This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          L3YP+D0Q8y/T9F5AL6pFDIxot4246KBCfQeppyeCUcY=
Subject key identifier:   54:83:B2:FB:A2:93:80:15:9B:33:F5:46:8D:44:22:50:9E:EF:46:C6
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019C42105A7CED077D40EB694162070B739D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0C7C
Signing time:             Mon 09 Feb 2026 11:01:33 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:33 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:33 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: DC2kmet1V+Hpy2zBlejFH2id3WlVnayQVYz03ki0S+I=)
                          2: CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa (hash: nNkOheFA1Bvc9D0wPsf9Fhra1hW/4NT0jdBtU1SIYdk=)
                          3: KaO-__UQ_4-yFi8MMxv305lzDlw.roa (hash: MPyADIXrlTVIshlYvvPri9A+eTXT/5p1O9Y/NNCFTew=)
                          4: myL47iydC8eKGLu8PQ2TD5S3cnE.roa (hash: l0U46siz8BLtzrVkMhNRaqElDbC1K1LmUtKA9hKwXgg=)
                          5: ojYHQmSAFTm29RLFj7gCPdYmCjg.roa (hash: 7+saW1Xd2Xb7UDM8OgcUC8MrbOvLnaAq3EyCVMvJhAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:5a:7c:ed:07:7d:40:eb:69:41:62:07:0b:73:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Feb  9 11:01:33 2026 GMT
            Not After : Feb 10 11:01:33 2026 GMT
        Subject: CN=5483b2fba29380159b33f5468d4422509eef46c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5b:4e:17:6c:d9:ac:df:48:ab:bf:49:64:9c:
                    43:de:e9:39:df:20:98:f5:8a:a4:7c:a4:64:61:f5:
                    48:80:d3:c0:d0:fa:df:8d:59:e7:e3:12:62:89:93:
                    92:3b:67:5e:af:f1:96:a9:dc:69:c0:ed:6c:0b:77:
                    66:b9:45:c5:fc:00:70:35:3a:97:09:bc:e9:30:1b:
                    16:19:d7:d2:ba:b5:ac:c1:97:7c:f1:7d:92:b7:b2:
                    61:ad:6c:7b:c1:fc:c0:2d:4c:1a:94:cf:9f:e6:14:
                    26:3a:44:35:82:ac:ae:cb:3d:ff:7e:23:2a:6d:93:
                    51:5f:0d:7a:01:d8:88:f1:e3:07:e3:5a:4e:31:d1:
                    14:71:7f:86:18:1f:81:b0:e0:eb:cd:a9:ec:44:bb:
                    bc:1f:f4:0f:36:a8:3a:c2:90:ad:20:cd:5c:1a:08:
                    bb:6a:57:8f:8c:63:b5:7c:1b:c6:41:8b:df:d8:e0:
                    f8:73:5f:0a:55:0f:c9:b9:09:d4:1f:e3:e8:82:20:
                    cc:f3:03:3d:9a:b5:5e:42:d5:79:e5:1c:1c:15:2d:
                    77:ca:27:1f:29:81:72:46:fb:61:3f:1c:a0:df:d7:
                    84:e8:7a:7e:19:be:48:e3:9b:c7:db:06:f5:86:b4:
                    e3:aa:53:d3:77:5f:c3:29:5d:ac:08:5e:6f:41:7b:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:83:B2:FB:A2:93:80:15:9B:33:F5:46:8D:44:22:50:9E:EF:46:C6
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:97:37:f5:bb:1d:55:bd:69:38:40:b2:e5:1a:fc:69:c7:
         ac:57:4d:ac:b4:c8:3c:b6:b8:00:41:11:a7:a1:06:fc:d6:8e:
         eb:30:16:2c:ad:d6:50:bb:e6:86:f6:0c:94:ab:58:b8:87:de:
         8d:15:99:46:31:94:cc:f7:73:ab:84:e8:ed:17:04:64:ce:d6:
         6c:3a:69:04:94:36:73:63:93:a3:16:c6:3d:c6:5b:d6:88:f9:
         62:63:83:de:29:22:25:a8:3e:4c:e8:2c:a0:6c:24:c0:10:26:
         c2:15:f2:df:92:85:39:4e:bf:9a:ee:b2:d7:9e:8f:ff:3c:ed:
         1e:67:fa:9d:53:39:f5:20:07:d1:cd:9a:dd:c8:e5:b6:f4:46:
         5b:9a:19:9c:dd:2c:86:11:3e:db:52:53:9c:c7:6a:9e:92:45:
         79:65:76:4b:3a:5f:4a:b3:c9:35:90:58:f9:fe:e0:7a:98:79:
         c3:48:94:b4:9b:fe:48:ba:fe:88:1e:26:c8:18:a7:10:b3:a3:
         a0:35:08:39:67:70:49:5a:dc:55:c0:8b:eb:1c:93:82:0f:4b:
         99:62:6a:a3:98:f0:07:30:00:ed:cd:1c:d1:75:cc:fe:80:5a:
         c5:f6:15:85:1e:78:be:0e:f8:c7:42:af:0d:07:07:49:54:bd:
         8a:34:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:44 2026 by rpki-client