22:98:df:0a:30:ba:d4:11:
         4e:9e:06:42:3f:5b:a9:0e:91:e6:a6:ed:07:6b:0c:e5:8f:9f:
         6c:c5:bd:60:d2:b2:37:dd:fc:f9:3c:cd:a0:dd:b5:d6:db:f0:
         7c:bd:d5:52:58:6c:0b:3b:62:f5:c1:07:c7:94:3f:50:d4:3f:
         d6:6e:e9:79:cf:c3:c0:1a:c1:46:35:5a:a0:c2:92:bf:43:87:
         a9:6b:7d:b6:d6:e6:94:83:e5:ae:17:6d:65:09:d9:fd:95:be:
         e6:fc:98:64:c8:50:32:5b:4b:29:07:0d:a6:15:4f:41:cc:93:
         80:9d:f2:8a:3c:2a:88:01:99:6d:92:92:09:b0:89:c9:77:87:
         5d:ac:9a:d0:ef:0e:e8:72:ba:b8:fa:1e:d3:e1:28:f9:0f:d9:
         81:5d:cb:8d:67:e2:7c:3c:2d:8d:61:c7:11:2d:ef:53:53:6d:
         94:06:99:78:0a:c3:5c:32:f4:b3:6f:2d:1e:70:05:71:c1:93:
         fa:d2:90:1d:99:81:8f:8c:73:70:8a:9b:c9:ec:bb:93:ab:1b:
         d7:dd:45:dd:bb:0e:63:b2:4d:e5:35:f6:ef:16:9e:c4:c3:b9:
         b6:61:c3:c8:a9:51:01:c3:1c:00:ab:be:eb:a1:33:f1:4c:9a:
         af:4a:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:35 2026 by rpki-client