This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File:                     6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier:          qoVK7qVPsG4Rq3cOPrpK2qa2XyCzIEgN/FXLKvGfTb8=
Subject key identifier:   77:08:34:AB:3D:7F:09:AA:9D:6C:A4:5F:FE:EA:54:90:58:FB:25:C3
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer:       /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial:       019C43C72570F2F345C2D2791393A17D3B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number:          0BFC
Signing time:             Mon 09 Feb 2026 19:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:50 +0000
Files and hashes:         1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: NS85y3b33G6wM/0TjR3fD3CXUDdFVqaCkbYl0bDXmUc=)
                          2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
                          3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:25:70:f2:f3:45:c2:d2:79:13:93:a1:7d:3b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
        Validity
            Not Before: Feb  9 19:00:50 2026 GMT
            Not After : Feb 10 19:00:50 2026 GMT
        Subject: CN=770834ab3d7f09aa9d6ca45ffeea549058fb25c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:5c:e9:10:a6:21:b9:7d:c4:06:a8:c2:98:
                    79:4f:f0:02:ec:cc:ac:a1:a9:7a:a8:8d:27:39:a6:
                    e6:ac:60:37:62:ca:1d:52:0a:db:f7:8a:b9:e4:80:
                    68:cc:85:cc:d4:90:5b:6e:72:26:ad:d0:81:36:39:
                    5c:e6:22:a5:2b:9d:b1:dd:58:2b:ad:0b:c3:ad:5e:
                    24:2d:7e:57:08:5b:99:d2:b8:ab:d4:4f:ca:f7:d0:
                    ba:e3:a4:2f:03:3f:ac:85:6b:f3:62:12:46:f8:41:
                    f7:f1:ac:2a:e2:f1:89:4a:e0:20:cf:57:12:18:39:
                    ab:ef:4d:87:e4:eb:a8:f9:26:33:23:8e:7e:36:6a:
                    70:3d:c0:ae:13:a3:3f:77:9b:0b:be:2b:95:7c:26:
                    41:d5:2d:4f:01:a5:c0:9f:45:2d:33:50:be:21:7a:
                    fd:b2:77:c3:d9:e7:95:d7:bf:05:02:59:f7:e0:58:
                    2e:30:63:db:b0:38:09:6d:69:93:f6:12:c2:4a:a0:
                    60:87:58:16:63:52:a4:20:3d:cd:d1:14:92:4d:f9:
                    ed:07:86:78:3b:60:63:1e:38:b8:75:63:f4:01:f3:
                    41:08:0b:1a:75:68:1c:63:be:b0:25:26:18:64:2a:
                    d4:5a:0c:6d:cb:bc:03:ca:c5:f9:ea:6c:02:13:a1:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:34:AB:3D:7F:09:AA:9D:6C:A4:5F:FE:EA:54:90:58:FB:25:C3
            X509v3 Authority Key Identifier:
                keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:fe:07:0b:29:42:bd:e2:49:a4:3b:11:e9:b2:8a:4c:ed:
         6f:4a:8f:d8:46:61:21:08:fd:7e:96:16:8d:b1:a0:0f:e4:f9:
         2c:98:bd:73:b7:23:19:06:2d:4a:b7:36:c1:c0:c1:c6:fa:08:
         ff:98:84:38:1f:0e:69:2e:e4:cc:82:37:92:ce:d9:07:06:67:
         27:b8:91:44:30:59:91:5a:ac:6e:75:2f:6b:ec:b0:80:0c:c3:
         d7:22:bf:62:d0:64:6c:78:49:c0:8c:40:18:cc:9c:76:99:99:
         5d:e5:94:37:55:60:d9:15:d1:52:c3:b4:37:7e:e9:79:9e:7f:
         39:fd:63:07:b9:49:fb:b0:02:a5:51:d6:c5:1e:41:d2:20:6a:
         5a:84:32:08:44:84:b7:fa:6e:d7:58:d0:03:aa:14:1f:70:43:
         08:16:9a:72:2e:62:54:1a:c9:a5:f8:8d:ec:23:22:9a:de:de:
         8c:b7:b0:20:e3:9a:9e:96:0d:df:35:9a:f0:26:6c:f2:8a:10:
         9d:8c:f5:20:94:02:f1:9a:e3:4a:db:6b:4a:ec:a9:1c:6f:0f:
         13:64:31:45:fd:15:db:cc:db:03:0a:64:98:41:65:ba:e4:b1:
         9d:a8:eb:c0:36:95:c1:33:ed:e2:40:ed:31:21:c9:09:00:b9:
         ea:fd:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:06 2026 by rpki-client