This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          NA4K8OMTtokSOxsdz0bVBfjuu1B6MEdNUhN6zL+g+Fw=
Subject key identifier:   1F:72:81:35:88:EA:3B:58:C4:DB:38:A7:0F:52:C3:DD:5A:1E:70:85
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       019C40FD679CDF9CB7B5585BE7D93C78C2D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0C1C
Signing time:             Mon 09 Feb 2026 06:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:14 +0000
Files and hashes:         1: 3T7apsoCLIRRuPziIRlUEsN-PHk.roa (hash: l4cLFttiGyOfAyk+8L0CJMAKg8dhT7SWDGcyXhUyR1Y=)
                          2: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: bHMN2o8MHofzpSkaZPJ/WMjYWivTQmOkw5yph/5PPuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:67:9c:df:9c:b7:b5:58:5b:e7:d9:3c:78:c2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Feb  9 06:01:14 2026 GMT
            Not After : Feb 10 06:01:14 2026 GMT
        Subject: CN=1f72813588ea3b58c4db38a70f52c3dd5a1e7085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:96:11:a2:d2:ed:c5:42:ea:b6:a5:75:1b:
                    db:6a:0e:6e:fd:bb:12:97:4c:74:4d:dd:0b:13:d0:
                    2c:54:d3:76:99:1b:89:4e:5e:fa:f4:cd:fd:1a:1a:
                    39:b4:f1:18:b2:22:75:13:28:5e:2b:0e:f5:7b:de:
                    bb:56:ff:c4:3d:d0:ac:74:f7:c8:3a:66:af:78:9c:
                    02:d4:0d:99:5c:7f:07:57:81:bc:81:5a:72:e4:77:
                    8d:8b:78:93:1b:1e:bd:f5:e4:55:cd:33:32:b6:f3:
                    fa:2b:0c:fc:b6:40:0a:a0:e3:59:2b:e6:16:e8:16:
                    cf:ff:ab:33:cf:90:30:ad:8e:94:6c:ab:c7:c6:1e:
                    7d:dd:55:39:54:47:a5:cf:d8:78:de:ac:b2:4c:cb:
                    3c:2b:76:1a:f9:c3:b6:d8:52:e3:7a:0e:77:c9:86:
                    f7:7f:a3:57:25:e7:cb:99:45:a0:ee:32:2e:c5:64:
                    c4:62:8e:0f:32:d7:0a:a2:6c:07:00:9d:c4:23:d7:
                    7d:23:c7:52:67:78:47:fd:88:49:03:26:4a:42:1b:
                    50:b5:39:65:87:7f:36:80:a0:c2:ab:5f:7c:80:fe:
                    2f:aa:cf:87:ac:20:a4:d9:57:51:86:f8:aa:ec:2d:
                    9b:20:96:c0:c3:cb:e4:84:8a:64:25:09:ee:0a:08:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:81:35:88:EA:3B:58:C4:DB:38:A7:0F:52:C3:DD:5A:1E:70:85
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:10:5a:db:42:be:3a:85:83:08:75:54:3d:b8:69:34:9d:
         2b:6a:ba:d2:78:fd:5f:d4:ec:62:9e:59:eb:fd:f2:36:04:72:
         1c:03:85:7a:f0:32:4c:1a:83:a4:60:e8:c0:97:76:2b:c4:48:
         c7:de:c8:d6:a7:97:86:2f:9c:24:07:f0:c4:a5:ab:de:d5:d8:
         53:ed:b3:cf:3b:2a:97:e1:ec:c9:cb:f3:f8:ee:72:8a:56:3a:
         7a:a5:7c:85:28:7d:a8:a1:18:67:10:bc:ab:21:b0:d3:dd:9d:
         99:81:91:3b:a5:bd:f5:05:17:e7:47:0f:5c:e6:5e:19:a8:7a:
         02:12:f6:44:70:fb:6d:cd:45:d6:23:02:08:80:3a:ea:c3:8f:
         6f:4c:d5:c9:64:8f:ec:c5:0b:e4:de:56:17:91:da:95:aa:4b:
         a3:8c:70:3f:c2:ce:35:b3:94:4d:38:a3:c3:cb:a7:4c:22:f5:
         4e:ea:df:2d:a5:07:9a:f9:29:fa:aa:e5:bb:4f:ca:1c:fb:58:
         8c:ce:77:3b:e8:92:bc:6e:8c:b1:1e:63:f6:89:0a:93:17:87:
         41:29:2b:a6:68:86:0f:4d:12:59:2a:ae:7a:9d:b0:37:84:a1:
         2b:b5:fb:6d:06:17:36:2c:de:fb:0f:ff:ed:9c:07:4f:16:d2:
         91:26:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:48 2026 by rpki-client