This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File:                     6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier:          t45LQ6VMBTuB/6fELNkriqDjt1KhYU1k885mqS+KvmE=
Subject key identifier:   5D:A0:88:4C:37:2A:C6:69:D4:97:AA:CC:82:86:25:8C:66:78:CC:52
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer:       /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial:       019C42EB390CC2F30745DC8A6605F05F71F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number:          075B
Signing time:             Mon 09 Feb 2026 15:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:37 +0000
Files and hashes:         1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: QPDxGhLtwKcJggTBepKhyEORx/2DkZmbPnH7gF4LWiQ=)
                          2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:39:0c:c2:f3:07:45:dc:8a:66:05:f0:5f:71:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
        Validity
            Not Before: Feb  9 15:00:37 2026 GMT
            Not After : Feb 10 15:00:37 2026 GMT
        Subject: CN=5da0884c372ac669d497aacc8286258c6678cc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:23:e7:fb:46:75:61:43:c1:d0:c4:4b:9d:
                    85:77:a2:c9:81:13:1a:6b:75:ad:2b:60:fd:0e:ea:
                    bb:28:f8:ea:be:87:2b:84:e5:01:0e:63:86:8b:f6:
                    b4:9e:bf:43:a9:c8:4c:1d:b9:82:72:63:79:37:ce:
                    89:c1:1c:9c:81:c4:7d:e4:94:ab:e4:d6:51:73:41:
                    09:c7:59:08:07:cf:c5:56:ab:d1:43:6f:76:b9:7f:
                    67:ff:9d:5a:f6:b3:1c:30:23:0c:19:9c:65:77:af:
                    dd:5a:4d:09:ed:b7:fe:7e:79:e0:00:39:42:f1:f8:
                    38:b0:24:8f:ad:43:f7:85:bf:3c:d2:0c:32:39:da:
                    19:9e:e2:f9:50:b4:ac:2a:42:e8:f5:3b:29:10:a9:
                    02:06:45:b6:6d:4b:44:ef:fa:dc:01:41:8d:f5:55:
                    2f:77:76:d4:4e:89:d8:7a:f3:ba:ec:22:79:8b:77:
                    33:b5:2d:5a:bb:57:c4:ab:b0:51:d6:7b:50:89:68:
                    22:a5:2b:f9:25:20:2e:db:6c:c7:7d:c8:2e:35:b2:
                    3f:0f:99:b3:4e:9d:49:1d:e6:3d:79:f0:f1:2a:b1:
                    86:aa:4e:70:2b:f2:81:b0:35:e2:42:9c:b6:e4:a4:
                    8d:eb:71:f4:e9:ba:20:0e:d1:1b:d8:88:25:17:1a:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:88:4C:37:2A:C6:69:D4:97:AA:CC:82:86:25:8C:66:78:CC:52
            X509v3 Authority Key Identifier:
                keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:cf:18:d4:58:c0:c0:e7:b4:e9:79:5f:9c:bb:6c:3c:0c:
         9d:2a:e7:30:a5:30:fb:40:68:f8:ca:b1:79:7b:96:51:57:e2:
         91:72:b7:1c:7b:45:f8:dd:9b:45:17:d0:e2:21:9e:3c:de:b9:
         34:55:1d:09:d8:72:45:94:6f:f0:48:ed:df:c4:83:92:4b:a8:
         ae:34:82:34:12:7e:06:48:30:8d:b6:4e:0f:53:5b:35:df:90:
         59:10:bf:ca:a6:b8:f7:04:51:44:1a:ad:12:e5:dc:07:ee:a9:
         c8:5e:da:4d:63:4f:a9:49:00:99:e6:cb:7a:ed:a9:07:93:c9:
         9e:9a:34:d8:55:f5:d7:9c:a1:e7:79:29:9d:ea:16:a2:fa:28:
         bd:4a:a4:eb:76:e2:b9:37:52:ff:57:dd:51:21:bb:6e:98:7f:
         e2:64:84:13:61:4e:65:f9:a8:8b:f8:f4:54:c8:57:f3:fa:8c:
         9a:1c:80:c0:17:76:5e:db:f2:4d:73:d3:1a:11:a7:39:69:3e:
         ea:1d:9a:17:5c:bd:46:ec:d2:5c:55:00:c5:de:45:6f:31:19:
         ee:22:f2:e6:28:08:ad:1b:62:ae:1d:85:2d:4f:73:aa:0f:d1:
         f9:ea:34:2b:24:8a:26:f8:b7:e5:15:17:91:c0:a6:66:be:85:
         d5:05:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:56 2026 by rpki-client