This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          HUenKgftywsNtXmAxslwL8XZpTLqhtJjuGbqI3aMQMg=
Subject key identifier:   87:67:14:2E:F6:64:0C:BD:53:FF:7E:17:39:29:53:D3:DE:00:E1:CC
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       019C42EAF6D24897F82EDCCDDC4B873674CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 15:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:20 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: QDprCtKOoIfN6+yFtYNg/ZRNISkBWuACClX11CZARQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f6:d2:48:97:f8:2e:dc:cd:dc:4b:87:36:74:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Feb  9 15:00:20 2026 GMT
            Not After : Feb 10 15:00:20 2026 GMT
        Subject: CN=8767142ef6640cbd53ff7e17392953d3de00e1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:4b:b4:57:ad:58:90:ea:0e:c5:9d:73:cc:
                    ae:91:57:b6:7c:31:dc:c4:7e:fb:c8:82:4a:74:6e:
                    8f:f4:42:f2:0a:ce:38:02:d0:8e:ac:d4:83:7d:db:
                    07:4c:72:b7:71:c8:27:5c:04:57:b6:59:da:c4:ef:
                    4e:a9:62:a5:52:e0:38:bc:26:a7:20:74:44:fc:e3:
                    08:29:84:80:32:29:37:cb:05:85:3b:d4:11:10:88:
                    dd:b7:e2:73:c5:6f:14:6a:f8:3a:3e:44:a1:b5:b6:
                    22:2a:a7:f1:81:31:84:8a:a9:b4:24:9d:eb:a0:39:
                    73:0b:82:45:30:b8:62:0d:69:d4:16:6c:55:da:0b:
                    d2:f1:02:64:78:63:ef:4a:01:4e:c6:6a:e3:3f:4d:
                    50:4c:d0:f5:99:4b:8b:c3:b7:71:5a:23:64:4e:56:
                    52:23:d9:7b:cf:1b:c7:99:de:eb:e9:32:f7:aa:0f:
                    a0:de:49:f5:60:25:d1:42:e3:7f:f2:6c:99:82:06:
                    1c:fe:65:e3:05:35:1f:dc:5f:9f:db:8f:a1:8c:e6:
                    51:35:d3:54:4a:17:d0:f1:6f:85:3e:9f:7b:c2:a3:
                    2e:43:cf:a2:c9:a4:a2:a5:a9:e0:73:bb:96:2a:90:
                    b4:0a:e5:02:eb:e8:63:7e:a0:fc:ab:29:23:bb:75:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:67:14:2E:F6:64:0C:BD:53:FF:7E:17:39:29:53:D3:DE:00:E1:CC
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:22:f4:0b:45:5c:de:1f:fb:b1:64:b6:a3:fa:97:3b:96:
         06:24:15:7b:aa:72:d1:fb:46:46:ba:7a:b1:43:e4:cc:b8:4d:
         71:51:db:5e:96:68:3b:a9:f5:2e:af:da:51:4e:8b:ab:f6:3f:
         c2:a7:e3:b4:68:d9:03:1a:f8:60:d5:b5:09:94:88:66:56:20:
         38:6b:42:02:75:d2:5a:ec:cc:b1:85:0c:72:24:f6:25:0a:1e:
         e9:e0:0f:e7:5c:cc:77:54:dd:bc:99:8e:17:eb:7f:6c:64:13:
         26:41:48:82:f1:1f:13:c8:75:11:1e:2a:12:01:28:74:ed:5d:
         dd:44:25:df:38:13:b5:20:3e:5c:6a:1a:67:68:47:a5:65:47:
         2c:39:5a:6a:a5:91:47:d2:31:50:c3:9b:fc:17:7a:36:84:33:
         c0:7f:58:4c:6d:2d:5f:8a:c4:88:5e:5d:07:f9:51:bd:35:43:
         0a:85:5d:a9:8e:8b:16:47:d0:03:0e:9d:55:1b:14:e3:04:1a:
         24:d5:0c:03:03:5d:00:58:0c:f8:cb:ac:86:7b:0e:56:d9:41:
         80:4b:5c:1e:8c:02:70:1d:db:b2:a2:29:8c:28:31:4f:3a:0e:
         cc:fb:a3:7f:70:bb:5c:18:e6:1e:a3:cf:f1:9e:d1:ad:5a:ed:
         8b:77:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:42 2026 by rpki-client