This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          86mZ8Y3bsw7ueYPdHI1b8+EwhxteoFicL8vKhZ0gYFo=
Subject key identifier:   D0:9E:A2:67:A6:1A:6C:75:11:BA:B8:B9:93:BF:22:76:62:3F:D7:4F
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       019C43594257C0CF6D572E0220E4CE4FEE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          0691
Signing time:             Mon 09 Feb 2026 17:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:49 +0000
Files and hashes:         1: 1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa (hash: HK0T1idnRlHMenIEf+1HtX704o9MA+zk5Uce2Rn+7+s=)
                          2: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: eB+jUDVf9eXeRbPh3I5Gd5acoFV7KpKOgsSu+eNNpsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:42:57:c0:cf:6d:57:2e:02:20:e4:ce:4f:ee:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Feb  9 17:00:49 2026 GMT
            Not After : Feb 10 17:00:49 2026 GMT
        Subject: CN=d09ea267a61a6c7511bab8b993bf2276623fd74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:65:86:75:26:60:80:9d:51:a9:d7:e0:1b:
                    1a:58:ca:c6:3c:54:78:2f:94:c9:04:51:30:b5:ca:
                    55:f6:1f:9d:26:44:64:09:cb:a0:13:aa:7d:19:a0:
                    5b:e7:ca:f9:d9:0a:f5:12:18:46:20:c6:c4:a8:5d:
                    95:1e:65:a3:c6:9f:e2:56:12:cf:8e:6f:f7:63:be:
                    1d:cb:bb:5e:b0:69:3b:e1:56:92:52:34:ac:03:fb:
                    62:0e:09:bc:7d:0e:27:bc:39:00:c4:aa:41:80:33:
                    7a:1f:09:00:01:d8:70:61:bd:26:72:67:ae:38:90:
                    58:f4:54:9e:31:58:71:a8:e5:cb:ba:68:06:fc:be:
                    14:3a:32:ae:36:dc:af:99:8f:23:0a:e2:24:e2:87:
                    1a:c3:89:22:02:cf:f4:ac:5e:58:fe:2f:9b:2d:a0:
                    84:e9:80:71:53:66:7a:c4:09:5d:2d:b2:14:80:d0:
                    62:1c:e2:e7:3f:f4:ad:bf:10:b1:1c:9f:5d:bc:f7:
                    50:94:af:98:b3:3e:a6:2b:fa:e0:f5:6d:58:70:e4:
                    45:20:35:d5:f4:46:2d:7a:02:21:1f:3d:0a:39:bf:
                    86:3e:a7:23:9e:8d:c9:da:98:e5:6d:d9:f6:9d:d0:
                    81:7c:ea:3e:67:ae:a5:97:49:77:94:78:73:09:74:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9E:A2:67:A6:1A:6C:75:11:BA:B8:B9:93:BF:22:76:62:3F:D7:4F
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:f1:40:09:78:c5:3e:16:38:d7:02:5c:9b:4b:81:ff:ed:
         20:90:11:a1:03:91:9b:1e:6b:36:06:1f:67:6a:ff:9f:55:81:
         41:1d:41:7a:12:88:cf:9f:92:36:e7:05:2d:d1:d3:eb:09:b4:
         ba:a2:c1:94:76:aa:8a:6c:f2:e8:83:1a:a6:da:f7:76:96:2e:
         be:4c:84:5c:99:f7:ef:48:49:e6:b4:c9:dd:bb:69:21:63:b4:
         4c:32:08:38:e6:42:ec:45:75:7a:96:22:c3:c0:59:a6:3d:f5:
         84:1e:57:f5:c8:12:d2:09:06:65:0b:a5:ae:a4:87:10:12:3c:
         66:26:3a:fd:15:10:c2:e1:8f:45:1d:4c:f5:8e:7c:12:e9:ac:
         08:e6:f9:21:7d:af:3f:42:0e:ad:a6:4f:8a:a3:95:32:d4:65:
         15:ca:87:88:1f:95:ea:3f:24:41:8a:17:53:c5:9e:59:f3:8a:
         5d:87:cc:83:41:13:cf:0f:c4:8a:aa:80:72:ea:bd:70:b2:a8:
         4d:10:ab:6a:e1:5f:63:34:41:c9:a4:04:c5:ce:e3:d7:49:0d:
         d2:87:f5:46:13:f5:67:e9:74:60:56:cc:c1:d8:e1:3a:1f:7c:
         95:e5:83:0e:20:63:e9:1f:02:98:16:42:40:e1:b4:e7:65:88:
         9f:c0:85:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:23 2026 by rpki-client