This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          FEaI9zMVpaekOIg/PEB39tPuE0qdBKHPoTHgPH7dcJ0=
Subject key identifier:   D4:B3:D3:6E:F7:9B:E5:42:12:FA:36:D4:41:31:4A:55:E1:9C:C2:A8
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       019C43908888114AADF414C1B90C047A7FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0C03
Signing time:             Mon 09 Feb 2026 18:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:11 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: iYYo/mvYvUTcjYz9n7bNI7s0rsJF0KAswU3R1XB5HZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:88:88:11:4a:ad:f4:14:c1:b9:0c:04:7a:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Feb  9 18:01:11 2026 GMT
            Not After : Feb 10 18:01:11 2026 GMT
        Subject: CN=d4b3d36ef79be54212fa36d441314a55e19cc2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:06:9b:e5:cb:3c:56:4f:89:4f:4d:4d:a7:
                    2b:bb:63:fe:23:b8:3a:ee:60:3c:4c:39:4e:0e:11:
                    e9:0e:f2:04:6c:c4:14:bc:c6:4f:31:cf:78:3b:3e:
                    44:59:f6:85:2e:38:30:87:e6:34:78:30:a0:f2:2c:
                    ae:9e:fa:50:3c:53:a1:7c:db:31:27:fc:ab:fc:48:
                    19:64:c2:bb:d2:d0:80:3a:24:01:e6:e7:e4:02:9b:
                    78:c8:3b:b6:d8:0b:f5:5a:ec:26:46:88:9f:ca:8f:
                    74:4c:00:55:bc:54:9a:76:8d:8b:7d:be:6a:ab:14:
                    7e:23:52:ed:b3:34:1a:32:b1:1a:a2:d4:d7:ae:41:
                    2b:86:d4:6f:5c:bf:73:98:f0:25:0e:ed:49:1c:b4:
                    0a:0e:d6:f8:b3:7b:41:f2:32:57:fb:c5:1f:8a:85:
                    9a:98:fb:5b:2b:23:05:1a:6d:d4:2d:c3:39:40:06:
                    24:a1:d7:f8:f1:19:8d:bc:e2:b0:d0:d2:26:92:0b:
                    63:ae:0d:6d:54:db:62:9a:45:af:08:c9:98:df:22:
                    e4:39:cf:1e:02:b8:e6:c1:20:df:5e:06:34:d6:8b:
                    c7:92:fc:35:f4:13:d8:ab:31:77:31:cc:e8:3a:13:
                    17:1b:4b:26:69:b6:43:da:7c:31:c4:f5:18:aa:f5:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:D3:6E:F7:9B:E5:42:12:FA:36:D4:41:31:4A:55:E1:9C:C2:A8
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:d2:07:55:72:cf:43:99:e1:fd:f8:77:05:52:78:24:62:
         37:15:99:e8:d2:68:c5:02:c8:24:26:f3:43:c0:18:e9:f0:b4:
         de:55:ee:e5:b1:ae:f1:e1:4b:8b:4f:53:32:b7:89:41:ad:45:
         ec:ec:45:54:99:08:e8:67:17:a9:5c:1c:cf:ee:a3:b7:e5:22:
         d5:fd:73:e8:ea:98:42:c9:02:5a:ff:37:b8:cc:8f:f9:06:3f:
         d5:ab:d8:89:c8:48:58:ef:5a:2e:02:d0:89:fd:8c:e9:81:7e:
         00:4f:4c:3f:c4:80:67:24:cd:34:cc:f4:61:86:2c:e8:f7:69:
         83:4c:ca:51:a2:1b:11:8e:77:cb:51:f4:12:73:24:a6:72:98:
         3f:0f:a1:08:7e:6f:ed:09:00:93:d8:b1:00:91:55:da:a9:7a:
         13:ca:74:50:08:4c:a9:35:43:cf:33:6f:36:45:3f:ed:ce:a7:
         30:4a:61:43:03:19:a8:dc:80:20:97:38:6c:92:f7:50:f6:2a:
         7c:d7:dd:1d:c3:98:00:c9:0d:46:40:7d:d9:b8:b4:9a:cc:e8:
         7b:3d:2a:f8:02:a7:05:ad:23:7d:f4:8d:e9:8c:42:d6:8e:63:
         60:ef:84:dc:78:14:ae:24:4d:16:7a:8f:b2:97:ed:a3:24:8b:
         03:63:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:04 2026 by rpki-client