This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          YQpo68rAt5V57K5q0HBa71mqWSSRf9OcITIbwkVcgvY=
Subject key identifier:   21:28:C2:CC:2B:60:76:76:E3:D1:C4:A0:0F:20:63:43:9F:6E:CA:4F
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       019C432253A1DFB7FB8A01C03C7C0D3D66B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 16:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:48 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: wB1w2RM0DRpBjLsP04MyWBzqcjTHRvurbGGlA9ijzvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:53:a1:df:b7:fb:8a:01:c0:3c:7c:0d:3d:66:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Feb  9 16:00:48 2026 GMT
            Not After : Feb 10 16:00:48 2026 GMT
        Subject: CN=2128c2cc2b607676e3d1c4a00f2063439f6eca4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:f4:0c:9d:7b:92:a8:e0:b0:cb:98:d1:9c:
                    3f:76:ac:84:a4:3b:31:6e:33:8a:76:78:7d:e4:62:
                    35:f2:aa:d1:54:a8:6b:aa:29:75:a4:be:df:71:2a:
                    58:08:76:76:49:c1:09:c0:0a:34:1f:29:a8:31:3b:
                    9e:8e:23:dd:f0:3b:c2:ee:a9:b0:6a:23:1d:78:e3:
                    c4:a7:c8:ce:60:39:98:90:13:8f:fe:79:a7:1e:1f:
                    e5:a5:ab:b2:f0:61:40:d9:37:19:8f:e3:a4:de:e5:
                    f4:59:91:22:ce:a6:65:08:bb:97:06:e4:e3:d4:d7:
                    ff:be:9f:bd:29:99:2b:e0:22:be:c9:4a:2a:66:54:
                    52:b7:c4:e1:85:5a:a4:3e:6c:9b:32:b7:44:61:d1:
                    21:32:dd:76:37:60:44:21:94:34:9d:e3:1c:e2:03:
                    ca:90:71:77:e5:d3:36:a0:b4:86:2e:8a:ad:51:b5:
                    be:9e:80:d9:cf:d8:5a:0d:83:15:fd:03:de:8f:5c:
                    21:30:ee:bf:d1:ea:5c:54:a4:61:0c:7e:8e:ad:19:
                    ce:49:2d:f8:1b:92:81:c5:03:58:99:28:d3:29:6a:
                    f0:76:d3:7b:80:4a:d5:fb:7f:02:d1:e3:d2:ae:e5:
                    4c:9b:56:8f:a6:11:1a:d4:98:f7:b6:33:c0:8b:8a:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:28:C2:CC:2B:60:76:76:E3:D1:C4:A0:0F:20:63:43:9F:6E:CA:4F
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:78:1d:16:e0:74:11:ff:47:5c:b5:7e:e8:ff:54:d8:94:10:
         ef:b9:c1:22:6f:22:ab:48:60:65:be:e9:ee:a3:80:9f:ba:00:
         28:0f:d7:cc:09:d9:d4:e0:5a:7a:b3:ae:26:a7:17:10:8c:4c:
         c4:43:58:63:21:08:0d:96:4d:d0:41:d3:b3:91:cd:4c:04:b3:
         f8:71:53:76:da:e3:e7:c9:5d:6d:d4:bb:af:2c:d4:87:89:39:
         d5:8c:44:6a:89:e9:4b:b6:50:cb:60:72:09:01:2f:ee:a7:c0:
         42:92:6a:c2:dc:45:66:11:3f:49:34:1e:b0:53:36:23:d3:28:
         cd:49:64:c6:e3:f4:1e:f7:50:9c:ea:c6:04:d8:86:64:b0:ee:
         e2:f8:d6:c0:c8:70:5e:1f:bc:a6:f9:7e:64:52:04:36:08:2c:
         78:07:a0:c9:69:f8:ba:36:da:62:5f:06:cf:42:15:b7:64:6e:
         34:87:07:85:54:46:41:ca:b8:1e:a9:96:2e:5b:48:6c:06:5c:
         d0:65:1a:e6:74:0a:5d:eb:c6:75:10:68:b2:df:49:87:80:31:
         87:f3:f7:40:2e:f5:13:0d:8b:d2:1e:20:16:66:87:b2:2c:e0:
         6c:db:dc:78:aa:22:b6:fc:ae:02:7a:72:2b:23:20:ab:9d:87:
         bc:97:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:19 2026 by rpki-client