This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File:                     6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier:          2+JHk69wfiENBTmHpCY9VhLW8lK47GSD+n/1pnWgrzk=
Subject key identifier:   9D:36:DB:E8:92:DD:A4:64:DA:AF:FE:71:CE:95:AB:16:CD:79:F9:33
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer:       /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial:       019C43222D7AB80EF2856076F980C3C5CE51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number:          03BC
Signing time:             Mon 09 Feb 2026 16:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:38 +0000
Files and hashes:         1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: NMUx2v1qx4joecnsS9pf0BqHhu5o4dK1iFPvtMBkwmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:2d:7a:b8:0e:f2:85:60:76:f9:80:c3:c5:ce:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
        Validity
            Not Before: Feb  9 16:00:38 2026 GMT
            Not After : Feb 10 16:00:38 2026 GMT
        Subject: CN=9d36dbe892dda464daaffe71ce95ab16cd79f933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:e0:67:79:f8:78:d5:53:21:d0:68:eb:64:
                    38:c5:ff:a9:2d:dd:fb:a5:59:6b:6f:9b:df:5b:34:
                    c2:15:bc:45:ca:5b:a9:f3:67:64:c7:e6:00:22:de:
                    32:05:61:34:8c:e1:bb:92:16:f9:e8:cf:37:c1:fd:
                    b4:eb:42:f6:7d:ac:3f:c4:26:9e:83:1f:87:0a:6e:
                    96:3b:34:cd:13:01:dd:13:c3:6c:f4:52:11:42:68:
                    ea:02:ee:bd:05:4c:7e:24:a3:1c:3a:dc:d4:a9:bc:
                    32:cd:76:f9:be:30:21:47:a5:ab:fb:68:fe:17:34:
                    75:aa:72:96:ec:9d:04:13:08:cf:85:45:29:79:6c:
                    b8:4c:70:a0:2c:f9:5c:68:5f:8b:34:90:fc:7b:59:
                    90:0a:93:c5:95:83:b8:e0:33:f1:89:5e:cc:ea:15:
                    0c:7e:84:d1:a3:4b:09:b1:3e:e6:ed:02:31:7c:f2:
                    37:af:83:b2:d6:79:69:da:4b:6f:d3:6c:ed:78:8d:
                    a9:be:66:93:b2:fc:4c:66:f3:28:0c:e0:c9:06:88:
                    60:f5:3c:88:98:da:ac:40:ad:43:b5:4f:d7:4c:7d:
                    e5:8b:7c:b8:58:f1:51:f7:a0:d3:59:b1:67:15:b3:
                    5a:66:d0:0e:74:4e:d9:2f:f6:87:8d:ae:dc:5b:53:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:36:DB:E8:92:DD:A4:64:DA:AF:FE:71:CE:95:AB:16:CD:79:F9:33
            X509v3 Authority Key Identifier:
                keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:16:c8:64:d2:e6:0c:2e:8a:25:77:79:ec:4c:70:41:bb:
         2c:38:8b:b1:3d:60:20:5c:20:7e:eb:e8:c2:76:be:2d:26:24:
         54:dc:f5:03:d9:ed:ff:27:3c:45:a5:2f:91:47:4e:43:02:6a:
         b2:7f:ff:77:1b:6e:bf:a1:87:cf:37:bf:cb:3b:21:5c:a6:9b:
         2f:1b:b2:f0:b9:5a:4b:18:7a:60:9e:2b:70:68:49:07:0a:ac:
         85:fc:3a:b6:2c:41:54:9d:59:13:24:50:07:47:53:4a:58:de:
         97:7d:e3:54:d6:20:9a:86:ec:24:65:45:3d:b7:cb:11:ec:d0:
         d4:82:17:59:31:37:67:ce:ac:39:04:87:ca:f8:1c:00:44:1a:
         48:6f:9e:78:00:54:ca:97:2d:6b:99:a8:eb:d1:0b:e8:63:11:
         ca:4d:98:9c:2a:7b:a3:8f:91:a1:9a:86:fa:6b:24:ff:f8:9e:
         da:4c:1b:b6:b5:7d:c2:14:6a:52:30:da:e2:e3:3e:35:0d:49:
         ba:46:5c:85:43:fb:6b:8d:55:dc:9f:b9:e8:00:55:ea:33:71:
         14:42:19:c1:34:aa:e9:95:f3:6a:9e:49:94:66:65:0b:8c:7d:
         8c:3d:77:ea:87:4b:a0:3f:87:16:d7:2c:35:8e:43:54:d9:fe:
         33:7d:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:54 2026 by rpki-client