This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          lqoRhuMCg/QRyoG8NBiB5OugnawnLe56WllFjrMnO/4=
Subject key identifier:   58:C0:E9:80:F9:BC:F2:84:9D:2B:48:9A:F0:21:AE:66:6A:A4:AB:9E
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       019C43FDB62A00F8497CEA912DA9F7FDF776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 20:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:26 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: ZY9jXUAhOHj/YjON63G8hI37KcIWC1L+VGNtFBg9Q3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:b6:2a:00:f8:49:7c:ea:91:2d:a9:f7:fd:f7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Feb  9 20:00:26 2026 GMT
            Not After : Feb 10 20:00:26 2026 GMT
        Subject: CN=58c0e980f9bcf2849d2b489af021ae666aa4ab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:c9:8c:03:86:a3:60:20:51:dd:16:7b:17:
                    8a:c1:f9:9b:53:12:48:21:d9:4e:62:7b:ff:6c:57:
                    c4:7f:02:e9:21:94:80:43:e2:d0:3a:34:58:05:7f:
                    e0:3a:80:ca:a7:97:f8:02:7a:d9:9a:bf:b8:d0:88:
                    5f:c7:c3:1b:fb:95:e4:cb:36:93:ac:7e:21:df:99:
                    88:37:0a:04:2c:30:dd:4c:a6:ab:8c:c7:45:e5:b6:
                    70:8e:72:50:52:04:f9:b0:9e:f8:53:47:15:70:5b:
                    6f:10:b7:2f:e8:fb:70:ad:92:31:7d:1c:0d:af:18:
                    af:87:e6:96:ee:5a:42:32:92:2c:ba:0d:9a:47:c9:
                    6f:6e:a6:1a:e9:21:df:04:ee:cd:b7:ff:ca:0d:00:
                    20:31:17:11:22:50:87:ef:68:de:f1:71:4a:e6:dc:
                    b4:b2:33:e1:c6:2a:86:3a:db:6e:b5:fc:f9:e1:2f:
                    16:70:47:51:ae:16:5b:17:82:a2:52:a9:7c:3d:b4:
                    00:ee:66:57:aa:37:e4:51:92:3a:00:98:d7:0c:44:
                    bb:ed:c0:be:69:ae:5a:34:9e:f4:12:1b:ef:0d:40:
                    56:6f:51:34:70:bd:d9:a9:0b:92:08:51:b1:a8:69:
                    b6:b8:62:61:9b:93:24:62:93:f8:dc:8b:b5:4f:00:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C0:E9:80:F9:BC:F2:84:9D:2B:48:9A:F0:21:AE:66:6A:A4:AB:9E
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:72:c8:4c:d6:c2:68:3b:c8:7a:ae:8a:5c:03:6c:7c:bf:
         64:e7:67:3c:04:27:c8:4e:ba:05:a2:4b:be:5d:3f:dd:ec:12:
         ef:b5:9a:52:5e:0c:ec:4b:eb:4d:0c:c2:4e:e7:f4:d3:be:30:
         d1:6f:a3:9c:6d:d0:f0:06:7d:66:42:14:ac:c7:b1:af:f3:88:
         4a:ed:bd:c2:52:87:31:7c:1a:1f:6b:8c:d3:af:03:93:ed:7d:
         46:2a:af:4c:f0:63:1b:93:5e:d6:ba:6e:04:ed:9b:cb:0f:bc:
         39:d4:37:bc:c9:9c:8f:d5:79:14:e4:00:50:92:9c:00:95:cf:
         16:24:ad:67:c2:6b:02:41:7e:f5:26:84:86:3f:a1:ef:bd:0c:
         6e:62:4a:14:28:f6:f8:41:35:e5:e3:c4:5f:bd:da:71:4a:d7:
         a4:c1:21:84:6f:bd:0a:a8:0c:8a:2b:ff:5a:43:95:65:ff:e1:
         9c:33:79:ba:d6:48:5e:37:ca:fa:ed:98:62:af:d6:c8:c3:48:
         84:e6:ba:c5:29:2f:d3:ad:05:73:f0:cb:79:be:41:8a:43:0c:
         df:40:38:1e:e3:6f:36:31:3b:3b:38:72:f9:58:02:42:7f:34:
         6b:52:5f:ff:ef:b0:b6:df:5c:69:8a:3c:35:fe:0c:83:9a:47:
         60:4e:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:01 2026 by rpki-client