This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          OuCDHn2WmXdQ1NbBqMvABDSen50OaaMPcuYoET7445s=
Subject key identifier:   FC:B2:26:11:F4:C7:2A:6F:05:AC:5B:7E:0F:74:A7:32:15:24:DE:F5
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       019C41D86C93E10756F1D7D5F4935CEAE1E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0F05
Signing time:             Mon 09 Feb 2026 10:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:28 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: YrevMqHuUiRdU8jWIZUcjl+AGe0ikBYCqaIJbLe+sBU=)
                          2: r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa (hash: ekj20SSmXzNkPCb5b7krZxHKnMBgi0MEQBHep36Ait0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:6c:93:e1:07:56:f1:d7:d5:f4:93:5c:ea:e1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Feb  9 10:00:28 2026 GMT
            Not After : Feb 10 10:00:28 2026 GMT
        Subject: CN=fcb22611f4c72a6f05ac5b7e0f74a7321524def5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:cd:e6:ea:f4:2d:ba:2a:fb:73:0a:a1:7b:
                    ee:c3:d6:2f:40:c0:11:ea:69:ea:71:00:e2:14:30:
                    19:0b:90:68:d9:47:f0:12:55:ce:9d:78:d9:9f:97:
                    b4:5f:4b:86:aa:6d:64:71:87:7c:11:98:93:38:c0:
                    aa:ed:28:b7:1e:a6:5a:fc:3a:39:06:9e:a8:2b:88:
                    b4:0e:39:94:1e:19:5f:2c:dc:70:67:12:1e:70:2a:
                    2f:17:c9:28:4d:f2:9b:4a:a7:67:3c:f3:4b:90:47:
                    da:11:c9:37:ca:41:83:4f:5f:92:5e:bd:34:81:b7:
                    4a:96:cd:a0:48:93:10:67:9c:5e:91:de:be:ec:47:
                    de:ec:6e:5a:f0:8c:87:ed:0b:79:42:ac:15:92:e3:
                    3d:62:60:68:79:9a:73:94:37:15:d4:fc:5c:9d:95:
                    2d:b4:c1:41:d0:2c:d2:6b:1b:3f:98:60:a5:33:59:
                    c8:24:ef:cc:5c:5a:c5:59:a2:ac:c8:af:de:a7:1f:
                    fa:79:8b:66:ba:3f:df:a6:f4:e1:46:9c:fe:b0:bc:
                    05:dd:b7:e1:b5:6c:52:51:72:87:1f:33:0b:63:d1:
                    72:ce:80:16:eb:84:e6:18:99:b6:29:9a:72:9a:84:
                    29:4a:66:b9:10:31:e5:1d:30:5e:f7:c5:6b:57:a5:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:26:11:F4:C7:2A:6F:05:AC:5B:7E:0F:74:A7:32:15:24:DE:F5
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:36:87:f2:52:1f:f2:bc:e7:47:6d:0f:15:ef:8d:d1:9f:b0:
         b2:54:b9:d5:b0:df:87:c3:43:71:3e:f5:df:06:59:f1:ae:6a:
         a2:fa:3d:4f:6d:24:88:6a:8d:89:56:0b:ab:dc:7f:a8:f3:b0:
         7a:c4:4d:61:5f:73:db:1f:3d:67:3a:67:d0:81:00:ce:c3:12:
         bc:72:da:3f:06:58:d5:a5:06:0e:4e:88:26:5b:a4:6f:a4:4a:
         3e:09:dd:9f:ad:49:f7:fa:86:4a:b3:a0:2a:36:aa:99:3d:18:
         ec:33:c8:70:4a:44:41:5d:b9:50:b3:06:9a:43:73:21:e4:c1:
         af:7c:0a:05:4d:45:81:a9:4b:32:8f:e6:7a:4f:b4:b3:4a:67:
         8c:7e:43:d5:e2:a4:17:ac:b8:5d:29:e4:13:b2:06:30:e9:87:
         d9:bd:53:1d:64:17:b5:66:18:59:77:b3:55:cb:c5:67:87:51:
         39:52:07:49:84:da:6c:ef:3d:e6:2a:5a:44:2a:72:8d:51:8a:
         c9:dd:fc:20:44:6c:78:30:a2:7c:2e:2c:f8:54:89:aa:f5:45:
         09:e9:7f:48:08:1d:e8:bf:88:94:59:18:30:1e:cc:4d:8c:c6:
         4b:ab:c8:7d:7e:4b:00:1f:04:79:87:1f:b7:74:e0:19:08:1d:
         ea:64:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:22 2026 by rpki-client