This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
File:                     6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json)
Hash identifier:          jmr8pspS27d42F+KW+AgFb04qohVBYhbVIjytPYk4dg=
Subject key identifier:   B6:EF:B0:21:2A:07:A5:98:02:21:3C:8A:A7:4C:8E:25:34:E0:A1:1A
Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91
Certificate issuer:       /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
Certificate serial:       019C1D95B0E7D00573D7EC58C62861C7A938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
Manifest number:          02D3
Signing time:             Mon 02 Feb 2026 09:01:15 +0000
Manifest this update:     Mon 02 Feb 2026 09:01:15 +0000
Manifest next update:     Tue 03 Feb 2026 09:01:15 +0000
Files and hashes:         1: 0NDgQCvqhryncNsEQEFvwSr_y0M.roa (hash: LF2EyUV4OIlA7LZWcGa2EYYOsJUgAR1OHjq6qtxDlCo=)
                          2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: YCloLO8Xy6sIQXDZC6iUQf2u2kz4hyn/Eup/Ib65XSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:95:b0:e7:d0:05:73:d7:ec:58:c6:28:61:c7:a9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91
        Validity
            Not Before: Feb  2 09:01:15 2026 GMT
            Not After : Feb  3 09:01:15 2026 GMT
        Subject: CN=b6efb0212a07a59802213c8aa74c8e2534e0a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:06:a5:65:2e:b4:3d:df:09:0d:15:99:7a:
                    b2:78:61:6e:2e:dd:0c:a3:0d:d2:65:fc:25:f0:39:
                    02:a5:65:f5:e3:44:77:81:b0:b4:20:72:db:38:6b:
                    7f:6b:84:1a:e3:7c:80:00:ec:83:f4:41:6f:eb:36:
                    f3:56:79:21:d5:3f:0f:59:9e:eb:e0:2e:d0:9d:fb:
                    99:c7:97:9d:b9:2c:66:3b:d5:e9:9c:d2:9b:ab:4c:
                    a7:65:50:b7:f5:82:88:1f:ce:a5:cd:b4:57:b2:0e:
                    22:88:a2:d3:33:2d:32:d6:fd:d6:21:1e:a7:4a:0d:
                    d7:58:42:94:96:f0:87:06:0d:31:38:37:de:d7:27:
                    cd:e6:59:cd:d3:31:6a:dc:46:2c:a5:07:9c:e9:25:
                    5a:28:4c:2e:11:a1:e6:04:20:41:6d:3c:44:42:30:
                    9f:aa:a1:72:3a:42:bb:6c:4a:ad:43:6c:d8:df:fd:
                    dc:13:27:00:ed:a4:05:d2:cc:f6:0a:68:f2:21:18:
                    3d:bb:74:86:1b:36:ef:64:8a:86:32:52:5c:cf:d5:
                    eb:96:02:cd:62:98:73:37:0f:f6:c3:0e:3f:86:26:
                    8c:b8:62:43:e3:f4:11:7f:ec:63:aa:dd:09:97:f4:
                    2a:ca:d1:31:f8:d4:4d:7f:7b:2d:ad:c1:ac:6f:27:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EF:B0:21:2A:07:A5:98:02:21:3C:8A:A7:4C:8E:25:34:E0:A1:1A
            X509v3 Authority Key Identifier:
                keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:78:ca:d0:68:ef:c9:d7:db:0a:3a:c3:6c:24:a5:b8:55:
         56:00:ea:d0:35:d7:a3:f9:19:a6:61:06:15:a0:4b:b1:1c:60:
         ee:01:48:8a:42:70:e4:74:40:62:6e:c9:12:22:9c:35:2b:4e:
         69:54:0b:c7:a2:1d:96:67:a8:2e:e5:71:b4:04:df:ff:e8:95:
         e2:0f:60:59:7a:a5:1c:fc:e3:65:93:e3:f9:a5:ed:98:61:04:
         ab:0a:0d:c7:f0:4b:ed:f0:c0:aa:40:16:06:2b:d3:d4:eb:ff:
         e4:7e:3f:94:d2:e8:fd:17:16:e0:c7:28:87:b5:53:0a:e7:1f:
         06:ca:b5:66:e3:41:dd:ca:c0:23:6c:e8:e7:50:e2:18:24:ed:
         98:68:15:ab:c8:e3:78:02:80:02:a6:f5:ca:4d:31:63:7e:f8:
         40:55:e2:24:5a:7e:41:3e:6c:30:be:5c:83:2b:79:b4:d8:71:
         8d:ea:3d:26:78:64:fa:09:53:53:4b:e5:cc:80:23:60:3f:5b:
         f5:e9:15:8d:19:d7:63:2f:ed:20:20:c6:39:68:fc:33:34:9e:
         96:e1:9a:c7:ed:e5:79:00:7b:91:a7:64:04:93:ca:1b:68:1c:
         5f:d4:cc:33:30:3e:46:ad:3f:a9:a0:41:4d:01:8b:01:52:dc:
         ab:9f:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:41 2026 by rpki-client