This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File:                     6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier:          STVyZInPEHI7VQtNLziHkIdMtQOFP1uhVyYyFIP1xRw=
Subject key identifier:   CD:A6:C0:43:57:57:17:23:D2:C7:7A:5B:47:26:DD:A6:14:CA:EE:C7
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer:       /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial:       019C420FB1EFDA84F3E0991E766AEE21255A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number:          120A
Signing time:             Mon 09 Feb 2026 11:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:50 +0000
Files and hashes:         1: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: ub4F0eUZVOMnyQolY6qqpl7Z7Cb0V/Tj6vgJ49ocLQk=)
                          2: SjzLfenUX4kznR2y8ruZeOnFvmw.roa (hash: vzCbx03F8+rxM1liQuyxsAk6fpt98wQC2kvOe4mhFm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b1:ef:da:84:f3:e0:99:1e:76:6a:ee:21:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
        Validity
            Not Before: Feb  9 11:00:50 2026 GMT
            Not After : Feb 10 11:00:50 2026 GMT
        Subject: CN=cda6c04357571723d2c77a5b4726dda614caeec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:8b:4d:a7:da:58:28:e0:65:d9:b8:86:2b:
                    3d:3b:c3:cd:b9:28:13:f9:83:f8:47:89:73:5c:d3:
                    e8:32:90:6b:b6:00:22:d7:15:0d:91:25:f7:2e:4d:
                    f1:99:3f:9e:b0:34:0b:77:8d:16:de:f1:6d:a4:2a:
                    11:cc:44:f5:9c:34:b5:7b:62:db:5a:ca:8e:2b:d6:
                    9a:98:e8:4b:81:e6:8f:fd:76:9d:57:30:79:98:5c:
                    bc:26:78:35:76:b6:ac:94:c7:23:6e:fd:74:30:dd:
                    09:6b:26:68:d9:e4:b5:88:d6:7a:f4:57:e7:a5:6c:
                    a5:fd:09:b7:c0:75:5c:45:5d:8c:1a:1c:49:e1:b1:
                    13:d8:38:75:39:75:ef:1f:ed:bc:a0:49:39:5b:48:
                    38:3b:76:e1:c1:82:19:f2:79:a5:13:ae:6b:ec:e4:
                    37:1e:60:72:20:65:68:f3:39:05:d7:06:b8:55:4b:
                    93:bf:9e:1f:98:33:52:fc:7d:9a:69:a7:7c:c3:5b:
                    06:06:1b:9d:24:20:66:3d:6a:21:4c:ce:7d:24:19:
                    77:51:db:53:fa:ba:7b:9a:37:06:96:8a:6c:77:fd:
                    e4:50:69:20:59:d0:54:d2:31:55:6e:60:34:47:1e:
                    ab:9e:71:39:01:e3:e1:9f:33:d3:34:fc:2b:05:16:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:C0:43:57:57:17:23:D2:C7:7A:5B:47:26:DD:A6:14:CA:EE:C7
            X509v3 Authority Key Identifier:
                keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f7:5b:0b:aa:6f:b0:8b:d2:45:6a:49:9a:a1:7f:c7:ef:5d:
         33:c0:19:08:21:4b:97:45:d4:66:70:48:7b:23:5e:9f:f2:4d:
         67:d9:2b:6c:13:68:51:d6:ac:39:a6:5e:82:22:1c:f9:c1:54:
         a4:3a:7a:46:61:b5:c3:03:ba:a9:49:59:6d:ea:38:96:03:a5:
         23:7b:15:b5:6a:34:9f:80:34:55:0a:dc:f3:79:33:99:e3:ed:
         41:bd:8a:94:a4:e1:30:12:f7:30:b3:58:25:a5:4a:ca:0b:95:
         b8:9f:d2:10:64:e9:5d:bf:c3:55:50:29:c5:61:38:c7:59:1a:
         89:6f:39:cc:9a:4f:5c:18:65:a2:57:bb:f1:4c:63:e3:db:fe:
         c0:67:99:1d:ed:71:f7:56:9d:08:ec:bc:00:7b:06:e5:e8:11:
         5c:4a:17:11:98:fd:27:15:d7:0d:1b:4d:ee:c3:78:d3:de:33:
         96:ed:5f:77:ed:71:4f:29:5e:8d:8d:90:be:66:3d:61:ee:87:
         37:53:c3:d2:45:5d:ea:e0:1e:5a:53:8b:87:68:39:65:c1:6a:
         de:9b:ef:f8:96:85:09:f8:9e:a8:58:37:12:25:67:61:83:30:
         94:28:49:d8:45:18:4b:34:e4:08:cd:f9:51:0e:ac:1c:79:ba:
         ae:2d:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:07 2026 by rpki-client