This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
File:                     Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json)
Hash identifier:          N98tM9FEKZferEbzEjNrWnqsPtfD9w18NeInYeepAsc=
Subject key identifier:   E2:B3:76:15:DE:36:F4:E5:6A:1A:AF:DD:3C:69:5D:3D:DA:FD:B6:DB
Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71
Certificate issuer:       /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
Certificate serial:       019C424693C498876C8EDCF874C63C87A3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
Manifest number:          0198
Signing time:             Mon 09 Feb 2026 12:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:47 +0000
Files and hashes:         1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: o71SJME5xqtuz4rR7kulMnlKuELIn26jphF2ayffjPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:93:c4:98:87:6c:8e:dc:f8:74:c6:3c:87:a3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671
        Validity
            Not Before: Feb  9 12:00:47 2026 GMT
            Not After : Feb 10 12:00:47 2026 GMT
        Subject: CN=e2b37615de36f4e56a1aafdd3c695d3ddafdb6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:90:21:81:84:b7:e0:95:29:db:bc:4c:06:
                    a9:18:f0:43:64:9d:e0:4f:d4:8d:dc:0c:ce:45:78:
                    51:78:d1:62:d8:13:8d:db:ef:7f:8f:e9:7c:f2:f2:
                    70:a1:7e:65:e7:d7:98:3d:b6:42:06:cd:81:a0:28:
                    72:40:80:9b:a2:7a:70:20:b7:16:91:41:94:ce:45:
                    f0:b6:d1:7f:15:8e:82:e6:90:d9:a2:16:64:aa:e0:
                    e2:6c:80:b2:89:22:f9:c6:93:76:c8:5e:62:08:86:
                    64:ee:1a:3c:9c:5b:98:4a:9b:8c:6a:04:88:21:6c:
                    3c:a7:44:11:16:dc:c1:69:0b:84:59:5d:ba:c4:e0:
                    d3:5f:89:00:60:a5:9f:3c:27:f9:e0:03:c1:9d:c4:
                    32:c8:23:d1:49:ac:20:81:3f:13:29:b1:09:62:db:
                    3f:73:2e:6e:0a:0d:16:fe:bb:d6:a3:94:c1:c8:0f:
                    8c:3b:dc:0b:a0:95:8a:15:6c:7b:57:bc:aa:e8:08:
                    e8:52:8a:a6:de:4d:cf:da:20:f8:e7:d2:f1:52:76:
                    6e:2d:53:8b:87:fa:e1:ed:d5:5a:19:35:b3:e1:c9:
                    b8:f7:9e:6e:85:e2:bc:6d:a7:bc:fc:63:99:e1:45:
                    29:cc:25:09:58:6c:a3:09:53:e8:62:32:ca:b2:3b:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B3:76:15:DE:36:F4:E5:6A:1A:AF:DD:3C:69:5D:3D:DA:FD:B6:DB
            X509v3 Authority Key Identifier:
                keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:ef:1e:72:85:8a:0b:6e:de:46:ae:ee:78:fd:9c:76:59:
         5f:e2:f6:53:00:6a:2f:8e:e1:d7:4c:f0:dc:e8:ca:2f:24:88:
         30:67:b3:b5:68:dc:a4:45:50:d5:71:01:d7:c9:e0:83:27:e0:
         c4:45:71:cf:64:af:3a:61:95:a5:e7:dd:9b:c0:bc:39:cc:e0:
         5c:15:4f:a9:1b:36:56:60:28:62:66:c9:b6:9d:d8:91:42:ea:
         1e:3c:c0:35:91:88:0e:d8:8a:a0:97:d5:6b:2e:60:1f:72:cb:
         ed:ea:8f:06:05:d9:f8:4c:9b:a7:04:b2:9f:9e:33:89:e8:ac:
         1f:d6:ed:ee:4f:50:99:75:08:58:b6:69:1b:dc:f8:77:63:18:
         8a:27:b4:cb:14:6b:48:6c:19:b4:57:c4:04:cc:49:39:a0:fe:
         9c:bb:ae:ea:18:6e:fe:79:00:bf:aa:1a:5d:bf:01:8a:05:67:
         a3:1e:32:bc:c7:91:7b:74:b0:24:c7:f6:2d:d2:16:14:a1:95:
         42:a1:80:93:0e:7e:fc:46:bf:4d:06:eb:ef:6d:de:10:f1:52:
         91:44:2c:28:19:82:d3:71:43:eb:9e:56:c3:71:a8:32:49:4c:
         2d:51:c1:18:26:b2:13:ae:ba:5e:51:68:45:af:5e:15:45:d0:
         02:13:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:59 2026 by rpki-client