This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          ZGV/taidTmFJsDVluacMKlwxHZ53/Gj4F4nK69Cwwgw=
Subject key identifier:   4C:BC:4F:25:FB:60:E0:22:6F:D8:DD:23:41:E0:CE:22:21:62:8E:05
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       019C432202043996C42C16233241474F2AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          0EF5
Signing time:             Mon 09 Feb 2026 16:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:27 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: Eu+JWG/LbXNkX6BV02hjAh877r6WO4w1z+CWRwwpBVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:02:04:39:96:c4:2c:16:23:32:41:47:4f:2a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Feb  9 16:00:27 2026 GMT
            Not After : Feb 10 16:00:27 2026 GMT
        Subject: CN=4cbc4f25fb60e0226fd8dd2341e0ce2221628e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:7a:c6:2a:af:fc:ce:6b:3a:0b:ea:2c:9d:
                    b2:ae:82:ec:16:be:b8:20:3f:6f:2c:04:bc:36:bb:
                    59:45:56:ae:e2:5e:90:0d:c6:50:fb:d6:02:f1:a4:
                    c9:ad:4e:b9:fa:04:c9:a1:3a:d4:88:f8:2f:87:bb:
                    50:b3:fb:a6:87:6f:67:aa:20:83:1b:ba:32:29:2d:
                    ae:b3:65:f8:d8:a5:8c:ad:1a:6c:bd:af:0b:81:1c:
                    16:00:32:f9:8e:e0:71:bb:19:db:b3:8a:00:0b:3e:
                    a6:1f:91:84:39:f1:7f:63:37:c3:2d:b1:3a:53:f7:
                    89:96:3f:87:5b:3b:86:4a:1c:8b:6f:2f:9e:8f:56:
                    83:49:0c:42:d5:50:9a:8a:47:85:b7:4b:44:66:bf:
                    d5:5c:7e:37:ec:65:71:69:49:6f:e6:fc:a7:8d:77:
                    7e:38:e9:79:b5:28:e0:47:05:ca:35:d2:da:f4:3d:
                    5c:ac:50:13:d1:02:04:67:cb:e3:2c:93:74:53:da:
                    6c:de:56:1b:88:e3:6d:60:22:44:86:4f:6a:e1:53:
                    5d:95:b7:2c:e8:21:b1:54:af:e4:ad:57:fe:7a:09:
                    8e:a1:9c:71:96:12:ee:d8:5b:95:2f:c3:35:c3:54:
                    ae:fc:cd:c3:0a:d4:b8:af:46:25:f5:7c:2d:79:bb:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:4F:25:FB:60:E0:22:6F:D8:DD:23:41:E0:CE:22:21:62:8E:05
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:10:b1:7d:28:9d:98:c6:0e:3f:9f:ca:9e:55:f7:40:b5:
         95:dd:32:f8:3b:95:1c:fa:32:86:4f:c4:aa:52:8e:87:b8:e1:
         64:98:77:fb:f9:94:82:d4:18:60:68:e1:b2:51:3f:d9:3f:9f:
         82:f8:d5:d7:91:b7:47:0f:72:5f:ad:05:e1:80:0e:c0:ec:54:
         02:74:e5:55:8f:58:38:5a:21:11:55:b8:08:87:ab:61:b2:c1:
         60:c4:a0:30:d3:3f:6c:13:60:39:af:ce:cf:ba:f3:14:34:cb:
         e7:9c:76:95:a1:2b:c3:92:41:e9:45:ad:96:62:a5:c4:89:e1:
         bb:04:15:46:ed:9f:96:eb:16:0d:b5:03:24:b3:a5:1b:53:54:
         b8:0d:eb:4d:f5:73:72:65:74:83:ba:b2:ff:b7:12:48:81:7f:
         89:6b:9f:7d:53:6f:d0:bf:06:5c:0f:35:42:f8:ae:c8:45:b5:
         d5:e0:3e:3e:ef:0b:a4:04:49:65:da:7d:97:ed:95:77:75:ef:
         55:ad:dc:75:8b:dd:6c:fe:3a:cf:b4:92:50:f6:f2:77:b2:d7:
         44:01:42:8f:90:bb:c2:06:20:d8:2a:98:52:7f:7e:fe:53:9b:
         40:6a:67:0d:e3:11:de:e3:ed:16:82:26:3a:51:c5:98:97:30:
         58:07:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:04 2026 by rpki-client