This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File:                     h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier:          xttLFa0RPramz5ePFnXl1HsH2LYKSG2025VHb1VdauQ=
Subject key identifier:   6A:AC:52:7A:6C:A3:50:99:23:1C:ED:B6:A1:72:1E:E8:8F:26:FD:E3
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer:       /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial:       019C420FB9C54CFC4C6DD6D8B74043BEE805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number:          0F87
Signing time:             Mon 09 Feb 2026 11:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:52 +0000
Files and hashes:         1: _gW6_ATArxZNHvgaWQ05KuNKBX0.roa (hash: dFaWNsbS79y0+AVBCBe7DvN6VorOmUFS6jQbSvd7JW4=)
                          2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: DrwngP8CWZtLe0ypn3mYZ7GXQkrmi3LYvoW+x++ehpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b9:c5:4c:fc:4c:6d:d6:d8:b7:40:43:be:e8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
        Validity
            Not Before: Feb  9 11:00:52 2026 GMT
            Not After : Feb 10 11:00:52 2026 GMT
        Subject: CN=6aac527a6ca35099231cedb6a1721ee88f26fde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:21:96:66:f9:04:91:40:a5:29:4e:a5:55:
                    a2:1e:45:1d:43:90:58:ae:3d:0e:b3:2b:e6:7d:fe:
                    f8:ba:ca:53:6b:6d:44:58:6b:21:53:a4:fb:89:2b:
                    52:d9:e5:fb:83:58:3d:e2:c7:70:7c:d9:dd:d5:bd:
                    51:f5:03:7c:2f:b1:24:7d:29:a1:7f:50:fa:90:6a:
                    03:6e:46:66:35:4d:36:0d:62:89:a0:36:b6:cb:f2:
                    34:21:66:88:31:70:9b:7a:d9:2b:a0:54:32:95:bc:
                    64:32:13:7f:67:67:5e:08:f9:5b:02:50:78:81:97:
                    46:87:26:ea:d2:ea:c8:77:74:3e:40:0f:50:96:d4:
                    57:ae:ff:a7:44:a3:5e:2f:6b:fa:31:18:62:e0:bc:
                    d8:a1:d5:f5:12:1b:32:41:f4:95:b8:12:c8:e0:e9:
                    8d:d0:3e:a9:c6:3b:d3:cb:ed:04:1c:db:a7:50:73:
                    ca:7c:e9:d1:8d:a0:22:ab:1e:0d:6e:32:7e:49:25:
                    1e:b3:b3:ea:4a:b0:48:e8:d0:fe:5b:16:83:e4:b2:
                    33:b9:ee:e0:34:7b:4f:60:61:43:f6:29:cb:11:42:
                    58:24:37:0d:76:b9:4c:22:88:63:f0:94:bf:a0:12:
                    fe:5a:80:03:dd:c0:23:53:c2:9b:8b:a2:0e:f1:3c:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:52:7A:6C:A3:50:99:23:1C:ED:B6:A1:72:1E:E8:8F:26:FD:E3
            X509v3 Authority Key Identifier:
                keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:32:0b:aa:cf:58:b9:41:30:47:c5:3a:20:1b:c0:19:fa:
         fc:05:da:20:9b:32:3e:05:81:ac:f6:a2:bd:5f:2a:c6:36:16:
         1f:0f:d0:bc:65:a4:71:2b:76:84:a0:ce:9b:04:9f:ab:4b:cd:
         8d:2f:45:6e:df:7d:51:f8:1a:ca:3d:f1:0a:97:4f:b9:f8:50:
         dd:99:75:9a:3c:b6:8c:f4:d3:81:d6:21:54:7e:0b:04:46:28:
         38:5a:ff:68:e8:9d:65:d8:af:12:3e:d4:02:f9:85:32:d7:58:
         05:6d:f9:20:c4:a9:43:ab:04:d1:68:d3:a6:ea:5c:82:4d:2d:
         9d:09:ee:60:2c:06:62:2f:d3:01:02:8b:23:a1:68:a5:4e:7f:
         ae:7a:01:7a:0b:b0:d7:25:56:58:78:70:27:36:fa:18:1c:ad:
         2e:4d:ef:50:6a:43:f1:be:28:b2:c3:7d:8b:8b:38:a6:5e:46:
         e3:6e:9f:9f:7f:d0:e3:e9:00:91:09:05:df:ff:77:31:cf:d2:
         88:c5:d8:97:fc:96:3a:ad:fb:df:02:28:04:78:c3:b1:ee:f8:
         78:2b:37:25:bd:e4:aa:70:27:79:00:ae:e5:88:c3:00:6a:37:
         c3:75:91:24:f5:76:8e:3b:c9:93:d3:11:55:64:62:3d:1b:bf:
         22:08:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:54 2026 by rpki-client