This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          0iI8xKjGTp/VWmm+xXWiPDkvoRaGGO6MQtZiEKxyfxw=
Subject key identifier:   C2:17:E9:44:A7:6E:79:65:0C:21:0E:A8:DC:0D:5D:0D:51:82:89:09
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       019C40FD2D5D9A0632B9EB6561DBA63E57BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          0989
Signing time:             Mon 09 Feb 2026 06:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:59 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: KJVVBrshk9wtMnHXe/Ty8SS8pai1+kUiRP8qaciwnX4=)
                          2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:2d:5d:9a:06:32:b9:eb:65:61:db:a6:3e:57:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: Feb  9 06:00:59 2026 GMT
            Not After : Feb 10 06:00:59 2026 GMT
        Subject: CN=c217e944a76e79650c210ea8dc0d5d0d51828909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:d9:0e:ff:03:0c:c7:cf:fb:07:16:48:70:
                    51:ab:bd:20:9d:9c:21:16:ca:7c:d6:41:5d:e3:b7:
                    cb:ac:d1:0a:d7:c5:7d:1c:da:cd:69:be:48:1e:c2:
                    a9:26:45:79:e6:80:6f:8a:9e:64:4e:a0:1f:22:30:
                    6c:e6:6d:8b:a8:04:08:26:05:91:e4:5c:6a:d5:90:
                    65:04:1c:f7:93:27:35:9a:b0:49:94:00:3b:05:0d:
                    af:1a:00:56:d4:10:8d:23:45:f9:11:71:ea:7c:b8:
                    60:b3:97:ba:47:42:cd:46:d3:2b:be:6c:a0:07:dd:
                    c3:72:bf:02:e1:18:62:4d:15:22:04:8b:ec:11:4e:
                    9b:d0:a3:ed:62:9f:bd:8f:6c:a3:f7:80:7b:f5:e9:
                    47:33:a0:2b:96:f2:5d:84:f2:3c:ac:ee:99:2e:4c:
                    f5:62:ce:0f:0b:23:f7:97:36:73:8a:09:36:4b:2f:
                    3d:cc:7b:42:a1:49:ab:45:4d:25:f5:b1:2f:1d:0f:
                    2f:b9:2f:d6:46:a4:77:28:b9:e0:79:56:ca:29:d0:
                    14:dd:75:98:8d:d1:b4:d6:13:ab:f1:da:9e:38:cf:
                    91:30:a5:33:77:6e:40:88:2f:a4:a4:bf:b2:98:34:
                    96:05:a7:23:82:46:c2:e2:3c:82:14:65:b4:53:07:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:E9:44:A7:6E:79:65:0C:21:0E:A8:DC:0D:5D:0D:51:82:89:09
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:54:23:c5:f3:76:4a:0b:23:d0:0e:81:6e:df:ce:70:e7:0e:
         b2:4e:d4:1d:86:77:c2:6c:f6:4a:69:bb:0d:db:51:2b:4f:e8:
         c4:c5:ab:2b:88:bf:5e:b2:0a:f7:cc:42:05:0f:b0:b9:1f:92:
         7f:b7:f5:93:f4:e5:a9:a3:25:96:82:1e:da:22:bd:d7:6e:53:
         c1:94:cf:43:0e:18:a0:77:33:98:fd:9a:62:a2:71:8a:02:87:
         e6:c1:55:f0:bb:4b:ae:d5:ef:e0:b1:c4:76:b4:7e:8b:89:ef:
         14:b3:df:25:45:00:90:d6:85:b2:4b:e6:72:22:18:41:9e:2e:
         4d:14:22:71:c2:bb:50:9b:8a:28:e6:64:5a:f9:a3:df:e1:70:
         f4:cf:ab:7f:fb:59:36:3b:23:94:fc:c5:e7:a0:14:c2:d4:90:
         d0:b2:2f:a2:10:2a:47:e8:5f:d0:04:57:62:b5:6e:35:fd:00:
         8b:f0:d8:49:38:d5:23:15:d8:49:dc:15:f5:df:47:73:94:64:
         c4:7e:42:f4:04:49:06:ac:71:30:8e:95:c0:d4:f9:7f:cf:06:
         3c:5a:c3:11:d0:f5:f7:e6:89:0e:21:18:b8:0a:0f:e2:f8:5f:
         25:ab:0a:48:42:da:81:6f:f3:9a:c3:a5:5c:7c:e9:f2:31:9a:
         ec:c7:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:49 2026 by rpki-client