This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File:                     6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier:          /b022t4GoUXfbhOwVBaIDK0CgQ/zFqh4OBCkBRj8Boo=
Subject key identifier:   BA:B6:C6:5E:3C:33:20:D0:91:6F:47:27:D6:E8:A2:BF:5E:E8:CC:F8
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer:       /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial:       019C43223EED301ABE0DCA360DCE642FF2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number:          1303
Signing time:             Mon 09 Feb 2026 16:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:43 +0000
Files and hashes:         1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: 4e7gwEOrNMmxhyOFpBg0qho9Ry/Hu0IEBF1zs7Lgqi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3e:ed:30:1a:be:0d:ca:36:0d:ce:64:2f:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
        Validity
            Not Before: Feb  9 16:00:43 2026 GMT
            Not After : Feb 10 16:00:43 2026 GMT
        Subject: CN=bab6c65e3c3320d0916f4727d6e8a2bf5ee8ccf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:51:47:fb:76:42:b1:91:64:7d:b1:ff:9a:
                    eb:7b:84:d8:c6:b0:6b:b6:f3:33:65:95:97:ef:a7:
                    f8:b9:40:2c:4a:61:cd:69:84:2e:6e:13:7c:23:78:
                    83:00:37:f6:c7:04:20:58:a1:d1:9f:b2:f9:3b:48:
                    3c:13:bb:bb:e3:b3:56:97:ee:ca:13:8e:f6:bd:d3:
                    49:ee:fc:27:45:83:e0:9c:7e:c1:0f:31:14:88:25:
                    17:02:0c:d7:c1:0c:cc:4c:5e:53:b2:4b:e7:91:c6:
                    5f:e7:51:52:af:9e:1f:80:c1:6e:7e:db:d9:6b:0a:
                    29:a1:1e:e1:c2:ea:cc:16:34:66:f3:25:f2:a2:16:
                    bb:45:08:3d:82:8f:a5:ca:3d:d2:3e:8a:af:db:ed:
                    87:f5:da:a7:42:62:f3:4b:a2:21:6e:11:1d:c5:78:
                    d5:31:94:a6:5d:b7:a4:ca:0c:8e:da:78:02:82:bb:
                    db:3a:55:93:c9:a4:08:33:b4:65:0a:68:c4:c8:ab:
                    5e:d4:ec:07:2c:28:5c:68:a4:55:56:55:fd:1a:57:
                    ad:e0:7e:99:9c:02:10:c8:17:cb:93:f0:19:51:82:
                    40:ff:78:46:a5:cf:9f:99:7c:76:43:e9:3c:d8:d7:
                    1a:af:6b:98:d1:58:82:f9:1b:b2:91:9b:24:91:89:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:C6:5E:3C:33:20:D0:91:6F:47:27:D6:E8:A2:BF:5E:E8:CC:F8
            X509v3 Authority Key Identifier:
                keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:6e:52:20:25:0b:f9:ab:34:34:c0:72:52:bf:ea:fa:35:
         77:34:45:da:7d:b1:d5:33:19:4e:2d:a2:04:02:9d:f5:2b:0c:
         5e:c9:72:3f:d2:f1:47:0d:5f:e6:90:61:77:43:ce:ed:03:86:
         8c:4d:8a:15:b6:01:9d:1e:f6:cc:ae:05:18:da:dd:b3:11:b4:
         a7:bb:b3:44:7e:86:9c:5b:38:91:3e:65:54:7f:1c:05:50:4a:
         4a:5a:d2:78:8f:2b:36:a9:71:0e:46:be:c4:2c:a5:2b:15:f7:
         16:41:36:e0:13:77:75:26:ab:ac:49:96:73:a5:28:9b:7f:60:
         b8:95:74:e7:15:89:fd:3e:8b:64:51:50:43:55:8e:20:af:e6:
         47:46:0e:d5:ce:fe:77:4e:6e:da:d3:75:22:e7:15:19:35:0f:
         2a:27:b2:99:b3:f7:92:8e:26:ba:ef:92:de:0d:c6:01:43:68:
         92:9b:35:12:9d:59:a0:27:cf:c1:80:7d:fc:b3:68:f7:21:da:
         29:a4:39:7b:f9:d2:3a:6e:bb:85:4d:12:47:ed:39:20:6e:09:
         f6:1f:34:b4:15:1c:ea:39:dc:79:a3:b4:66:54:d9:f2:dd:d4:
         b2:e9:6d:4d:f6:b3:27:11:f7:9d:c9:26:b2:bc:3c:1c:86:87:
         ff:18:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:44 2026 by rpki-client