This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5c4049-98e2-4845-b3ab-f46d918dced5/1/6X8d1UovF91v6gjRp8br1icmaho.mft
File:                     6X8d1UovF91v6gjRp8br1icmaho.mft (raw, json)
Hash identifier:          7CnlCKdcYqf13V4tDrHXiFvhW8vlnm8zHHq1JWLBEcM=
Subject key identifier:   76:33:72:EC:B3:C0:1A:7C:3A:6B:90:53:3E:62:B1:1A:AE:2B:EB:D9
Authority key identifier: E9:7F:1D:D5:4A:2F:17:DD:6F:EA:08:D1:A7:C6:EB:D6:27:26:6A:1A
Certificate issuer:       /CN=e97f1dd54a2f17dd6fea08d1a7c6ebd627266a1a
Certificate serial:       019C42B430EA2E21054033E3A5D6EC440914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X8d1UovF91v6gjRp8br1icmaho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5c4049-98e2-4845-b3ab-f46d918dced5/1/6X8d1UovF91v6gjRp8br1icmaho.mft
Manifest number:          31
Signing time:             Mon 09 Feb 2026 14:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:31 +0000
Files and hashes:         1: 6X8d1UovF91v6gjRp8br1icmaho.crl (hash: ekv4Bwum2ckaVXHKladHwb+eBHrLItaIn3ItVO6mT+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5c4049-98e2-4845-b3ab-f46d918dced5/1/6X8d1UovF91v6gjRp8br1icmaho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5c4049-98e2-4845-b3ab-f46d918dced5/1/6X8d1UovF91v6gjRp8br1icmaho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X8d1UovF91v6gjRp8br1icmaho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:30:ea:2e:21:05:40:33:e3:a5:d6:ec:44:09:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f1dd54a2f17dd6fea08d1a7c6ebd627266a1a
        Validity
            Not Before: Feb  9 14:00:31 2026 GMT
            Not After : Feb 10 14:00:31 2026 GMT
        Subject: CN=763372ecb3c01a7c3a6b90533e62b11aae2bebd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:e1:4c:b3:96:4f:1d:78:6b:e4:5e:65:c4:
                    72:40:79:f8:59:52:36:2a:0a:a1:7b:75:59:16:78:
                    b9:f6:c5:4b:c5:6c:81:e8:e3:47:32:6f:40:b9:08:
                    1f:07:fd:26:84:91:4e:f1:f2:4d:a2:88:30:0d:2b:
                    9d:13:58:42:f1:cc:7c:21:90:85:10:3a:6c:17:f8:
                    c7:50:d6:79:cd:1b:fe:8f:8e:45:08:1b:1c:b4:67:
                    ae:df:39:4d:ad:cf:4f:51:e9:42:3d:15:c3:73:d9:
                    78:54:67:1f:93:07:78:41:c1:c4:2c:e7:6d:3f:9b:
                    fa:ae:e4:d1:91:77:fb:14:dd:da:1d:b0:29:1b:7a:
                    f7:21:2c:76:a2:e3:71:ea:2c:22:37:dd:0f:e5:9f:
                    66:73:4b:44:5a:f9:4e:13:fe:fa:44:d0:4e:73:9a:
                    0f:a0:01:06:46:f6:18:26:b2:c7:1a:01:83:4e:b7:
                    73:34:a8:fb:dc:02:39:25:7e:3a:93:56:06:fa:7a:
                    13:47:b2:1b:30:0a:5c:7c:00:0f:bb:fe:22:16:25:
                    fd:65:11:04:43:5e:68:ff:de:f7:a6:4c:5a:0d:9c:
                    44:f3:e9:eb:80:94:2f:aa:d9:a6:4d:89:f3:50:f6:
                    a3:fc:fb:b4:af:42:a8:5b:11:0b:da:23:7b:47:79:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:72:EC:B3:C0:1A:7C:3A:6B:90:53:3E:62:B1:1A:AE:2B:EB:D9
            X509v3 Authority Key Identifier:
                keyid:E9:7F:1D:D5:4A:2F:17:DD:6F:EA:08:D1:A7:C6:EB:D6:27:26:6A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X8d1UovF91v6gjRp8br1icmaho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5c4049-98e2-4845-b3ab-f46d918dced5/1/6X8d1UovF91v6gjRp8br1icmaho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5c4049-98e2-4845-b3ab-f46d918dced5/1/6X8d1UovF91v6gjRp8br1icmaho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:73:06:6d:db:8f:76:eb:ed:07:39:69:0c:96:a6:3f:6e:45:
         1d:e4:7c:3b:1c:e0:db:05:0b:33:ee:07:e4:eb:5e:0c:53:64:
         0d:58:82:fa:a9:93:f0:b1:26:47:6d:5d:5e:5a:57:f7:79:39:
         25:45:3f:b3:bc:85:5b:9c:b6:8d:d4:4f:21:3a:44:6f:f3:01:
         7b:31:1e:4c:15:6c:87:13:bb:d2:b3:23:e6:f4:f3:69:41:97:
         12:9a:8c:c0:af:d0:ac:bb:65:67:b1:13:3e:a4:cd:06:a2:cb:
         26:65:90:ba:99:14:8b:65:5c:49:4a:5d:e0:63:e9:0d:54:5d:
         68:94:cc:6d:f4:16:4d:9e:6f:97:d1:79:eb:77:0a:cc:61:0d:
         de:62:49:de:a4:0e:6c:ef:43:ca:04:76:b4:5d:00:e3:61:09:
         0f:52:4b:ce:08:9c:4d:69:b6:31:54:19:ce:0a:a9:cb:dc:c0:
         09:e5:72:db:63:21:36:54:f5:4e:a2:ac:19:33:41:3a:91:24:
         4e:af:57:a0:55:46:1b:25:97:17:ce:5b:a6:9d:2f:bf:eb:21:
         10:46:16:37:4b:cb:58:e5:f4:b9:c4:be:9c:aa:cb:e8:4a:cb:
         4d:c4:cf:a3:6b:10:ba:01:e8:5d:36:fc:57:9b:d7:db:9c:5f:
         0f:2d:c2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtDDqLiEFQDPjpdbsRAkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5N2YxZGQ1NGEyZjE3ZGQ2ZmVhMDhkMWE3YzZlYmQ2Mjcy
NjZhMWEwHhcNMjYwMjA5MTQwMDMxWhcNMjYwMjEwMTQwMDMxWjAzMTEwLwYDVQQD
Eyg3NjMzNzJlY2IzYzAxYTdjM2E2YjkwNTMzZTYyYjExYWFlMmJlYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6zhTLOWTx14a+ReZcRyQHn4WVI2
Kgqhe3VZFni59sVLxWyB6ONHMm9AuQgfB/0mhJFO8fJNoogwDSudE1hC8cx8IZCF
EDpsF/jHUNZ5zRv+j45FCBsctGeu3zlNrc9PUelCPRXDc9l4VGcfkwd4QcHELOdt
P5v6ruTRkXf7FN3aHbApG3r3ISx2ouNx6iwiN90P5Z9mc0tEWvlOE/76RNBOc5oP
oAEGRvYYJrLHGgGDTrdzNKj73AI5JX46k1YG+noTR7IbMApcfAAPu/4iFiX9ZREE
Q15o/973pkxaDZxE8+nrgJQvqtmmTYnzUPaj/Pu0r0KoWxEL2iN7R3m7BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYzcuyzwBp8OmuQUz5isRquK+vZMB8GA1UdIwQY
MBaAFOl/HdVKLxfdb+oI0afG69YnJmoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlg4ZDFVb3ZGOTF2NmdqUnA4YnIxaWNtYWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YzQwNDktOThlMi00ODQ1LWIzYWIt
ZjQ2ZDkxOGRjZWQ1LzEvNlg4ZDFVb3ZGOTF2NmdqUnA4YnIxaWNtYWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YzQwNDktOThlMi00ODQ1LWIzYWItZjQ2ZDkxOGRjZWQ1
LzEvNlg4ZDFVb3ZGOTF2NmdqUnA4YnIxaWNtYWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXMGbduP
duvtBzlpDJamP25FHeR8Oxzg2wULM+4H5OteDFNkDViC+qmT8LEmR21dXlpX93k5
JUU/s7yFW5y2jdRPITpEb/MBezEeTBVshxO70rMj5vTzaUGXEpqMwK/QrLtlZ7ET
PqTNBqLLJmWQupkUi2VcSUpd4GPpDVRdaJTMbfQWTZ5vl9F563cKzGEN3mJJ3qQO
bO9DygR2tF0A42EJD1JLzgicTWm2MVQZzgqpy9zACeVy22MhNlT1TqKsGTNBOpEk
Tq9XoFVGGyWXF85bpp0vv+shEEYWN0vLWOX0ucS+nKrL6ErLTcTPo2sQugHoXTb8
V5vX25xfDy3CJQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:20 2026 by rpki-client