This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File:                     6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier:          +NrKGHj3jQlsPnqQLpgJE3Bn/bGga87EelYh6NxP+p8=
Subject key identifier:   3E:4A:A6:B3:44:DC:11:F5:C4:94:8A:29:6C:8B:A6:6A:12:79:AE:E1
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer:       /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial:       019C4322EC72CCB5F9C5BBB4509BF66A5DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number:          0897
Signing time:             Mon 09 Feb 2026 16:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:28 +0000
Files and hashes:         1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: 8Ug0uCjeg+S4v/PtpcUBNlUN9tIn6vtipygn2Vnbb2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ec:72:cc:b5:f9:c5:bb:b4:50:9b:f6:6a:5d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
        Validity
            Not Before: Feb  9 16:01:28 2026 GMT
            Not After : Feb 10 16:01:28 2026 GMT
        Subject: CN=3e4aa6b344dc11f5c4948a296c8ba66a1279aee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:a5:6b:26:5d:0f:30:d1:c7:eb:5b:3b:cf:
                    f7:9c:48:54:1a:2c:75:bd:ec:6b:da:17:1b:68:19:
                    8b:db:27:1b:e5:90:ed:a3:c0:77:1a:0d:1d:8e:16:
                    f3:69:44:06:ce:95:a0:de:77:95:ee:ed:64:7d:0a:
                    7d:44:60:20:40:dc:c4:6c:b7:31:9a:9d:fd:ed:92:
                    3a:bf:82:57:7d:02:05:42:d5:da:47:d9:f0:a3:9a:
                    12:82:a8:87:7d:5e:a5:dd:12:49:77:57:67:d7:23:
                    6a:68:6c:4d:21:9f:d3:e7:d1:1f:0d:c8:02:33:c2:
                    4e:67:43:45:d6:dd:13:4d:ec:13:e6:6f:20:da:54:
                    be:bf:00:f9:e3:e1:cb:4a:fc:5e:23:78:43:45:d4:
                    7b:f1:64:a5:10:1e:61:c9:29:d0:b1:0a:e2:e9:d6:
                    6a:92:be:1b:00:ed:72:d6:7c:90:75:1a:52:2d:bf:
                    b8:5d:e2:42:6a:cc:18:5d:e7:41:08:31:e2:c4:3e:
                    be:7d:ed:d2:02:64:2b:80:d4:cb:00:5d:7d:b8:d8:
                    f2:e9:5b:70:c4:3b:3d:f1:51:89:97:60:90:5f:81:
                    2d:61:ee:65:c2:57:35:b5:b4:8d:f5:4d:b4:97:c7:
                    1b:e1:a9:17:87:ea:af:d1:a7:b7:6d:4f:51:d1:03:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4A:A6:B3:44:DC:11:F5:C4:94:8A:29:6C:8B:A6:6A:12:79:AE:E1
            X509v3 Authority Key Identifier:
                keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:46:c8:79:1a:08:79:e2:ab:e2:e7:75:1c:84:bb:59:35:f6:
         1a:f4:a2:1a:db:ee:2d:f8:c0:f4:36:6b:a9:de:16:0e:00:45:
         d3:97:bb:8d:04:b0:3f:38:e7:d1:f0:66:8c:57:78:64:92:22:
         bf:c5:f4:43:6d:81:01:89:3a:58:4a:3b:ff:92:24:9f:13:63:
         2a:43:b9:b5:b7:a3:9c:45:40:59:4a:74:df:e5:91:51:6b:20:
         00:e9:e3:c0:54:b6:eb:8b:e8:b1:b2:8b:66:f5:13:5d:35:70:
         11:0e:c5:7b:59:01:96:e3:2f:9f:56:5a:9b:d2:79:02:d8:d7:
         21:b8:2b:31:9e:e1:63:77:f8:5c:d0:73:f8:a1:07:f2:04:e2:
         9b:24:39:82:10:02:44:ed:04:f0:8c:c6:f9:ba:a5:3b:17:31:
         a7:d2:1e:29:50:20:62:17:7d:cc:38:b8:12:d8:1d:28:10:82:
         1c:18:6e:00:b2:2a:80:a0:4f:14:8d:c2:1f:16:73:d0:eb:91:
         0d:a0:05:9f:78:94:ff:15:68:0b:d8:3d:9f:04:b0:00:ef:d9:
         58:79:48:fe:39:46:ca:78:93:46:ec:6d:f6:1c:aa:7b:7a:60:
         97:74:68:45:65:2d:df:8c:78:e4:af:f9:27:9d:6d:a4:03:62:
         17:05:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:50 2026 by rpki-client