This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File:                     FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier:          8sINbfx8NMk0b2AkMHvWJzZE/FVxwVpspBecC5olpFY=
Subject key identifier:   02:E0:DA:83:5A:2C:44:51:02:CA:13:AC:86:E1:B5:87:26:1A:5B:D1
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer:       /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial:       019C4322A89A0B0CDCC96B12EA5D9A079016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number:          E6
Signing time:             Mon 09 Feb 2026 16:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:10 +0000
Files and hashes:         1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
                          2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: ddlDsDok+jmHQkLeRACz6rmvnaia3S/FhI72unf3fSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a8:9a:0b:0c:dc:c9:6b:12:ea:5d:9a:07:90:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
        Validity
            Not Before: Feb  9 16:01:10 2026 GMT
            Not After : Feb 10 16:01:10 2026 GMT
        Subject: CN=02e0da835a2c445102ca13ac86e1b587261a5bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:97:09:37:ed:f2:ae:b6:86:e7:04:9a:39:
                    74:fa:c8:30:b2:c3:19:14:01:b1:6d:5c:11:e9:d8:
                    19:1d:4d:f7:26:78:0e:f8:ea:ba:9e:94:47:cc:99:
                    0d:17:dd:93:b6:87:57:6e:70:b3:37:a1:23:d0:b8:
                    0a:6a:73:08:18:bc:68:05:bd:43:4f:24:d5:34:44:
                    f9:04:ee:01:66:33:53:6b:0a:ef:9f:83:d0:b4:7a:
                    df:9f:27:0c:9f:a4:87:52:6f:07:e7:c5:97:68:1d:
                    76:3a:19:e0:39:c5:f1:ce:a2:d7:e0:fb:f3:ba:3b:
                    d8:41:b2:c1:ea:71:a7:df:e1:ee:fe:9d:92:41:14:
                    8f:49:6f:83:77:6b:7e:fd:5c:39:0d:5c:e8:8b:c4:
                    f2:b4:43:02:ae:09:ca:83:21:e8:03:a9:b7:0d:43:
                    c9:45:5e:20:62:12:d1:ec:31:af:8d:72:7d:35:5a:
                    66:c4:dd:5d:a6:cb:29:23:7d:5b:e0:03:4e:43:04:
                    37:0a:60:eb:29:61:cd:62:ed:e9:6c:14:27:46:bd:
                    cd:99:47:c3:bb:e0:78:79:36:64:77:d6:72:a0:57:
                    99:0a:fc:fb:24:6f:cf:bd:c9:13:1f:6a:d4:5a:a9:
                    ea:42:86:ed:1f:ed:47:a1:67:6a:da:63:6f:1f:74:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:DA:83:5A:2C:44:51:02:CA:13:AC:86:E1:B5:87:26:1A:5B:D1
            X509v3 Authority Key Identifier:
                keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:62:94:56:24:39:5a:10:fb:bf:22:f1:ec:3b:7a:2f:e7:6f:
         6d:2f:1d:26:8f:72:06:76:8c:f1:7e:bb:0f:04:52:7b:35:af:
         63:77:b2:15:b1:93:a3:bb:a8:80:ae:6c:8d:75:14:32:d3:af:
         25:7a:79:54:5e:11:97:c4:cc:f1:51:bd:5e:b5:28:cc:61:55:
         48:99:5b:21:f9:e1:91:2a:c2:11:5b:42:9d:25:44:ae:1b:e7:
         96:7e:09:ee:97:36:e3:00:61:95:b8:94:3c:f9:ac:cc:e5:75:
         9f:8f:5d:fa:90:7a:9f:86:a2:f2:31:cf:72:a9:5e:43:6e:f1:
         24:3c:58:30:c2:4c:99:73:39:9e:2a:3a:89:9a:5c:f6:21:71:
         cc:b3:52:64:ea:c2:f7:df:4f:8f:2f:c5:dd:48:1e:81:f9:3f:
         51:95:06:07:33:95:c2:1b:3b:29:c6:c4:ec:e4:2b:6c:2d:c9:
         29:b4:e1:d6:17:ab:bd:fb:b9:85:8b:d5:98:1e:a4:ca:2c:c5:
         27:87:0d:aa:c3:31:f9:a4:61:53:11:6a:f7:48:c2:3d:02:8c:
         a5:8c:94:58:42:aa:e7:f6:75:23:3f:55:bb:ef:d0:32:48:d0:
         44:3a:d1:99:e9:8a:6a:6a:b5:6d:0e:74:34:45:bc:09:ee:77:
         64:3d:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:45:59 2026 by rpki-client