This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          bwcyyVjYD/zsu3nJ1EEyNsiu0ByRmlixDG74cKQb+cA=
Subject key identifier:   F6:0B:2E:9A:7E:CB:4A:2A:9F:5C:0A:30:D7:F6:A7:D8:03:4C:79:A6
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       019C41A1E1FCF280B197559E14220A5CD591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          160D
Signing time:             Mon 09 Feb 2026 09:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:53 +0000
Files and hashes:         1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: qDhcYyBBWHCOtD01XngkzZr3nUzphHLl2ODKJRT9NKQ=)
                          2: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (hash: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:e1:fc:f2:80:b1:97:55:9e:14:22:0a:5c:d5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Feb  9 09:00:53 2026 GMT
            Not After : Feb 10 09:00:53 2026 GMT
        Subject: CN=f60b2e9a7ecb4a2a9f5c0a30d7f6a7d8034c79a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:35:6b:81:90:db:47:45:06:3c:13:a2:e5:
                    d6:e4:83:8b:c0:f7:6f:93:f1:be:c7:e6:b5:99:58:
                    9a:9c:6b:8a:9c:ec:a5:50:e0:d6:55:7f:9b:fb:1e:
                    c9:da:85:9c:96:58:d9:9a:fe:38:36:be:7e:db:0b:
                    47:aa:e1:c8:ef:0e:b1:7a:39:a9:f2:c7:b9:ce:d1:
                    b1:28:43:7f:13:49:9c:77:d9:d3:d0:4a:3b:77:93:
                    08:66:d2:06:2f:01:46:c8:ae:dc:fd:8c:c2:1a:d9:
                    8c:38:ff:cd:24:60:09:bd:03:18:40:6d:a8:83:c9:
                    a7:6b:25:e5:60:8a:da:8d:fb:e2:ef:ca:e1:4d:cc:
                    fa:40:dc:07:36:fd:64:9a:f2:03:76:55:b4:a4:d2:
                    31:e4:f2:c7:00:fe:cf:2b:eb:e2:c0:ae:89:46:a5:
                    85:58:3a:ea:54:09:cc:9a:75:72:0c:6d:71:35:11:
                    49:bd:a1:8b:56:ca:90:95:ae:2e:e6:f4:a9:47:f8:
                    72:ec:8d:db:b6:06:3f:d1:94:52:bd:8c:32:2b:ae:
                    b5:0e:09:97:81:7c:0c:02:1a:7b:8a:1a:26:b5:f6:
                    aa:d4:3f:52:6a:fc:64:90:5a:ef:d6:7e:24:a2:70:
                    d8:7c:d8:32:77:82:42:19:0f:f8:1f:8b:00:15:b0:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0B:2E:9A:7E:CB:4A:2A:9F:5C:0A:30:D7:F6:A7:D8:03:4C:79:A6
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:48:ce:4d:a8:1c:b4:61:55:74:05:48:30:bb:84:13:e5:
         ba:da:72:3f:fb:80:ab:76:1c:c3:75:2e:78:ea:7b:c7:95:1a:
         8f:12:89:8d:cc:88:9f:fb:df:48:2f:3a:90:6a:c1:97:62:b0:
         41:42:af:4e:b3:53:cf:dd:2c:30:fd:ca:dd:4d:68:02:fc:92:
         8b:77:7f:39:8b:05:db:02:3b:29:53:57:9e:0a:d9:a7:f7:5d:
         fe:fe:f8:bb:c7:aa:f6:f9:8d:9b:f1:af:35:3c:26:54:c7:ac:
         27:16:be:ad:aa:71:f9:32:bc:b1:36:2a:a0:7e:2c:79:b9:7f:
         da:d4:fd:94:26:02:fa:bd:46:73:63:32:e6:ef:97:b9:c3:a2:
         12:00:ca:65:86:0b:87:76:69:b1:44:4d:8a:b4:f4:20:3f:2e:
         ef:7a:d7:c0:00:2a:5c:8a:bc:d1:73:03:72:24:21:8c:15:c6:
         7c:42:7a:08:43:0b:a4:bb:07:ce:d7:ff:44:91:cf:13:7f:77:
         88:ff:ae:2e:fc:28:97:82:09:ae:be:be:b8:a7:e3:9d:2e:f0:
         8d:64:26:7e:46:ab:4f:9a:06:9a:8c:7e:14:6b:07:b4:fa:08:
         03:24:c7:4e:fc:93:28:26:6e:5b:8d:de:66:5c:a1:e9:6d:7f:
         d0:e7:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:58 2026 by rpki-client