This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File:                     d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier:          Bo6TPTLoH4qn41PI+wOJX+K7RD1FVfXVs8dT8WJcud4=
Subject key identifier:   77:BD:D3:2C:DF:2B:5B:C6:42:C0:93:42:FD:90:21:3B:6B:36:7E:E4
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer:       /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial:       019C41A1E28B3CB50BA6C6AAC9D070CD1EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number:          04AA
Signing time:             Mon 09 Feb 2026 09:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:54 +0000
Files and hashes:         1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: BAyPOEfH9bhUsIXAA7lWdCuHJ+7osp02jtRKQwLA1EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:e2:8b:3c:b5:0b:a6:c6:aa:c9:d0:70:cd:1e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
        Validity
            Not Before: Feb  9 09:00:54 2026 GMT
            Not After : Feb 10 09:00:54 2026 GMT
        Subject: CN=77bdd32cdf2b5bc642c09342fd90213b6b367ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:a9:2f:91:74:dd:44:b4:3c:fa:19:07:6a:
                    46:23:b8:58:3f:af:58:43:2c:7d:59:b8:e4:4e:6d:
                    86:0e:45:e0:78:dc:bf:46:bf:c9:51:93:58:d5:56:
                    66:1e:f5:dd:f6:77:d7:c4:1c:da:8a:55:b8:2a:b2:
                    cd:fa:6b:c5:1b:a9:57:62:e4:ac:ed:75:17:3e:60:
                    47:21:05:63:a3:e4:6c:b1:a1:c6:d0:39:84:a5:53:
                    cd:64:35:ed:20:1e:38:d5:15:63:b1:5c:00:3a:81:
                    ea:11:0c:cd:62:b8:97:b5:e9:d4:c4:a2:5a:22:75:
                    be:01:fb:79:61:27:95:89:ee:75:1e:0f:95:b4:84:
                    23:75:62:8a:c3:16:05:14:76:94:87:d6:f9:8e:8f:
                    a0:dd:e1:05:d6:b7:ef:00:57:ae:62:fc:2d:30:c1:
                    c0:85:ea:34:9c:6e:f0:d9:71:64:d5:c6:b2:de:7f:
                    22:fa:bb:2f:8c:97:c2:8e:2e:e4:b3:15:1a:8a:b3:
                    05:e1:69:4b:b5:3d:0c:01:42:07:9c:a0:ed:79:7d:
                    a3:8c:06:10:63:94:30:87:82:50:39:ba:ef:c4:20:
                    cf:31:0a:c2:38:4f:12:28:25:0d:f6:07:9a:8b:e6:
                    ba:09:19:4c:56:7f:78:20:44:fe:3d:9e:27:41:62:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:D3:2C:DF:2B:5B:C6:42:C0:93:42:FD:90:21:3B:6B:36:7E:E4
            X509v3 Authority Key Identifier:
                keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:02:53:34:c6:c1:82:25:d9:7a:89:c6:8a:84:0b:c1:dc:1d:
         cb:4f:7d:d7:8a:3d:8b:ae:5e:e8:2e:5c:a8:d0:34:53:5f:c4:
         f2:40:b9:44:dc:ff:fb:8c:27:d5:6f:2f:76:f2:dc:23:f9:c5:
         e5:26:28:37:f4:f3:e3:41:e8:5b:34:91:a8:3c:5a:b9:30:96:
         af:a5:ae:6d:c9:fc:06:1f:56:c5:7d:ee:4d:7f:06:d9:98:9a:
         fb:89:a8:21:03:59:d4:1f:a1:f1:76:85:d0:f6:f8:f5:56:19:
         37:0b:d7:34:29:0b:a7:5f:bc:a0:ab:09:45:8b:b8:b5:4c:13:
         b8:ea:3f:7d:2d:0b:8a:7e:6c:23:ed:0e:1d:50:25:5b:54:b5:
         7d:95:4a:6e:d8:cc:cf:cb:e4:33:d4:41:53:a6:65:b1:d9:d7:
         f6:63:bb:6d:6e:06:9e:87:bb:9c:71:e5:c4:8e:9f:dd:f9:68:
         f9:44:07:e0:00:80:3c:39:e4:05:b3:0b:d4:1e:1b:83:3f:6a:
         2a:5a:eb:f5:ec:94:f1:39:11:73:c6:07:94:22:dc:df:25:24:
         aa:47:66:e0:03:39:de:10:b5:97:17:7a:65:d7:32:27:cd:f0:
         02:c9:c5:53:c6:d7:6a:1c:29:08:e0:06:32:fc:12:5b:42:ba:
         46:e7:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:39 2026 by rpki-client