This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
File:                     6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft (raw, json)
Hash identifier:          myIg3f0DSDTOZcdu5iTeHDF/Adt0Pq3/oiDWklngTJc=
Subject key identifier:   67:91:50:B3:17:F1:CF:83:3A:38:3C:45:2E:D0:7A:C8:ED:CA:AA:53
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Certificate issuer:       /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial:       019C42468EF945092EFA4390EBA7493738DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
Manifest number:          0A28
Signing time:             Mon 09 Feb 2026 12:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:46 +0000
Files and hashes:         1: 6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl (hash: E7vRbuNU2Pwn/Yizix9+lcb72iLrg/U3L3eyRBtB5Y0=)
                          2: d9WFrnc4pmf5pLTzIhIdisR_d9k.roa (hash: /xfSchjnKFgR4NLG+ItdhW/yNfERRAOpD3QUNhJFcUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:8e:f9:45:09:2e:fa:43:90:eb:a7:49:37:38:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
        Validity
            Not Before: Feb  9 12:00:46 2026 GMT
            Not After : Feb 10 12:00:46 2026 GMT
        Subject: CN=679150b317f1cf833a383c452ed07ac8edcaaa53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:8d:c2:23:48:4b:54:e5:7a:7c:d0:f2:13:
                    cf:8b:90:0a:ca:cd:33:e4:70:de:45:35:ff:9d:99:
                    ad:4e:03:ae:f1:4c:79:b2:6d:65:80:73:d9:67:bb:
                    e4:01:17:eb:81:81:2a:b4:e3:d2:60:a9:e7:6f:92:
                    f1:57:2a:19:ea:b4:af:a0:65:42:d1:ef:bb:1a:01:
                    1c:c8:f3:db:77:e7:1a:f1:ce:5b:f6:3f:cf:6e:60:
                    5c:91:79:1c:4a:05:2e:7a:f1:3f:78:87:87:68:92:
                    a4:db:e3:bf:fd:d9:1c:82:cc:77:2f:b1:ba:88:e7:
                    52:85:6b:ef:ec:bc:30:68:73:27:29:c6:29:b0:cc:
                    01:a3:68:7a:2f:a8:b2:3a:cd:2e:36:57:23:8b:03:
                    47:15:77:4f:fe:52:35:8b:e0:3e:1b:37:d1:d2:3d:
                    92:58:83:24:19:66:a2:40:ee:5d:9c:dd:b0:dc:c7:
                    66:ad:66:02:a2:72:2b:a2:83:11:a2:a1:a8:c9:5d:
                    97:f0:40:3b:96:50:ae:bd:f0:9b:fe:8a:50:ae:a0:
                    97:15:e1:c3:fe:0b:0c:cb:83:13:6d:14:f1:5e:1c:
                    34:e6:55:04:d1:1c:fc:b2:f6:28:88:33:bc:fa:c8:
                    76:48:63:32:36:25:b0:c4:22:56:6a:34:e1:ef:8e:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:50:B3:17:F1:CF:83:3A:38:3C:45:2E:D0:7A:C8:ED:CA:AA:53
            X509v3 Authority Key Identifier:
                keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:61:d8:03:d4:86:35:01:d3:b6:c0:02:7b:cc:65:26:c3:
         ef:d4:42:94:27:00:26:9f:3f:63:04:e2:fd:c3:74:70:7d:80:
         b3:18:2e:52:6c:3f:b7:87:9d:30:6f:a7:44:0d:2a:ea:2e:99:
         21:36:ec:6f:fa:5a:61:c4:ec:0b:db:9a:ac:01:cf:a2:2c:92:
         38:97:13:8a:8b:27:ee:1a:9a:08:de:7b:be:79:b8:54:7b:2f:
         cb:4c:90:35:aa:10:11:0d:f0:54:02:0c:ff:f4:cd:a6:39:fe:
         61:ca:a1:94:16:b2:4c:6b:45:ff:3b:51:cf:6b:4f:f3:a3:7c:
         62:59:e4:cd:ed:21:ce:81:26:ed:53:08:a9:ad:fe:ca:01:6c:
         de:d8:2d:7b:66:d0:0a:bf:af:f3:4a:7b:aa:b2:a3:21:d5:ed:
         fb:09:68:95:4e:53:a2:e0:68:e1:be:16:34:b2:e0:e9:26:5f:
         fe:15:a3:97:eb:08:d3:a6:c7:8f:e4:4d:e4:a5:27:c6:e0:5d:
         fb:32:d8:fd:e6:2d:8a:9c:36:77:57:9f:54:55:e8:f8:f9:03:
         72:6c:4d:9e:d3:8b:8e:41:8b:af:7f:2f:57:90:39:48:55:5d:
         6b:44:2a:35:33:26:66:7c:00:dc:7e:60:2a:00:32:b4:f9:2c:
         88:f8:42:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRo75RQku+kOQ66dJNzjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjYyYmJlOWVlYjVhM2Q2NmUxY2MyMjNhZGVkYzUzYjE3
N2M0ZWUwHhcNMjYwMjA5MTIwMDQ2WhcNMjYwMjEwMTIwMDQ2WjAzMTEwLwYDVQQD
Eyg2NzkxNTBiMzE3ZjFjZjgzM2EzODNjNDUyZWQwN2FjOGVkY2FhYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWqNwiNIS1TlenzQ8hPPi5AKys0z
5HDeRTX/nZmtTgOu8Ux5sm1lgHPZZ7vkARfrgYEqtOPSYKnnb5LxVyoZ6rSvoGVC
0e+7GgEcyPPbd+ca8c5b9j/PbmBckXkcSgUuevE/eIeHaJKk2+O//dkcgsx3L7G6
iOdShWvv7LwwaHMnKcYpsMwBo2h6L6iyOs0uNlcjiwNHFXdP/lI1i+A+GzfR0j2S
WIMkGWaiQO5dnN2w3MdmrWYConIrooMRoqGoyV2X8EA7llCuvfCb/opQrqCXFeHD
/gsMy4MTbRTxXhw05lUE0Rz8svYoiDO8+sh2SGMyNiWwxCJWajTh745vOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeRULMX8c+DOjg8RS7QesjtyqpTMB8GA1UdIwQY
MBaAFOi2K76e61o9ZuHMIjre3FOxd8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxZcnZwN3JXajFtNGN3aU90N2NVN0YzeE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wYTBiYTktZjRmZS00OWJjLWEzNjgt
YjNjYmI1YWQyYWQwLzEvNkxZcnZwN3JXajFtNGN3aU90N2NVN0YzeE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wYTBiYTktZjRmZS00OWJjLWEzNjgtYjNjYmI1YWQyYWQw
LzEvNkxZcnZwN3JXajFtNGN3aU90N2NVN0YzeE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu5h2APU
hjUB07bAAnvMZSbD79RClCcAJp8/YwTi/cN0cH2AsxguUmw/t4edMG+nRA0q6i6Z
ITbsb/paYcTsC9uarAHPoiySOJcTiosn7hqaCN57vnm4VHsvy0yQNaoQEQ3wVAIM
//TNpjn+YcqhlBayTGtF/ztRz2tP86N8Ylnkze0hzoEm7VMIqa3+ygFs3tgte2bQ
Cr+v80p7qrKjIdXt+wlolU5TouBo4b4WNLLg6SZf/hWjl+sI06bHj+RN5KUnxuBd
+zLY/eYtipw2d1efVFXo+PkDcmxNntOLjkGLr38vV5A5SFVda0QqNTMmZnwA3H5g
KgAytPksiPhCiA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:34 2026 by rpki-client