This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          J+qdhKAfPBD2FdH1+05qyi+dekaMOReRxky2WQY502c=
Subject key identifier:   09:19:71:99:58:98:A3:FC:7C:D3:1C:88:1B:E9:EE:0A:B8:0C:9B:46
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       019C4321F5E459CC2FA0C737165439F3D779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          1091
Signing time:             Mon 09 Feb 2026 16:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:24 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: PM+uOcmMU4rnIY8QyCo9Rs9y6y+ud0O0r5lSHAJQJww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:f5:e4:59:cc:2f:a0:c7:37:16:54:39:f3:d7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: Feb  9 16:00:24 2026 GMT
            Not After : Feb 10 16:00:24 2026 GMT
        Subject: CN=091971995898a3fc7cd31c881be9ee0ab80c9b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:a5:49:3a:c3:21:9a:b1:54:86:0a:c4:b1:
                    a0:d9:1f:3c:b6:c0:8c:89:19:37:a3:c9:17:c4:92:
                    ca:76:22:77:b7:db:1a:07:c6:7f:ae:69:ff:c8:95:
                    1f:11:49:b6:f1:ff:2c:e6:0b:61:d0:95:4e:0b:5a:
                    e6:44:25:ca:a5:3b:a0:c4:bd:6f:76:e9:75:89:61:
                    26:7f:5a:89:dd:8a:af:28:c2:60:ff:50:74:06:9a:
                    43:f3:ae:a9:93:ec:de:d3:64:3f:dd:7c:33:2d:8f:
                    2f:bd:9b:62:81:df:63:25:31:f3:a5:f9:72:e4:42:
                    0c:c3:71:23:af:e3:1e:6e:fe:fa:e8:00:ae:1f:42:
                    47:16:25:df:c0:a3:fb:d9:ff:19:17:a0:f5:d5:db:
                    6d:6d:96:8f:42:ec:2f:05:e9:7e:93:e3:22:44:26:
                    65:7f:21:28:ef:25:e8:8c:e6:57:ee:d6:43:58:e8:
                    fc:4a:bd:f4:6a:d2:01:8f:41:29:8e:88:f4:b3:55:
                    e9:70:d4:52:46:63:3b:62:99:6a:7a:e2:1e:a0:0c:
                    ae:9f:23:93:00:eb:b6:06:a2:ff:ad:d2:f6:69:8f:
                    4f:d9:cf:75:44:7e:8b:11:c6:e8:0f:c2:5b:09:f9:
                    5e:4c:a4:aa:a3:ed:08:4f:ba:b7:a9:22:55:97:d9:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:71:99:58:98:A3:FC:7C:D3:1C:88:1B:E9:EE:0A:B8:0C:9B:46
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f2:da:73:68:56:7d:b4:60:84:e1:ec:d4:be:ed:92:62:c3:
         80:22:3e:ba:86:dd:14:1f:ce:86:7a:61:3f:3b:57:26:56:ca:
         9f:ae:07:40:8e:8b:04:f2:91:47:f4:5b:33:59:18:c4:90:af:
         7f:1d:ea:d1:a8:ae:d1:28:d1:11:f7:9d:84:30:ba:7c:d3:46:
         70:a2:8d:96:45:da:8e:bb:b2:df:c9:10:5f:62:6c:59:98:10:
         f2:ec:48:05:93:0d:df:0d:21:83:7c:e9:bb:47:7c:68:ab:4b:
         07:5d:ae:e3:c5:ba:9b:f1:de:40:ad:99:63:c5:b0:77:9c:26:
         e2:a1:5e:d3:db:79:93:9b:70:c2:ad:bc:8a:61:2a:fa:93:44:
         32:d9:35:2f:fc:1d:c8:9f:31:df:02:d8:df:36:a4:dd:e6:9f:
         12:44:c9:92:f6:72:f0:8e:e5:b7:67:cb:7e:4d:d7:f1:17:3d:
         e8:84:21:36:a4:97:b0:ca:09:c6:4d:64:e2:c7:8e:ef:31:62:
         54:a3:d7:15:65:e8:70:cc:bc:e3:20:2f:23:45:91:06:bb:6c:
         17:28:76:53:7d:d8:2a:20:13:42:b3:12:83:01:c3:22:0c:43:
         4b:21:b6:7f:3a:8b:97:bd:f2:13:70:9b:44:20:48:25:3c:e6:
         0f:a6:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:23 2026 by rpki-client