This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File:                     P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier:          Rk7pZLXaZ1P37TPMwqlOMyfjYF6JU5EggSa7GlKTAO8=
Subject key identifier:   B6:F0:F6:97:A8:96:95:A3:C0:A3:90:4C:8C:A5:A8:3D:05:12:E8:46
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer:       /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial:       019C4358FAC29C5C78807FEC043012337040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:30 +0000
Files and hashes:         1: 1KXvQIh327qa8zgtbWEnrPoCoxU.roa (hash: TbQTpElFCKmdyIXdOK2W/0UzDCWZ7/Rjwh/zQFAlE/U=)
                          2: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: CVwnCFfKYXHrutPcel8JNnGXcfYvJA+8xigOLz24zE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:fa:c2:9c:5c:78:80:7f:ec:04:30:12:33:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
        Validity
            Not Before: Feb  9 17:00:30 2026 GMT
            Not After : Feb 10 17:00:30 2026 GMT
        Subject: CN=b6f0f697a89695a3c0a3904c8ca5a83d0512e846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:f8:23:98:ad:d0:1f:ca:80:b8:2e:c7:f6:
                    16:11:c8:84:d8:e2:14:7b:d5:9f:1a:ff:f3:57:1a:
                    ba:28:16:25:60:f6:f7:cf:41:1a:59:e2:2d:95:9b:
                    0d:24:f0:c8:5f:1f:31:81:da:a6:41:2b:8e:b4:82:
                    27:bf:9c:5c:17:b0:a4:ec:cd:7b:4d:43:74:5f:bd:
                    20:a9:30:93:e7:62:4d:08:66:f7:e6:b1:ca:db:64:
                    a7:b6:fa:43:98:d1:52:cf:96:c4:15:24:ae:b1:c2:
                    e2:80:11:26:e3:7e:2d:8a:f4:a3:c7:f9:73:e0:66:
                    f6:b5:34:c8:05:4a:df:6c:d0:c5:40:82:d3:c8:ff:
                    bf:a5:6b:f2:c2:e4:d8:5f:af:61:2c:8c:22:ea:7e:
                    57:72:58:1e:c0:f8:71:5c:4e:20:cc:ae:51:fb:97:
                    f0:6d:d9:70:8b:09:d9:2f:4e:02:35:b9:51:00:53:
                    c0:17:2f:9c:33:6d:4d:ec:ff:72:4f:ef:b2:71:5b:
                    4d:b0:2c:98:67:c5:8e:9c:71:c5:ca:fd:e4:94:ca:
                    b2:ed:f0:70:43:16:ba:64:c9:0e:a6:38:ba:a4:2c:
                    8e:7c:8f:d9:9e:84:ad:57:74:fc:ac:16:fa:1e:53:
                    f1:16:2a:f9:d9:f5:7a:a5:f6:2d:22:68:e5:c5:41:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:F6:97:A8:96:95:A3:C0:A3:90:4C:8C:A5:A8:3D:05:12:E8:46
            X509v3 Authority Key Identifier:
                keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:da:f6:e0:83:e4:b0:84:f9:48:23:9e:96:7f:5c:26:85:
         38:f0:97:4d:5a:ee:af:d8:9a:da:e4:1a:c2:12:2a:09:bc:5b:
         9d:ad:5e:ba:9f:7c:0e:43:9f:14:19:07:17:55:4f:b0:e6:bb:
         51:e6:cb:13:1d:05:10:8b:ee:59:6d:bd:cc:3d:31:e7:f1:a5:
         bf:84:40:05:5a:12:34:91:1e:ce:b9:86:33:47:22:15:f5:a7:
         86:bf:31:80:e3:96:8c:1f:4f:63:f7:ff:0c:ae:82:8b:5c:5c:
         cd:81:4d:33:4b:b1:f5:2a:3b:b3:7a:f5:91:e2:de:73:95:78:
         ef:0c:32:b4:4a:5b:d2:d6:63:d1:69:ef:23:5d:5c:d5:30:4a:
         58:96:8a:d9:4e:93:99:3b:34:c6:06:06:dc:f4:c2:cb:0a:e1:
         a0:23:37:dd:d1:f5:71:96:f0:4b:98:db:23:e7:03:5a:ca:67:
         fc:28:2e:85:ca:d1:eb:d7:74:6a:2a:44:ef:62:35:18:4c:91:
         7f:a6:59:d8:49:6b:7e:d0:59:c6:97:b2:4c:99:3a:21:b3:f3:
         39:97:76:36:c7:2c:95:6e:16:fb:e5:39:f3:22:5f:23:bd:56:
         25:65:16:9d:e2:eb:b8:81:5c:93:3e:13:4d:d3:fa:3e:e1:0d:
         69:30:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:28 2026 by rpki-client