This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File:                     6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier:          0tASCSgGfZUwgE9I7PGMsabU8P1GrYkX5dvEKxGk878=
Subject key identifier:   32:37:71:42:03:82:4E:E0:58:99:95:7E:20:42:9D:6E:A1:97:0E:B1
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer:       /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial:       019C446BC7596EF25773A64F789FA7B19DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number:          03BA
Signing time:             Mon 09 Feb 2026 22:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:39 +0000
Files and hashes:         1: 2jS-Ar5-mvzTQqNg923VOZqFfzM.roa (hash: q9I2rePyRMxcY/rB8ipLm/a3s22Y2jRaO567Mt+E7dU=)
                          2: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: 39Lhkx802uz1OS0FxPkXVGdTH8+qpVYkn7ruJQR+G/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:c7:59:6e:f2:57:73:a6:4f:78:9f:a7:b1:9d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
        Validity
            Not Before: Feb  9 22:00:39 2026 GMT
            Not After : Feb 10 22:00:39 2026 GMT
        Subject: CN=3237714203824ee05899957e20429d6ea1970eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:0a:d1:53:76:38:f2:0d:02:2b:69:38:e7:
                    7d:44:59:38:6c:c9:c1:d7:55:41:0f:63:3f:4e:27:
                    da:de:be:c5:7c:3c:aa:53:57:05:09:4f:4d:35:8e:
                    d0:9c:85:e4:fd:ee:94:69:b1:5c:81:11:4a:99:57:
                    14:13:f4:22:7b:51:c4:4a:1a:fa:09:11:b7:e0:1d:
                    15:a7:39:a5:d5:a4:0a:3c:95:8b:62:0b:4a:62:65:
                    49:79:43:82:62:a8:62:46:dc:07:a8:a3:0e:37:c6:
                    4a:74:0d:5f:ea:40:22:30:ed:37:0d:83:6a:6c:8d:
                    11:de:4e:81:0c:0c:8a:cc:9d:eb:67:f7:ff:f9:e9:
                    bc:33:17:3f:b4:67:cc:4b:45:1a:7b:42:ac:3c:8f:
                    72:23:c0:2e:40:10:b9:18:08:65:8d:63:0c:97:72:
                    9e:4b:6c:d7:b6:e2:50:0c:f2:7f:ff:d2:cb:0e:cc:
                    b3:2e:c8:63:cc:e4:82:72:18:f4:71:fa:4a:c0:b8:
                    78:cb:14:c0:42:d5:7c:e1:13:b3:93:e8:29:62:f4:
                    9e:18:4b:1e:b0:e9:3c:7f:73:d6:2c:bf:79:67:17:
                    39:ad:81:70:08:f1:8e:d1:77:a7:e3:00:f6:9d:ac:
                    e9:16:f3:24:8c:9a:ba:0f:70:36:65:50:3b:14:85:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:37:71:42:03:82:4E:E0:58:99:95:7E:20:42:9D:6E:A1:97:0E:B1
            X509v3 Authority Key Identifier:
                keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:ba:44:0f:7d:47:46:a1:64:37:0f:e1:c8:a4:85:0e:37:
         80:e3:16:42:22:1a:bd:f5:ef:1c:a9:cb:b4:4a:01:03:ce:85:
         96:6e:0e:0d:6a:6c:6e:4e:02:b5:9d:60:25:39:32:c6:08:ea:
         7c:1f:71:49:0d:3c:b8:cd:e2:51:56:af:1a:e4:74:f5:bc:45:
         6d:81:2a:83:28:29:43:be:c2:9a:45:6c:20:26:21:85:39:c4:
         ed:48:b8:3a:1f:54:ac:c3:38:e6:6a:3f:6b:11:94:1d:af:6a:
         f1:50:1d:17:65:45:47:b3:0f:3e:03:c6:a0:70:2e:5f:4d:1d:
         38:e9:a3:31:0e:49:9a:20:53:d3:c3:07:9c:4f:a0:83:20:25:
         8b:4f:7f:5f:44:0b:ad:00:44:14:c4:7d:5e:64:11:5d:b5:d8:
         0a:a1:5d:0a:8a:96:66:cf:49:39:92:c5:07:df:46:b7:35:e8:
         a2:b8:c6:ca:29:e7:58:6b:67:e6:2c:31:92:e3:cf:99:fe:2a:
         bc:12:aa:3b:84:0c:4f:35:a9:00:09:d8:db:2f:5a:2d:62:0d:
         0f:e0:14:23:02:73:f6:92:e6:aa:df:62:3c:32:de:aa:14:6a:
         53:f8:e0:ba:e7:bc:67:02:9b:5a:96:96:15:8d:e2:99:ac:da:
         0e:3d:61:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa8dZbvJXc6ZPeJ+nsZ28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQ5NDgyZWM2OGQzNTc3ZDkzMDQ4Yzk4ZmEwNTUxNzM4
MGEyYTgwHhcNMjYwMjA5MjIwMDM5WhcNMjYwMjEwMjIwMDM5WjAzMTEwLwYDVQQD
EygzMjM3NzE0MjAzODI0ZWUwNTg5OTk1N2UyMDQyOWQ2ZWExOTcwZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMoK0VN2OPINAitpOOd9RFk4bMnB
11VBD2M/Tifa3r7FfDyqU1cFCU9NNY7QnIXk/e6UabFcgRFKmVcUE/Qie1HEShr6
CRG34B0Vpzml1aQKPJWLYgtKYmVJeUOCYqhiRtwHqKMON8ZKdA1f6kAiMO03DYNq
bI0R3k6BDAyKzJ3rZ/f/+em8Mxc/tGfMS0Uae0KsPI9yI8AuQBC5GAhljWMMl3Ke
S2zXtuJQDPJ//9LLDsyzLshjzOSCchj0cfpKwLh4yxTAQtV84ROzk+gpYvSeGEse
sOk8f3PWLL95Zxc5rYFwCPGO0Xen4wD2nazpFvMkjJq6D3A2ZVA7FIU4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI3cUIDgk7gWJmVfiBCnW6hlw6xMB8GA1UdIwQY
MBaAFOhNlILsaNNXfZMEjJj6BVFzgKKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUt
MDgzNWU2YjFlMzlhLzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUtMDgzNWU2YjFlMzlh
LzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPS6RA99
R0ahZDcP4cikhQ43gOMWQiIavfXvHKnLtEoBA86Flm4ODWpsbk4CtZ1gJTkyxgjq
fB9xSQ08uM3iUVavGuR09bxFbYEqgygpQ77CmkVsICYhhTnE7Ui4Oh9UrMM45mo/
axGUHa9q8VAdF2VFR7MPPgPGoHAuX00dOOmjMQ5JmiBT08MHnE+ggyAli09/X0QL
rQBEFMR9XmQRXbXYCqFdCoqWZs9JOZLFB99GtzXoorjGyinnWGtn5iwxkuPPmf4q
vBKqO4QMTzWpAAnY2y9aLWIND+AUIwJz9pLmqt9iPDLeqhRqU/jguue8ZwKbWpaW
FY3imazaDj1hHg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:40 2026 by rpki-client