This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          JQnJgKGK0CxsplerxpOXa9ELpoEtXEfxLzo6mGoefqo=
Subject key identifier:   6A:19:7B:2A:A2:F6:EE:AD:20:46:65:B9:CD:F6:F7:E4:FF:5F:2D:BE
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       019C41A16E20B2FD6BD0DF495597AE27BB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          10EA
Signing time:             Mon 09 Feb 2026 09:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:24 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: dTfzr0sJpRdklFf9RORNFhjvaCxqt6c7uE9RQ0wvEHY=)
                          2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:6e:20:b2:fd:6b:d0:df:49:55:97:ae:27:bb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Feb  9 09:00:24 2026 GMT
            Not After : Feb 10 09:00:24 2026 GMT
        Subject: CN=6a197b2aa2f6eead204665b9cdf6f7e4ff5f2dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:88:e2:a2:81:0d:46:b3:ae:6d:ca:67:74:
                    86:4a:a6:3b:ab:7f:10:d9:51:d6:42:af:15:b1:df:
                    7a:d6:03:dc:4d:2f:48:b4:04:62:69:8e:cb:43:24:
                    82:b8:ed:78:4f:6b:c1:60:ca:dc:f2:8a:a3:ea:02:
                    d7:a8:c0:a2:40:71:11:f2:ab:cd:ec:fb:6a:64:96:
                    40:d3:68:b6:37:e6:c1:68:52:94:6c:c3:e3:79:54:
                    33:ac:1a:36:63:0b:0d:e7:1b:0f:f1:da:28:48:3d:
                    ae:4c:07:50:cf:18:28:23:1c:1e:17:e7:67:fa:55:
                    1f:ff:52:6a:7d:86:31:66:9a:cb:c8:15:86:92:96:
                    3b:1d:70:4d:ea:6a:b5:13:ea:46:b0:10:2b:b5:ab:
                    70:84:97:72:f4:88:03:3d:cb:5e:7a:08:eb:50:7d:
                    2d:24:d4:f9:1d:bf:3e:2d:c4:b0:ac:17:03:42:d9:
                    fc:e6:68:32:19:af:11:69:3b:4d:30:fa:01:f5:4f:
                    19:c5:36:d6:60:36:e0:cb:62:9a:93:55:04:00:83:
                    ea:2a:e7:37:64:bc:43:1f:e5:98:c6:bf:67:97:8d:
                    92:f2:45:c1:eb:19:88:59:70:fa:01:16:7c:8d:2b:
                    76:4b:97:b6:ee:ee:c1:57:16:9f:05:43:8c:f2:a2:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:7B:2A:A2:F6:EE:AD:20:46:65:B9:CD:F6:F7:E4:FF:5F:2D:BE
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:e4:a0:61:83:72:19:99:54:fe:85:be:72:ce:14:0e:3e:
         53:e7:e3:c2:19:e7:58:5c:44:72:6c:c8:75:d7:2f:fb:60:d3:
         b2:fc:75:9e:10:1b:5e:6c:5a:16:37:be:dc:b7:f5:fe:25:15:
         87:9f:62:71:de:c7:82:93:20:56:1f:0e:eb:ad:a7:f7:ce:9a:
         68:34:eb:e8:36:49:b8:22:65:52:4f:68:a2:df:21:ba:ad:64:
         90:83:50:97:41:12:cc:1f:71:46:36:fb:af:91:d3:d4:8d:53:
         0d:24:09:a6:4c:8e:9f:62:7e:c5:b7:c1:a7:96:99:24:5c:10:
         d3:b6:ed:25:ad:ab:a7:c5:86:01:02:cc:6c:29:8d:be:05:35:
         aa:fc:48:32:9e:bf:38:39:17:41:2c:e2:e5:9a:2b:ce:fe:b9:
         2f:2f:00:f9:da:10:de:b8:67:d9:f5:39:e6:45:8c:22:8a:82:
         45:e4:a4:ad:09:92:31:e9:77:b2:11:59:2c:a0:9f:05:65:8b:
         33:91:fd:55:e6:2a:3e:38:8e:e3:3a:b2:bf:cf:10:e4:51:df:
         95:aa:8e:1e:70:dd:ba:cb:9b:3b:ad:34:31:7a:49:6e:6a:c6:
         46:1b:1b:d8:9b:0a:2f:3e:96:59:64:70:a5:41:07:43:16:44:
         41:43:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:37 2026 by rpki-client