This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          O+pa1gJn7Uyshd+7j9R6423fhf1upSF0hOW3CVLM1qY=
Subject key identifier:   B7:7B:F6:3D:9E:26:6D:B1:35:B1:56:C7:38:FA:98:74:59:81:C8:BD
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       019C446B6515E6C274239CC87651E567A3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          1318
Signing time:             Mon 09 Feb 2026 22:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:14 +0000
Files and hashes:         1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: hLMfRALpBdtkl9IH3Iq8JjIAldhmaVSmfy6earbaPho=)
                          2: l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa (hash: zRFmfmk1D1sRun+Y9I4hMktcVuNfXiGOIRhzxPU2++g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:65:15:e6:c2:74:23:9c:c8:76:51:e5:67:a3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Feb  9 22:00:14 2026 GMT
            Not After : Feb 10 22:00:14 2026 GMT
        Subject: CN=b77bf63d9e266db135b156c738fa98745981c8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:e7:05:fb:fa:70:88:e7:c2:28:6a:7c:b6:
                    08:29:a7:23:1c:b1:fa:bd:bc:c9:02:b0:e5:de:18:
                    4f:56:3b:c0:ea:95:7a:43:46:99:f4:76:03:af:53:
                    00:14:07:0a:bd:48:ad:67:45:5d:94:49:d0:a7:bd:
                    87:8b:19:0e:ee:87:f3:c2:ea:61:e9:10:76:e3:24:
                    14:fd:c4:02:67:09:de:f9:f1:50:a5:24:9a:09:78:
                    c5:3b:f3:28:37:c5:ad:50:9a:e8:66:1b:e2:9c:b5:
                    f1:d1:b5:df:c0:e2:25:e4:8c:8e:65:53:fd:d2:1b:
                    45:cf:ac:df:a2:7b:51:85:92:9a:dc:50:0d:86:83:
                    25:c5:d4:d8:12:f3:e7:8f:81:e4:40:be:83:ec:69:
                    cf:62:c7:2c:51:6e:64:c2:78:eb:ef:bd:22:51:5d:
                    96:d5:e6:26:5c:9b:21:aa:9e:00:41:e4:88:6a:09:
                    7f:30:16:b8:14:7a:d7:45:1f:e4:46:31:52:09:f5:
                    05:be:f4:7d:f6:aa:66:d5:a1:9e:c6:a7:b8:5d:6f:
                    da:ff:8f:13:33:94:ea:11:b7:33:86:f2:a5:a3:1b:
                    5a:a5:55:a2:1e:31:57:f4:20:97:e0:f7:64:ac:37:
                    ae:10:c6:e4:6f:fa:51:e8:73:0e:67:42:a2:24:33:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7B:F6:3D:9E:26:6D:B1:35:B1:56:C7:38:FA:98:74:59:81:C8:BD
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8a:7c:61:7f:b2:50:ca:d9:cf:74:79:c8:3e:02:f1:9d:5a:
         2a:da:16:5b:14:b7:5d:88:0b:b9:a4:21:8f:ab:98:f2:4d:b9:
         48:b6:44:fa:34:e4:e1:99:0d:0a:10:4f:fc:18:b1:19:2a:d3:
         7c:1f:cc:d7:88:e8:c0:d3:2d:9c:ae:29:4a:56:ac:6d:b1:d3:
         65:6a:f3:be:1a:02:cc:26:65:64:fa:cd:1b:82:33:60:e4:0d:
         29:ed:01:0f:20:d6:b3:ed:68:3f:c2:99:50:9f:7f:55:3e:38:
         b5:55:9a:e4:14:2f:4a:6c:37:41:ba:0b:5a:b8:e7:78:45:ea:
         c0:f6:6f:da:a3:e0:25:32:79:99:5b:a0:21:68:13:c8:47:5e:
         bb:36:48:eb:27:cf:64:e4:5a:d9:3d:49:e6:0d:c2:5e:e5:b1:
         76:1f:dd:ec:fe:69:18:dc:96:72:89:eb:02:70:1b:cb:f3:99:
         2d:dc:38:fd:92:9d:aa:29:62:81:df:21:8c:95:c2:30:7b:ae:
         a0:b0:2f:40:c2:92:92:48:9e:bd:42:33:ed:ca:21:97:5a:2a:
         39:86:8c:15:70:5a:04:86:35:32:e4:a9:1e:b0:93:eb:27:0e:
         93:64:b0:0b:bf:37:d5:a1:45:2a:9d:13:ec:57:1b:ac:7d:05:
         db:cc:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:33 2026 by rpki-client