This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          AS7ZlCAvWxIIgVUqG5GJHDWjPk5yHxJ3O2NkbMNnuHQ=
Subject key identifier:   5E:0B:E9:3D:6A:0B:BC:DB:10:8A:98:51:16:B1:99:AC:33:4E:64:5B
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       019C273D70F29418B8C250A571843E461A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          0B59
Signing time:             Wed 04 Feb 2026 06:01:03 +0000
Manifest this update:     Wed 04 Feb 2026 06:01:03 +0000
Manifest next update:     Thu 05 Feb 2026 06:01:03 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: FbzMXSrpB7VCdVD1Wp5UxZYC9LwQUX5FM8ndqjDgQ0Q=)
                          2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
                          3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:3d:70:f2:94:18:b8:c2:50:a5:71:84:3e:46:1a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Feb  4 06:01:03 2026 GMT
            Not After : Feb  5 06:01:03 2026 GMT
        Subject: CN=5e0be93d6a0bbcdb108a985116b199ac334e645b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:f3:84:97:92:e0:02:e8:dc:80:f9:b6:28:
                    46:36:43:69:4f:df:de:c6:56:f9:d7:15:6d:0d:e4:
                    a0:6a:74:a6:c5:c1:2f:87:54:ab:c5:4c:ee:4c:f1:
                    27:9c:37:7a:f8:ce:76:c5:f0:66:e6:43:0f:27:d8:
                    6f:e8:b0:d7:5b:a3:98:b2:f3:2f:07:5f:b9:b1:b4:
                    17:9c:13:e6:00:f4:85:24:a8:72:c1:11:d0:a0:10:
                    0c:8c:cd:7a:88:bf:bc:7e:78:7c:0e:9b:2b:13:d0:
                    ee:2f:7e:c5:6d:cb:72:5a:bb:fd:b3:84:b2:31:71:
                    d8:9b:22:e4:96:61:47:89:11:ba:91:1c:d5:38:ea:
                    90:01:a1:e5:81:f7:8f:b0:88:b7:3d:c8:02:14:6f:
                    dd:16:07:23:09:73:8f:f9:a3:96:ff:04:8d:be:3b:
                    1e:e2:a5:80:49:ef:bc:81:4e:9f:6a:8e:fb:ed:df:
                    92:58:40:b8:b3:05:f6:9d:70:d8:c5:dd:06:20:f9:
                    07:d4:9a:aa:c7:c9:35:52:c4:79:61:dd:99:f5:ba:
                    db:a3:2a:4c:74:f1:fe:dc:61:32:eb:de:cd:67:72:
                    20:47:7e:2d:a7:5a:45:7b:4a:56:8d:1a:ae:4f:18:
                    17:f1:db:d9:49:b4:e1:68:67:bb:c3:d3:27:ec:23:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:E9:3D:6A:0B:BC:DB:10:8A:98:51:16:B1:99:AC:33:4E:64:5B
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:b5:b0:c3:6b:73:40:1e:5d:a3:26:fa:96:8f:10:ed:6e:
         7c:79:b7:dc:ee:bd:9f:9a:c1:74:57:be:08:f2:29:68:97:4e:
         a1:9b:cf:25:9c:58:3f:88:6b:f8:ee:25:e7:08:59:a2:71:8a:
         32:9e:d5:d5:8e:30:65:b8:a2:1b:4c:9c:82:7f:62:1b:6d:f6:
         22:02:20:b3:36:e7:de:25:2c:34:16:75:21:07:bd:86:44:07:
         c8:5f:23:29:42:ad:76:a5:5e:30:86:71:24:97:59:ff:9a:77:
         39:d7:99:d9:25:59:7b:25:0d:5f:44:b6:0f:93:8d:b0:6b:51:
         00:f2:0c:c7:6d:de:4d:d5:1a:34:fd:b8:4e:af:9b:c7:0c:bd:
         06:e7:8e:00:95:79:b3:88:45:c1:d0:31:45:e7:53:f4:45:b3:
         29:83:2c:93:16:f7:44:25:09:71:b6:e3:29:69:ee:ca:dd:59:
         b4:c3:0a:b8:82:03:c7:96:cf:c7:c6:e0:b4:49:61:ff:f7:df:
         77:0e:15:08:37:3e:60:c7:7b:65:55:d7:81:e8:e7:23:73:68:
         bf:24:27:bd:7b:dd:a6:85:b1:7f:16:02:f4:d7:bd:dc:c9:a9:
         9b:2f:2a:c2:18:e9:82:ae:2a:55:a5:74:c5:a2:94:f2:cc:e3:
         b3:f2:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:39:56 2026 by rpki-client