This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File:                     6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier:          zCib6hP5qm+HPKQqtndZRnxRp29+w5El+jRMa1e+BgU=
Subject key identifier:   66:21:69:4B:CA:F2:17:C0:0A:3C:C4:91:62:D7:8B:24:44:1B:FD:92
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer:       /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial:       019C40FCF7F7BD3494B2984F8344A0091D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number:          0C4A
Signing time:             Mon 09 Feb 2026 06:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:46 +0000
Files and hashes:         1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: X4yPeT46/AJO9GnJWTNwuSBuaxKMS2fzhT7tuazqvx4=)
                          2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:f7:f7:bd:34:94:b2:98:4f:83:44:a0:09:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
        Validity
            Not Before: Feb  9 06:00:46 2026 GMT
            Not After : Feb 10 06:00:46 2026 GMT
        Subject: CN=6621694bcaf217c00a3cc49162d78b24441bfd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:38:c4:11:a3:22:29:fc:53:f0:8a:f1:61:
                    ce:03:69:06:09:c4:9b:d1:d0:8c:fd:6b:08:aa:e6:
                    f2:b2:5b:7e:de:aa:03:02:97:14:d7:ff:df:8c:59:
                    bd:43:97:80:0a:2d:bc:97:4b:f2:36:6d:e4:48:13:
                    cf:6b:4d:75:5e:3f:e2:61:3f:84:4a:36:41:3c:e3:
                    43:2a:3e:59:83:9c:fd:cc:7f:03:47:42:30:b7:ba:
                    24:db:43:48:67:01:5f:81:4e:38:54:2d:89:45:d5:
                    cb:55:65:3a:c5:e3:3e:ab:d1:75:4b:c2:4c:d0:47:
                    9d:28:dd:84:d6:ed:ba:b1:02:ad:9b:04:23:5d:ad:
                    73:e6:e6:02:73:be:44:8f:54:20:ce:d0:ba:48:87:
                    2f:6e:e9:11:44:bc:db:e8:57:00:83:6d:4d:01:d0:
                    e9:fd:31:00:30:9e:40:0a:f9:4b:50:98:70:b2:ac:
                    2d:ef:09:43:85:ba:ce:8e:26:86:a6:55:82:e9:96:
                    b1:1c:5c:08:25:1f:21:a7:d0:b8:be:cd:83:88:f7:
                    c8:0f:76:77:6c:66:a5:d9:fe:05:19:4f:4d:f2:97:
                    da:2f:b1:77:6a:36:a6:08:4d:64:6e:99:5e:40:a7:
                    a0:e3:ae:ea:c4:b2:af:e7:30:5b:ce:bf:ff:b9:46:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:21:69:4B:CA:F2:17:C0:0A:3C:C4:91:62:D7:8B:24:44:1B:FD:92
            X509v3 Authority Key Identifier:
                keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:79:1a:ef:84:66:91:7e:bf:41:55:ea:61:a6:e9:35:7f:
         f2:f8:0d:3a:e1:f5:17:4f:6e:d5:8e:ee:86:42:d0:cd:3a:48:
         42:2b:3e:d5:c5:16:01:e6:94:fb:92:95:de:c1:05:78:4d:45:
         e4:94:fa:6e:f9:76:f9:65:29:9a:ec:18:13:be:09:82:83:f9:
         74:d1:3e:d2:c7:0f:43:d4:17:68:a3:eb:ef:6d:bc:51:54:9a:
         4a:ad:d2:b3:46:05:a8:43:35:d4:49:f5:9e:8d:60:69:f9:e8:
         65:c2:4a:53:96:ad:69:b1:96:91:06:09:09:11:7e:d8:e9:b0:
         67:29:53:fc:24:c5:09:d4:aa:71:97:05:4f:11:f0:b9:9e:d2:
         13:b7:e6:4f:f0:ca:3e:2a:31:a7:f5:ec:0f:b5:54:e6:06:03:
         82:54:06:e9:24:ed:f3:4e:b2:1a:2f:02:38:f6:9f:f2:a2:1a:
         71:7d:6c:00:be:45:68:25:1f:e4:28:35:06:fb:f6:de:7f:0d:
         05:57:5f:77:5e:16:0e:91:96:d9:4d:6e:e1:c0:16:76:2d:8b:
         26:62:a5:93:62:a3:4c:36:7c:d1:00:a4:c2:97:1c:0a:20:dc:
         b8:7b:5e:6f:55:e9:f0:fe:23:ef:dc:8e:bf:f8:cc:11:a6:a2:
         ff:f9:dd:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/Pf3vTSUsphPg0SgCR1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzM0NjlkMWU3MzVhZTRkNjA4MzdiNzcwOWMzM2ZmNDI3
YzhlODQwHhcNMjYwMjA5MDYwMDQ2WhcNMjYwMjEwMDYwMDQ2WjAzMTEwLwYDVQQD
Eyg2NjIxNjk0YmNhZjIxN2MwMGEzY2M0OTE2MmQ3OGIyNDQ0MWJmZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY44xBGjIin8U/CK8WHOA2kGCcSb
0dCM/WsIqubyslt+3qoDApcU1//fjFm9Q5eACi28l0vyNm3kSBPPa011Xj/iYT+E
SjZBPONDKj5Zg5z9zH8DR0Iwt7ok20NIZwFfgU44VC2JRdXLVWU6xeM+q9F1S8JM
0EedKN2E1u26sQKtmwQjXa1z5uYCc75Ej1QgztC6SIcvbukRRLzb6FcAg21NAdDp
/TEAMJ5ACvlLUJhwsqwt7wlDhbrOjiaGplWC6ZaxHFwIJR8hp9C4vs2DiPfID3Z3
bGal2f4FGU9N8pfaL7F3ajamCE1kbpleQKeg467qxLKv5zBbzr//uUY0oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYhaUvK8hfACjzEkWLXiyREG/2SMB8GA1UdIwQY
MBaAFOjDRp0ec1rk1gg3t3CcM/9CfI6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEt
ODkyNDg1MGQ5NWQ2LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NTA1ZWUtNWZlMC00NDhjLWI2MjEtODkyNDg1MGQ5NWQ2
LzEvNk1OR25SNXpXdVRXQ0RlM2NKd3pfMEo4am9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmV5Gu+E
ZpF+v0FV6mGm6TV/8vgNOuH1F09u1Y7uhkLQzTpIQis+1cUWAeaU+5KV3sEFeE1F
5JT6bvl2+WUpmuwYE74JgoP5dNE+0scPQ9QXaKPr7228UVSaSq3Ss0YFqEM11En1
no1gafnoZcJKU5atabGWkQYJCRF+2OmwZylT/CTFCdSqcZcFTxHwuZ7SE7fmT/DK
Pioxp/XsD7VU5gYDglQG6STt806yGi8COPaf8qIacX1sAL5FaCUf5Cg1Bvv23n8N
BVdfd14WDpGW2U1u4cAWdi2LJmKlk2KjTDZ80QCkwpccCiDcuHteb1Xp8P4j79yO
v/jMEaai//ndpA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:15 2026 by rpki-client