This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          xc2E+Ua5Hm2gZc5wutL87Xkwr+oBOVNv9aBl/uAW+s4=
Subject key identifier:   97:B6:73:E3:F1:D7:70:D1:17:DD:30:B7:63:02:7E:A2:98:22:16:1D
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       019C427D4C6E0ABF2AD1DF2A162B62387A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          1880
Signing time:             Mon 09 Feb 2026 13:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:33 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: GQ34+2ia0vXAcS61zUNAmkRTgJtPvJntjbnXc8RnlLA=)
                          2: 7GUveN2wSo-luG052BTtt-k9X3U.roa (hash: lG1FL1G9e3xE6rCCYD/WWfyAmy2PT7zZddCBAjsuvEs=)
                          3: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          4: a-CG0EdlGf_I1PJjTgHujhf7tVM.roa (hash: CGd/1+YrJhm5fLArjGTSAaDtx6ze/TdderTPkWaTbLs=)
                          5: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          6: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          7: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          8: qWLYkYyPF3Q56bkxOqfcbBNYfdI.roa (hash: 87biHJSEFjMxu1mKJBdci0r1wjQAEsssYclG1CKrmJg=)
                          9: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4c:6e:0a:bf:2a:d1:df:2a:16:2b:62:38:7a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Feb  9 13:00:33 2026 GMT
            Not After : Feb 10 13:00:33 2026 GMT
        Subject: CN=97b673e3f1d770d117dd30b763027ea29822161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:23:21:6d:8f:25:54:84:9a:88:98:b8:22:
                    14:2f:f2:44:aa:a6:16:8a:d3:b2:9e:2f:e3:44:e2:
                    0d:29:8f:e1:b4:c4:5e:92:12:55:14:13:ca:e3:19:
                    1c:d4:0c:40:dd:5b:35:28:ab:22:1f:39:5a:70:e3:
                    22:cf:63:f2:e2:d0:ba:98:2f:fe:ac:f6:3e:e5:62:
                    bf:5c:6e:49:7e:8e:03:7a:14:25:6d:db:33:82:77:
                    b6:91:c2:c5:1c:71:97:6c:0d:55:0f:8f:42:48:d2:
                    72:e7:a5:4a:55:e2:27:72:41:7f:e9:36:9a:07:9f:
                    aa:aa:49:51:14:d7:21:34:7d:4f:11:06:b5:1c:5c:
                    2f:a2:b2:f9:d9:a4:85:0e:95:4c:d5:0c:25:00:63:
                    e9:58:9e:9f:ee:db:d0:48:ca:f1:88:92:71:53:27:
                    9b:e0:cc:da:c9:e1:9c:99:a6:71:71:8a:f9:88:1b:
                    1a:20:28:27:65:ab:43:d9:42:4c:02:bb:f3:78:36:
                    58:25:79:ae:da:4d:8c:65:8d:8f:52:e4:14:0d:b2:
                    da:42:e8:1e:f0:c3:16:36:6b:05:06:f2:23:d8:c4:
                    a4:d2:9f:10:f4:7b:54:75:65:d3:93:2d:6d:82:06:
                    fc:56:29:c0:91:4d:3e:91:fc:33:e4:4c:8c:4b:8f:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:73:E3:F1:D7:70:D1:17:DD:30:B7:63:02:7E:A2:98:22:16:1D
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:bf:db:c6:06:23:fe:47:8c:bc:7d:84:4d:06:b0:70:d3:
         a5:c0:75:d9:b1:1e:32:a9:69:66:be:78:85:db:06:32:cd:01:
         f9:74:5b:49:a1:b0:1e:62:9b:ce:ac:f9:15:98:2e:10:26:d8:
         63:1c:1a:f4:d2:00:c1:ce:77:34:57:f1:fc:fb:1f:4e:76:46:
         87:12:21:15:c5:8b:bb:11:89:38:e2:31:ad:d6:70:37:bb:23:
         4e:d9:a1:33:c8:8d:d1:62:5d:66:d5:d5:ec:c4:0b:ef:79:98:
         ae:c6:1b:5b:d5:75:a7:b5:10:41:6d:66:65:02:86:23:29:c6:
         7c:12:94:25:87:cc:27:b4:53:8b:28:68:a0:91:3a:0a:03:53:
         19:b6:71:43:7d:35:1c:a9:ec:62:61:65:d5:db:a3:07:7a:d5:
         59:b5:12:6f:29:02:5b:86:6a:20:eb:3e:86:de:bc:3e:b7:ef:
         40:e6:1b:45:79:6b:10:c1:a3:ed:d1:67:b1:ca:44:fa:9e:97:
         18:ff:9c:47:5a:82:bb:cc:96:11:25:13:1b:fb:d1:2a:e5:b4:
         4d:1e:88:87:a0:02:e3:fb:2e:bc:b5:f3:f6:7e:dd:ba:f9:38:
         2e:05:30:80:d8:09:b6:31:b2:f3:6b:a1:95:28:03:4e:d4:3c:
         48:77:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:37 2026 by rpki-client