This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File:                     l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier:          HQxoN6akk45zmTO1DdXbRPb/sK7wBApXIWtMBIaPtc8=
Subject key identifier:   6A:06:DF:65:48:D0:CB:F6:D4:95:37:7C:83:B6:B1:A4:3A:92:6D:81
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer:       /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial:       019C41D8AEC27BC94462F05A314BDCC9F86C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number:          06FE
Signing time:             Mon 09 Feb 2026 10:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:45 +0000
Files and hashes:         1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: qpoaSU18+0L1y6CltPW6kwmL6dQuSZb0NtHSSaLsLTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:ae:c2:7b:c9:44:62:f0:5a:31:4b:dc:c9:f8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
        Validity
            Not Before: Feb  9 10:00:45 2026 GMT
            Not After : Feb 10 10:00:45 2026 GMT
        Subject: CN=6a06df6548d0cbf6d495377c83b6b1a43a926d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:dc:c8:c3:9a:37:76:e0:4f:6e:b4:c8:60:
                    d3:2b:91:50:9b:f7:a3:b3:3a:1f:9a:c4:73:dc:57:
                    55:44:cf:97:b4:15:36:e5:e0:58:8f:c4:b8:42:01:
                    b9:28:6b:b8:56:6f:00:5e:9f:52:37:a9:79:8b:66:
                    cd:40:3d:5f:1d:85:5e:50:2f:44:2d:6b:90:bc:78:
                    6b:c3:16:af:03:63:3a:9a:c5:ee:bd:bf:98:08:6f:
                    9c:a5:38:77:bf:4d:e3:ec:5c:9a:44:8b:e5:7c:7a:
                    0d:27:a8:93:6b:e2:a3:01:4f:6b:f3:38:3b:bb:b3:
                    f9:a4:ef:00:64:f6:a2:47:1a:74:e8:20:09:9a:dc:
                    08:f1:b4:38:5d:5d:af:58:d1:5a:23:20:65:52:23:
                    12:45:92:62:4e:27:a9:44:4d:3e:16:e0:96:75:fc:
                    bc:f9:28:fe:b2:72:dd:e0:30:ef:26:b2:cb:37:94:
                    bc:7f:49:b9:be:ce:28:63:6f:8c:dc:d5:ba:30:df:
                    eb:3a:e7:e0:97:8f:6a:c0:2f:28:7b:ec:dd:65:46:
                    92:b8:71:4d:40:60:50:48:92:bc:d0:f5:2e:aa:74:
                    56:dd:46:88:f5:fe:8d:94:45:ff:f7:1f:f2:f9:42:
                    3d:42:b7:d6:06:ce:e8:b9:f2:7e:ae:62:99:6d:7e:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:06:DF:65:48:D0:CB:F6:D4:95:37:7C:83:B6:B1:A4:3A:92:6D:81
            X509v3 Authority Key Identifier:
                keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:01:8b:3f:d7:de:5e:b9:c8:cd:a1:7b:06:b1:10:a6:e7:
         3f:80:97:7a:49:da:93:cc:f7:31:6b:03:eb:4d:b6:21:28:ab:
         29:f8:34:29:0f:7e:a6:cf:56:93:26:fb:f5:29:53:41:d8:2f:
         10:f2:55:76:4c:3e:dc:e0:05:38:80:cd:9d:6c:a3:8a:da:20:
         7f:32:b7:ad:cc:ef:86:f1:94:c0:d7:ef:70:eb:0d:87:09:10:
         99:c0:92:bc:1c:03:ff:18:da:72:59:a5:a9:1e:1a:9c:d1:d2:
         86:e7:11:9c:3e:c5:12:bb:da:15:94:d9:4a:17:c1:3e:75:68:
         59:03:a2:51:cf:92:54:15:0d:ca:72:cc:9c:cf:01:7d:2b:8b:
         21:47:e9:a1:2a:7e:1b:a4:04:bf:9b:f3:35:dc:4c:d2:42:31:
         15:86:f3:77:fb:75:7b:01:50:bc:44:bd:c2:10:47:d0:c4:73:
         a3:c6:0e:c4:af:17:6f:f5:b9:62:58:af:0b:01:17:ef:ff:90:
         94:39:57:7b:8e:6e:db:d7:d5:93:70:d9:a5:a8:3a:b6:ee:db:
         9b:9f:30:d6:d0:f6:ab:1f:46:53:fd:5d:d6:df:f5:df:a2:89:
         19:4e:a4:31:7d:fb:07:93:4c:8f:4a:89:d3:69:bf:bf:04:0f:
         5b:f5:a5:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2K7Ce8lEYvBaMUvcyfhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzhjYzljNTk0YmM4ZThmMTQ1NDU2ZjQxNTY2ZDhjYmQ0
YWFkM2UwHhcNMjYwMjA5MTAwMDQ1WhcNMjYwMjEwMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg2YTA2ZGY2NTQ4ZDBjYmY2ZDQ5NTM3N2M4M2I2YjFhNDNhOTI2ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkXcyMOaN3bgT260yGDTK5FQm/ej
szofmsRz3FdVRM+XtBU25eBYj8S4QgG5KGu4Vm8AXp9SN6l5i2bNQD1fHYVeUC9E
LWuQvHhrwxavA2M6msXuvb+YCG+cpTh3v03j7FyaRIvlfHoNJ6iTa+KjAU9r8zg7
u7P5pO8AZPaiRxp06CAJmtwI8bQ4XV2vWNFaIyBlUiMSRZJiTiepRE0+FuCWdfy8
+Sj+snLd4DDvJrLLN5S8f0m5vs4oY2+M3NW6MN/rOufgl49qwC8oe+zdZUaSuHFN
QGBQSJK80PUuqnRW3UaI9f6NlEX/9x/y+UI9QrfWBs7oufJ+rmKZbX44NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoG32VI0Mv21JU3fIO2saQ6km2BMB8GA1UdIwQY
MBaAFJd4zJxZS8jo8UVFb0FWbYy9Sq0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgt
ZTgwMmNkNmRhNjA4LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgtZTgwMmNkNmRhNjA4
LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNUBiz/X
3l65yM2hewaxEKbnP4CXeknak8z3MWsD6022ISirKfg0KQ9+ps9Wkyb79SlTQdgv
EPJVdkw+3OAFOIDNnWyjitogfzK3rczvhvGUwNfvcOsNhwkQmcCSvBwD/xjaclml
qR4anNHShucRnD7FErvaFZTZShfBPnVoWQOiUc+SVBUNynLMnM8BfSuLIUfpoSp+
G6QEv5vzNdxM0kIxFYbzd/t1ewFQvES9whBH0MRzo8YOxK8Xb/W5YlivCwEX7/+Q
lDlXe45u29fVk3DZpag6tu7bm58w1tD2qx9GU/1d1t/136KJGU6kMX37B5NMj0qJ
02m/vwQPW/WlRQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:03 2026 by rpki-client