This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          2yGUY32F8whWBtd6tPanQOecXwhElRwkO6/VRv1n1ZM=
Subject key identifier:   87:9F:0D:05:70:7D:F1:14:B4:66:8C:24:26:6E:D3:3E:B3:75:65:CE
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       019C4358D7F4DA9951BBD6FAC3F3C1AECE3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: EendhCPgv8mpZRWsecHVZZz8wszpWTRh18e7w5LGwaE=)
                          2: Ol2LcIckb0JEorAeZ9ZW8Jfsn4Q.roa (hash: wPlF6pF4PXwOQzyCGkjuNlYnp29Vxy6PXU2oWbLVg5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d7:f4:da:99:51:bb:d6:fa:c3:f3:c1:ae:ce:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=879f0d05707df114b4668c24266ed33eb37565ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:22:3c:58:5b:5d:b2:b7:55:a0:dc:92:8f:
                    81:80:3d:a2:05:3e:62:b8:38:f3:ab:bf:25:ba:f3:
                    e0:3d:6a:7e:70:2d:47:69:22:9a:37:24:0a:fd:b2:
                    c8:38:1e:d5:2a:99:1d:da:8b:2c:db:6f:c6:0a:31:
                    02:fd:d7:ff:80:0e:11:7b:68:44:d7:91:8d:49:cf:
                    d2:5d:43:8c:82:8a:a3:62:c2:08:ed:c3:82:86:18:
                    74:6e:2e:ff:7d:21:bc:ad:e3:e3:64:39:3c:02:40:
                    1f:ae:22:f7:cf:c1:0e:fc:aa:18:88:72:b0:ae:36:
                    d5:62:65:74:1a:26:59:b1:e2:c3:ca:23:3c:b2:9d:
                    1f:74:ea:0e:c5:65:8d:90:8e:01:bf:4e:29:df:83:
                    33:14:78:50:fb:1b:22:3d:f3:82:c0:e7:91:5b:aa:
                    fc:44:ef:0d:3b:9d:9c:75:3a:8b:ed:8a:54:f1:c4:
                    9f:06:28:13:23:9b:09:cb:31:ed:2f:a0:98:4d:1a:
                    e5:db:f6:38:7b:a2:e6:6f:fa:50:47:56:0a:1a:a4:
                    a5:85:fc:67:99:c6:e5:c5:1d:63:d2:4d:44:80:cd:
                    ff:46:fe:cc:8d:33:74:42:3c:95:26:e9:be:ce:94:
                    ae:1f:c3:bf:60:e7:63:84:b4:54:51:c1:b3:74:61:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9F:0D:05:70:7D:F1:14:B4:66:8C:24:26:6E:D3:3E:B3:75:65:CE
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:88:b1:eb:84:e5:b6:e7:75:64:71:fe:1e:87:5c:b9:fb:
         23:fa:14:08:7f:35:72:84:da:d8:f2:57:36:ca:e5:6c:dc:16:
         3e:95:38:8a:01:14:29:0c:88:e3:4e:bd:ce:5f:e2:a5:32:f9:
         4a:f8:9c:68:48:1e:c3:25:cf:52:3e:8c:82:17:ff:b4:5a:88:
         dd:49:7e:f2:54:cb:25:49:58:28:84:cd:0a:7b:a2:f9:a1:9f:
         93:15:6a:94:ca:ef:72:70:85:27:f5:af:6f:2c:3e:40:2e:78:
         72:28:8d:1e:ff:c7:17:cc:78:53:bf:4a:ac:98:6a:59:51:b1:
         65:50:f1:86:8d:8d:d1:fc:37:bc:20:f2:60:59:b2:00:7b:9f:
         84:50:ee:53:3c:ba:69:b3:6b:02:d3:56:00:10:35:7f:38:b9:
         c2:75:6a:53:b2:35:3d:92:7c:fd:07:fd:51:51:ca:f3:f5:89:
         42:f4:f8:c6:65:01:55:a4:2b:07:c0:2c:70:93:de:20:c3:b0:
         e6:f6:47:98:5f:a7:ee:45:83:7f:62:92:fd:7f:fd:aa:d9:97:
         8c:43:7e:fb:a8:31:4c:70:1b:db:9c:6d:16:4c:a6:46:b1:47:
         46:f2:08:73:f6:30:d9:43:2a:0d:a6:52:fe:bc:ca:d6:66:68:
         0c:c1:7c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWNf02plRu9b6w/PBrs4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDJhNDY2NThjMWQwMWJhYzhkNDM5NjFjNmI0OWU3ODhl
M2NjYzMwHhcNMjYwMjA5MTcwMDIxWhcNMjYwMjEwMTcwMDIxWjAzMTEwLwYDVQQD
Eyg4NzlmMGQwNTcwN2RmMTE0YjQ2NjhjMjQyNjZlZDMzZWIzNzU2NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFwiPFhbXbK3VaDcko+BgD2iBT5i
uDjzq78luvPgPWp+cC1HaSKaNyQK/bLIOB7VKpkd2oss22/GCjEC/df/gA4Re2hE
15GNSc/SXUOMgoqjYsII7cOChhh0bi7/fSG8rePjZDk8AkAfriL3z8EO/KoYiHKw
rjbVYmV0GiZZseLDyiM8sp0fdOoOxWWNkI4Bv04p34MzFHhQ+xsiPfOCwOeRW6r8
RO8NO52cdTqL7YpU8cSfBigTI5sJyzHtL6CYTRrl2/Y4e6Lmb/pQR1YKGqSlhfxn
mcblxR1j0k1EgM3/Rv7MjTN0QjyVJum+zpSuH8O/YOdjhLRUUcGzdGG5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIefDQVwffEUtGaMJCZu0z6zdWXOMB8GA1UdIwQY
MBaAFOhCpGZYwdAbrI1DlhxrSeeI48zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEt
ZmFlOGQ0MmFlNWU1LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEtZmFlOGQ0MmFlNWU1
LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS6IseuE
5bbndWRx/h6HXLn7I/oUCH81coTa2PJXNsrlbNwWPpU4igEUKQyI4069zl/ipTL5
SvicaEgewyXPUj6Mghf/tFqI3Ul+8lTLJUlYKITNCnui+aGfkxVqlMrvcnCFJ/Wv
byw+QC54ciiNHv/HF8x4U79KrJhqWVGxZVDxho2N0fw3vCDyYFmyAHufhFDuUzy6
abNrAtNWABA1fzi5wnVqU7I1PZJ8/Qf9UVHK8/WJQvT4xmUBVaQrB8AscJPeIMOw
5vZHmF+n7kWDf2KS/X/9qtmXjEN++6gxTHAb25xtFkymRrFHRvIIc/Yw2UMqDaZS
/rzK1mZoDMF8HQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:28 2026 by rpki-client