This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File:                     6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier:          79+Ye/z7s/TXnZmx14S5xvI8WqVHEl23pEK9NSwhrz8=
Subject key identifier:   58:6C:EA:77:C4:08:BD:42:52:96:AC:B6:F0:A7:43:54:E7:17:B8:DE
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer:       /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial:       019C43FE5EC4AAB71201B75704A5CBF8E014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number:          022A
Signing time:             Mon 09 Feb 2026 20:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:09 +0000
Files and hashes:         1: 40mGcXCMHPuRla1zKGXyXZBVzvs.roa (hash: WfYQcn+9zI1kuNsKzotUcFlUBcLcTv4/3QyWYbcWs7o=)
                          2: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: lg0xo0TLvs4VposzwNNlBvQ1DCbtP+4vBAr3IGwaVvw=)
                          3: OtBfd7lwBBx9oZDAv86N0_1cG1M.roa (hash: mYV8iF1/FRjdO4p86cpzPjgZ6mNMXzTtT3N1Gdwv9LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:5e:c4:aa:b7:12:01:b7:57:04:a5:cb:f8:e0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
        Validity
            Not Before: Feb  9 20:01:09 2026 GMT
            Not After : Feb 10 20:01:09 2026 GMT
        Subject: CN=586cea77c408bd425296acb6f0a74354e717b8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:e7:f9:d4:4c:50:c5:26:93:52:44:c1:ad:
                    fd:fa:fd:84:dd:71:41:d3:fb:33:d5:bd:de:47:f0:
                    29:09:7c:21:39:e3:62:58:66:c8:eb:d1:ed:88:04:
                    84:1b:f5:97:d8:4b:94:07:9a:ba:ac:ad:f5:38:13:
                    f9:cb:42:62:d6:82:e9:13:27:8f:b8:4b:95:c6:53:
                    2d:c1:80:c4:b5:0c:06:8b:49:cd:13:ae:2c:1d:3e:
                    bc:51:98:14:0e:ad:46:ac:a0:76:c2:b3:c9:89:84:
                    f8:6f:6a:fb:33:d6:7d:f5:26:1f:d8:73:2d:82:ed:
                    35:5a:06:0f:1e:22:65:ce:be:1d:12:7f:2b:83:69:
                    c7:a6:ae:79:e4:ea:9a:0d:b2:2b:55:4f:bc:65:9d:
                    a1:50:25:d8:37:b7:e1:6b:a3:87:4a:3f:e6:31:0d:
                    28:ed:7b:02:bc:01:05:ee:fb:44:d8:cb:bd:2f:41:
                    b5:06:9b:fa:db:99:a9:02:09:8e:9e:79:53:0a:d4:
                    c6:d4:43:f9:07:60:36:af:f3:33:74:35:ce:3c:53:
                    c5:9b:ac:b2:33:bf:7c:18:44:00:c9:2b:64:28:f2:
                    ab:a9:a6:7c:73:80:2a:8a:c3:49:42:da:26:75:31:
                    18:1f:42:22:23:ee:f8:d8:77:1f:00:e7:31:48:c9:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:EA:77:C4:08:BD:42:52:96:AC:B6:F0:A7:43:54:E7:17:B8:DE
            X509v3 Authority Key Identifier:
                keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:12:c0:b0:0c:43:30:40:27:be:6e:e6:6a:53:13:b4:73:
         ea:d2:e7:f6:91:8f:22:b9:d1:89:7d:9d:22:d5:65:34:23:2f:
         a5:d9:e3:6e:5f:a8:fa:91:01:09:4e:29:e4:ab:5f:9d:cb:dd:
         87:9e:7d:61:f2:b5:17:e2:9f:31:ff:20:39:fc:8b:09:38:f1:
         b8:a9:42:05:de:02:b0:59:dd:c1:f0:c9:eb:1d:72:53:2f:10:
         b7:c9:c8:42:c4:2f:fb:8c:ce:a5:7d:ec:b6:37:66:28:e7:fa:
         08:e2:56:4f:2b:19:ed:98:83:f8:c1:9f:3a:dd:7b:43:99:28:
         5a:66:2c:ba:51:03:68:96:70:d9:80:8d:ed:e4:a4:02:3e:70:
         2c:2d:1d:ef:05:78:7f:04:15:9a:85:16:a0:5c:a3:b5:a5:cb:
         c5:8c:98:81:4e:f9:3d:44:c7:08:ab:91:d9:3f:88:ac:6b:71:
         0f:91:e1:65:2a:b6:79:2e:8a:44:82:a8:58:d8:46:70:d8:e4:
         a0:ef:fa:2b:e2:70:07:ec:79:7d:79:64:c0:0e:75:70:12:15:
         76:b7:51:c2:e4:ae:97:d5:fc:b4:60:31:92:6f:84:07:90:4b:
         d3:94:87:61:90:46:5b:6e:91:d0:32:65:d1:28:0f:75:da:9a:
         27:77:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:06 2026 by rpki-client