This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File:                     C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier:          BsljWesPgZX9ra0f+xHfxQuZaps5I5MET/MrC7mZY/k=
Subject key identifier:   C9:E6:F4:E9:61:EB:DD:97:F6:91:6D:B5:6F:9D:64:2F:6E:F1:8D:17
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer:       /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial:       019C435954A7DF1BEB2DDCC2797270D4B5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number:          23
Signing time:             Mon 09 Feb 2026 17:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:53 +0000
Files and hashes:         1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: ureHJHbDNnUQBwQaRz0nsJcuwG9VNLvT64qwlGWZe2Y=)
                          2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:54:a7:df:1b:eb:2d:dc:c2:79:72:70:d4:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
        Validity
            Not Before: Feb  9 17:00:53 2026 GMT
            Not After : Feb 10 17:00:53 2026 GMT
        Subject: CN=c9e6f4e961ebdd97f6916db56f9d642f6ef18d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:dc:58:b9:36:c6:88:42:70:89:b5:58:f1:
                    29:d4:75:71:a5:5b:f2:a4:08:9c:0a:cd:d3:12:f3:
                    62:f9:19:00:cc:59:2d:e7:b8:43:7d:b3:57:05:7b:
                    1d:10:bb:b6:fb:3c:82:96:25:bd:87:f9:80:8e:a4:
                    5d:a9:1d:cc:8d:c0:a3:ed:30:73:ea:c7:b5:b6:44:
                    f1:56:5c:6b:df:24:dc:a3:8c:64:ba:7c:c1:78:90:
                    80:7e:ce:c6:fa:2f:6b:74:ef:8c:84:c4:88:51:ac:
                    88:0f:52:e8:0d:85:b1:d8:04:b8:95:51:d8:32:6f:
                    ad:66:9e:f7:4e:ea:e5:23:a4:81:33:89:25:b9:af:
                    13:37:9a:13:f4:d0:7a:1b:cd:98:f9:92:b2:33:9a:
                    8e:66:1b:78:a9:1a:f7:e4:d9:cc:e3:51:1e:e4:a9:
                    d3:ee:f3:7d:66:59:76:2e:d8:84:98:9f:8d:2e:eb:
                    95:c2:a5:ae:7b:99:43:59:22:97:ee:ea:32:26:d3:
                    0b:43:ee:14:a7:8a:2b:80:f9:3d:ea:1b:cd:8b:2a:
                    51:f9:75:35:f9:fe:bc:00:5a:8e:61:2a:90:7a:a6:
                    c5:cc:ec:a0:2f:08:5f:9d:91:af:62:07:93:dc:00:
                    8e:16:76:5c:89:3e:14:1e:bb:b5:ec:fa:a4:e8:c8:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:F4:E9:61:EB:DD:97:F6:91:6D:B5:6F:9D:64:2F:6E:F1:8D:17
            X509v3 Authority Key Identifier:
                keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:38:8b:c3:a5:88:ea:39:7a:de:81:cf:e6:e2:77:a7:34:
         37:18:6a:48:d1:2f:be:39:f3:47:77:d0:ea:04:75:29:37:cf:
         f7:93:0a:62:b4:40:33:e5:79:8b:b6:4f:22:bb:aa:74:99:a1:
         d4:5d:b2:8d:8c:7f:13:c9:b7:bc:71:21:11:6f:58:07:39:9f:
         20:bd:42:c6:07:f5:d8:be:b9:a8:ca:ec:7e:0e:8a:aa:4a:14:
         64:45:1d:f0:27:8b:21:e4:d8:20:61:30:6d:96:e2:88:6c:3e:
         6a:9b:c3:e5:3f:bc:e6:26:49:92:3b:a7:b5:57:6c:86:dc:f7:
         3d:9d:4f:00:81:c1:43:28:bd:38:be:77:76:1b:fe:65:ef:b4:
         9c:51:6b:40:51:cd:d2:a8:82:43:8d:77:1e:fb:df:92:02:bf:
         38:8f:f1:64:a5:dc:33:84:87:d6:2c:e1:b5:22:e5:49:72:4b:
         d0:98:bb:0a:41:62:c3:a2:52:7c:3f:53:77:c9:a2:cc:5b:46:
         bd:27:c7:1e:d6:1e:58:96:ab:81:21:db:36:8d:30:ae:e7:34:
         c7:d9:60:8d:eb:4a:2f:31:12:5c:7c:fc:6a:3c:e6:e4:42:7e:
         41:6a:16:a1:79:b7:ab:b8:b4:8e:ba:e4:99:69:64:ba:a0:e7:
         a7:97:7f:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWVSn3xvrLdzCeXJw1LWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTVlZmFhNmMyYmJjYTE5ZmVhMWZmYjY5YjJkOTY5MDcz
Yjk1Y2YwHhcNMjYwMjA5MTcwMDUzWhcNMjYwMjEwMTcwMDUzWjAzMTEwLwYDVQQD
EyhjOWU2ZjRlOTYxZWJkZDk3ZjY5MTZkYjU2ZjlkNjQyZjZlZjE4ZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpbcWLk2xohCcIm1WPEp1HVxpVvy
pAicCs3TEvNi+RkAzFkt57hDfbNXBXsdELu2+zyCliW9h/mAjqRdqR3MjcCj7TBz
6se1tkTxVlxr3yTco4xkunzBeJCAfs7G+i9rdO+MhMSIUayID1LoDYWx2AS4lVHY
Mm+tZp73TurlI6SBM4klua8TN5oT9NB6G82Y+ZKyM5qOZht4qRr35NnM41Ee5KnT
7vN9Zll2LtiEmJ+NLuuVwqWue5lDWSKX7uoyJtMLQ+4Up4orgPk96hvNiypR+XU1
+f68AFqOYSqQeqbFzOygLwhfnZGvYgeT3ACOFnZciT4UHru17Pqk6Mg5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnm9Olh692X9pFttW+dZC9u8Y0XMB8GA1UdIwQY
MBaAFAul76psK7yhn+of+2my2WkHO5XPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NmQ3MTgtMjUwOS00ODFhLTlmMmMt
YzNjOGJiY2IzMGU4LzEvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NmQ3MTgtMjUwOS00ODFhLTlmMmMtYzNjOGJiY2IzMGU4
LzEvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKac4i8Ol
iOo5et6Bz+bid6c0NxhqSNEvvjnzR3fQ6gR1KTfP95MKYrRAM+V5i7ZPIruqdJmh
1F2yjYx/E8m3vHEhEW9YBzmfIL1Cxgf12L65qMrsfg6KqkoUZEUd8CeLIeTYIGEw
bZbiiGw+apvD5T+85iZJkjuntVdshtz3PZ1PAIHBQyi9OL53dhv+Ze+0nFFrQFHN
0qiCQ413HvvfkgK/OI/xZKXcM4SH1izhtSLlSXJL0Ji7CkFiw6JSfD9Td8mizFtG
vSfHHtYeWJargSHbNo0wruc0x9lgjetKLzESXHz8ajzm5EJ+QWoWoXm3q7i0jrrk
mWlkuqDnp5d/6w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:34 2026 by rpki-client