This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          0uAb2m5HF23UcJy8mjaW5IVWXEU3kSAP+mazKSDikvo=
Subject key identifier:   FF:C5:5F:3F:D2:8A:FE:18:3B:35:0E:00:A7:A3:E2:3D:B2:04:00:54
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019C43595DEBB7BF0941CF6CC182535A187C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 17:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:56 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: T7GplqOoxKm+lTgwEe0e5yAz76Y1H8wedrtrwnjTzPk=)
                          2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:5d:eb:b7:bf:09:41:cf:6c:c1:82:53:5a:18:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Feb  9 17:00:56 2026 GMT
            Not After : Feb 10 17:00:56 2026 GMT
        Subject: CN=ffc55f3fd28afe183b350e00a7a3e23db2040054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:ff:de:87:8c:5b:70:86:dc:f2:c4:be:e4:
                    1b:a8:a9:74:74:6e:fc:d8:2a:8b:2f:8e:ad:73:a4:
                    94:eb:94:c1:ac:f2:f0:be:1c:6b:6e:cf:cc:fd:ca:
                    f7:04:dc:81:0b:6c:13:88:8b:f5:b9:cd:92:0c:90:
                    92:46:38:bd:63:29:02:48:6c:f2:10:f7:62:b0:8d:
                    5d:09:74:08:f6:9a:e5:3d:ba:93:bc:30:ef:d5:97:
                    de:dc:f6:36:68:9e:3d:2f:50:17:b4:6a:95:31:37:
                    00:03:74:bd:8f:ca:42:0e:15:e6:2c:64:25:ff:45:
                    06:93:73:9d:db:6d:d1:b3:60:83:d5:ee:9e:b4:28:
                    3c:ce:f1:e4:d6:11:f3:80:f3:47:53:db:b4:a0:f3:
                    0e:a8:f7:ab:6d:67:ec:15:e8:08:ca:76:23:a1:34:
                    c3:b5:4e:e3:e3:c8:34:d0:2c:72:fc:c1:d9:36:1e:
                    89:6f:b6:4e:67:ba:dc:09:c9:ab:da:a2:e6:bf:f6:
                    5c:83:f0:eb:2c:d7:9a:65:ab:48:11:ff:f6:9c:9a:
                    b9:c4:68:2b:34:3c:5a:c7:38:51:bb:eb:18:17:9d:
                    e8:81:76:2b:ef:f9:25:6f:c7:f5:67:91:c4:84:f2:
                    c2:46:cd:49:dc:74:62:2d:76:91:e2:d3:c6:13:a4:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C5:5F:3F:D2:8A:FE:18:3B:35:0E:00:A7:A3:E2:3D:B2:04:00:54
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7f:26:f5:8f:e8:d5:2b:06:1e:a7:81:aa:29:d5:46:f4:10:
         e6:ac:90:ae:d0:3c:e5:97:cf:03:fd:de:2d:22:4e:3d:2b:fa:
         3b:6d:1d:df:c6:c4:6a:77:56:e4:d1:eb:c9:db:5b:41:c5:10:
         d8:4f:77:f2:f7:6c:8e:b5:f2:1b:c0:6e:9b:a2:aa:fc:4b:36:
         66:19:d5:8c:fe:67:15:b0:58:59:a9:fc:3b:d2:2e:69:0f:26:
         72:e3:1f:00:75:71:d4:52:61:1c:28:30:49:7d:7a:4b:d9:f6:
         a2:07:4f:1c:2d:05:c5:b6:ae:32:c0:51:71:c9:5a:0c:db:34:
         fa:02:35:98:e3:6c:37:42:88:99:bd:dc:88:cf:c4:e4:6b:90:
         7f:c5:4e:c9:cb:53:fb:8a:f4:e4:88:b4:2b:d6:82:cc:6d:6d:
         83:68:c0:2a:c0:46:0c:cd:fa:68:12:a1:7c:22:2b:fe:3b:d0:
         84:d6:d0:e5:4e:96:ad:bb:3a:c8:b3:b3:fb:89:86:aa:6d:d4:
         28:88:e2:92:b3:73:32:e3:ec:3a:a7:a1:13:05:d5:50:98:f1:
         7d:66:6b:ca:0e:81:6e:f5:54:3e:29:ae:5c:0f:f9:32:f6:30:
         71:bd:09:cc:41:c2:90:da:cf:30:de:ff:de:61:3e:b1:80:f4:
         35:00:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:11 2026 by rpki-client