This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
File:                     s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json)
Hash identifier:          xZMbrx19Al27zK232AbjRiGWyeS0N4Sco+d77QZWn1Q=
Subject key identifier:   18:1D:08:C5:9D:64:39:77:2D:C5:31:EB:68:59:94:19:0C:DA:BC:BC
Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63
Certificate issuer:       /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
Certificate serial:       019C427DB462A27F2CF4868789356EC0E393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:00 +0000
Files and hashes:         1: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: zknC8mbkFJ9tEo25/5RAAsACTvu9q/b/MXnvBuOXLqE=)
                          2: u65mmO6HRK5seaMFhAXBI1NDzRY.roa (hash: bDLwuznXJEsV9R4nt39n1oPS76JZaY8ubPqpqj3zceQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b4:62:a2:7f:2c:f4:86:87:89:35:6e:c0:e3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763
        Validity
            Not Before: Feb  9 13:01:00 2026 GMT
            Not After : Feb 10 13:01:00 2026 GMT
        Subject: CN=181d08c59d6439772dc531eb685994190cdabcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:3e:86:63:ef:f1:4a:05:4f:b1:8d:60:9f:
                    83:02:e1:23:05:01:d2:17:1b:74:da:64:7a:9c:00:
                    70:68:0c:b5:a1:c9:24:ea:56:4c:d6:b6:88:89:fd:
                    65:02:7f:d1:87:40:68:81:47:43:86:4a:60:6f:02:
                    ac:ff:e1:bb:f7:61:75:1a:c4:66:91:88:55:fa:c0:
                    aa:55:0b:de:b8:7d:78:9b:af:17:06:83:5a:cc:36:
                    6e:2c:b6:82:bb:48:36:6b:7f:d0:84:1d:8c:61:b5:
                    2d:9a:bb:2d:cb:a3:47:b2:5e:e2:f1:3d:1c:59:5f:
                    61:6a:13:07:27:3c:06:ce:72:da:34:a4:77:2d:e0:
                    79:7f:80:ce:a8:30:b5:ba:9a:93:7f:bb:d2:5c:58:
                    c6:d5:89:e5:2e:59:70:aa:eb:62:ad:3d:d0:c2:b1:
                    46:01:60:87:73:6e:eb:b3:ab:e6:16:65:ef:f0:a7:
                    c7:86:71:80:4e:3a:6d:c7:27:17:57:ed:cd:39:7a:
                    58:25:45:04:aa:91:65:08:06:d9:82:1a:1d:c8:bd:
                    30:8c:f2:88:5f:23:78:29:99:fb:c8:1f:64:ed:0a:
                    d3:fc:c0:0f:88:f9:39:0a:13:13:d3:fa:c1:45:2b:
                    c3:03:2b:51:bc:8a:e0:2d:a9:1f:c6:5d:36:2a:c2:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:08:C5:9D:64:39:77:2D:C5:31:EB:68:59:94:19:0C:DA:BC:BC
            X509v3 Authority Key Identifier:
                keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:cc:14:6a:dc:e7:af:5b:a4:43:41:43:b2:1a:df:63:78:
         7c:1a:c4:e0:f1:8c:e6:14:7e:89:1c:c7:f3:67:6e:05:d2:47:
         30:28:9c:c3:b7:0a:60:45:d7:f7:61:60:95:f3:9b:52:7e:ca:
         5e:61:99:83:15:cc:c0:0c:07:22:34:89:48:3f:7f:0a:5d:50:
         00:05:eb:44:db:32:1f:9f:e9:2b:af:6b:89:2f:fc:de:7a:86:
         39:e9:21:23:bc:1f:3b:70:a8:17:d7:14:17:8d:e5:05:6a:e3:
         62:6c:54:8c:71:45:be:8b:5d:5c:f5:8f:cc:03:52:56:fe:be:
         ae:54:37:c1:a8:ad:f3:45:7e:49:e6:96:73:36:60:4b:13:f9:
         55:04:0f:92:15:c3:cf:bf:f8:0a:51:a8:ba:9a:2c:63:6e:49:
         89:3f:71:3c:ff:8f:31:16:d3:47:de:bb:4b:2b:8c:a5:79:be:
         ba:b4:3d:7c:74:7e:59:d8:ee:0d:14:e7:43:9c:60:7d:f2:c4:
         60:12:9f:98:8c:10:81:59:5b:d6:bc:a2:cc:d2:e7:4e:79:d2:
         72:12:6d:88:ad:89:ae:00:fd:dc:d9:ed:3a:ef:c8:18:05:ab:
         02:1e:d6:6a:da:6b:e7:d2:04:6f:4d:58:8d:15:0f:34:19:14:
         4d:f1:06:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfbRion8s9IaHiTVuwOOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx
OWY3NjMwHhcNMjYwMjA5MTMwMTAwWhcNMjYwMjEwMTMwMTAwWjAzMTEwLwYDVQQD
EygxODFkMDhjNTlkNjQzOTc3MmRjNTMxZWI2ODU5OTQxOTBjZGFiY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuds+hmPv8UoFT7GNYJ+DAuEjBQHS
Fxt02mR6nABwaAy1ockk6lZM1raIif1lAn/Rh0BogUdDhkpgbwKs/+G792F1GsRm
kYhV+sCqVQveuH14m68XBoNazDZuLLaCu0g2a3/QhB2MYbUtmrsty6NHsl7i8T0c
WV9hahMHJzwGznLaNKR3LeB5f4DOqDC1upqTf7vSXFjG1YnlLllwqutirT3QwrFG
AWCHc27rs6vmFmXv8KfHhnGATjptxycXV+3NOXpYJUUEqpFlCAbZghodyL0wjPKI
XyN4KZn7yB9k7QrT/MAPiPk5ChMT0/rBRSvDAytRvIrgLakfxl02KsK4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgdCMWdZDl3LcUx62hZlBkM2ry8MB8GA1UdIwQY
MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt
ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx
LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCzMFGrc
569bpENBQ7Ia32N4fBrE4PGM5hR+iRzH82duBdJHMCicw7cKYEXX92FglfObUn7K
XmGZgxXMwAwHIjSJSD9/Cl1QAAXrRNsyH5/pK69riS/83nqGOekhI7wfO3CoF9cU
F43lBWrjYmxUjHFFvotdXPWPzANSVv6+rlQ3wait80V+SeaWczZgSxP5VQQPkhXD
z7/4ClGouposY25JiT9xPP+PMRbTR967SyuMpXm+urQ9fHR+WdjuDRTnQ5xgffLE
YBKfmIwQgVlb1ryizNLnTnnSchJtiK2JrgD93NntOu/IGAWrAh7Watpr59IEb01Y
jRUPNBkUTfEGPA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:43 2026 by rpki-client