This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File:                     k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier:          oKnW3DB4WPn6bqB+uOcRcbZxzGVZR+OAY51wVVkDKRo=
Subject key identifier:   D9:09:07:1D:BE:6C:AB:16:84:61:7F:99:78:B6:D6:A3:C9:42:2B:6E
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer:       /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial:       019C4390D6B5FEBD19920DB8CDBE804ADBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 18:01:31 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:31 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:31 +0000
Files and hashes:         1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
                          2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: 4sDhufd/AhoS7ULZi5cBUOrEV3N6UTv5nVfYsuWj8R4=)
                          3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:d6:b5:fe:bd:19:92:0d:b8:cd:be:80:4a:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
        Validity
            Not Before: Feb  9 18:01:31 2026 GMT
            Not After : Feb 10 18:01:31 2026 GMT
        Subject: CN=d909071dbe6cab1684617f9978b6d6a3c9422b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:b2:8d:a3:a3:82:43:5c:dc:b1:08:20:e1:
                    71:7c:04:6c:8d:33:88:1c:20:a6:95:3f:2d:03:6f:
                    ae:1e:5f:c2:9e:dc:39:ed:ad:2d:49:0f:12:f2:36:
                    fb:fb:fa:b6:87:22:cc:6d:2b:e7:6b:13:aa:bf:53:
                    b8:a5:6b:6c:55:05:61:ca:1d:ff:1b:94:08:b8:55:
                    83:eb:fe:11:0a:28:4e:3d:5e:2b:ce:55:e9:6f:ba:
                    88:f6:6d:e5:2e:57:86:69:6a:91:98:0a:d8:c7:f1:
                    2f:f4:ea:d9:08:df:f4:5f:45:bf:63:aa:db:f9:fd:
                    d1:13:fa:6b:de:92:11:69:7b:9d:ca:d9:cd:9b:73:
                    48:17:c0:6a:cf:f5:e8:48:fa:3c:51:6b:ab:e7:58:
                    3d:bd:e3:5f:db:51:53:b8:8f:e2:cd:de:36:01:af:
                    31:cb:6f:d4:fd:43:c7:dc:14:0d:16:35:65:6c:d0:
                    06:8a:9b:9b:8c:7b:62:f7:97:4f:c3:13:96:6a:d0:
                    b6:48:e8:6a:a3:46:00:46:40:0d:15:bd:25:5b:0b:
                    5b:53:64:5e:43:ea:c9:a7:95:e7:18:8f:1b:fe:d4:
                    4a:d9:7c:8b:53:f8:43:93:7b:5e:91:bb:50:89:fb:
                    b1:93:04:7e:d9:da:78:fd:59:f3:9a:b1:66:68:70:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:09:07:1D:BE:6C:AB:16:84:61:7F:99:78:B6:D6:A3:C9:42:2B:6E
            X509v3 Authority Key Identifier:
                keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:45:c7:66:b6:2e:a8:ec:c7:e3:15:8e:35:f8:9b:3e:46:
         59:48:7d:cc:47:44:7c:d5:f8:07:d4:b9:0e:74:0a:c5:18:b4:
         ce:3d:d2:88:f3:fd:04:47:44:53:0a:df:2c:7d:71:c2:a9:12:
         82:f4:26:df:63:50:62:ab:35:36:e7:32:68:4b:78:c0:ef:b3:
         74:3f:4d:42:10:f6:8f:63:a9:cd:fb:13:58:a7:35:fc:2f:02:
         2c:e9:fd:48:db:0d:fe:ef:97:a0:72:89:65:63:93:dd:65:e4:
         19:c5:2b:22:d3:a2:6b:b1:ef:82:25:1e:02:41:0e:39:fe:7b:
         6e:81:63:ba:51:d5:dc:d7:e2:2e:f0:89:71:c1:a9:fd:53:8d:
         87:50:db:dc:de:ea:f9:a0:14:f6:ee:82:53:f4:54:54:92:e5:
         0e:bc:f3:a6:56:32:23:45:6b:7d:8b:fd:6a:6d:bd:56:b8:e9:
         7e:54:aa:3a:cd:38:05:c4:08:61:75:23:84:af:8b:52:93:6d:
         84:a7:cd:e9:78:c3:01:fc:a6:b5:c6:f0:ca:be:d0:24:40:16:
         a6:70:37:10:a7:0b:e6:36:98:5c:f9:25:e3:f0:3c:7d:e7:8d:
         a9:51:c9:b3:b1:ab:10:80:b8:20:7b:b1:02:ed:93:69:5b:f6:
         08:0d:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:11 2026 by rpki-client