This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          hPx0zmgfilmgQsb8O+EO4KeqdzGfKVBSsmf506TJXrU=
Subject key identifier:   B9:1E:1F:EA:42:9D:F2:BA:BB:2F:47:65:BD:8B:C1:48:43:12:88:04
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019BF3F5AE25874FED4780C674067D2F23DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          0FE6
Signing time:             Sun 25 Jan 2026 07:02:02 +0000
Manifest this update:     Sun 25 Jan 2026 07:02:02 +0000
Manifest next update:     Mon 26 Jan 2026 07:02:02 +0000
Files and hashes:         1: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
                          2: JnusafZM9SODnF8zPyjbOXPor2k.roa (hash: srb1yfQWnE9aW96NrcbrBQ/908feeGdR7K5sg1Fie0I=)
                          3: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          4: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: CTSi/FFT9tvVDExhc7YPeNnqKI51ID8t6GexN1feaEw=)
                          5: jXqaF5MblobSNBdDx4RNzl0oyTM.roa (hash: BFvzdKcA+RwPbBxbUimir+ZwCoUlTYvoMhP2qmMesDw=)
                          6: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
                          7: t6iqftpbJQl-rj4l4hMmt54XfbA.roa (hash: lDaGCGIXZDpqUqTytYf/+3g7w0I/cU8Ge92ZphoqH7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:ae:25:87:4f:ed:47:80:c6:74:06:7d:2f:23:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Jan 25 07:02:02 2026 GMT
            Not After : Jan 26 07:02:02 2026 GMT
        Subject: CN=b91e1fea429df2babb2f4765bd8bc14843128804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:a2:ed:19:2f:3c:5e:54:7f:e9:23:f2:2f:
                    ec:32:f5:42:fa:15:a5:ae:f7:97:c9:90:fd:75:13:
                    ed:ad:b6:be:ba:98:7a:01:6f:82:4b:a6:23:4d:fc:
                    51:7d:86:3e:a8:6a:1a:65:cd:f3:92:d2:5e:10:d6:
                    66:c5:70:34:45:3b:99:ef:41:75:59:d1:0a:b7:ee:
                    ad:cc:9d:64:5d:57:a6:a4:b2:2e:c7:21:89:86:da:
                    b2:7b:20:9d:78:02:1a:7c:83:61:c5:66:2d:39:78:
                    ab:fd:db:2c:64:1c:62:bd:bc:4f:10:30:01:c5:94:
                    7b:3f:c8:f4:e1:99:f0:26:93:f6:55:05:b9:85:49:
                    35:ef:34:23:eb:68:7c:cf:7c:27:25:6c:96:36:c1:
                    6b:0a:0d:f7:ea:c8:8e:e5:dd:a7:30:8e:5a:81:06:
                    12:31:3f:be:7d:53:78:58:3e:6d:a6:57:89:05:29:
                    0c:db:ba:d6:ac:2f:1c:ca:e1:53:e7:ca:16:fc:a4:
                    87:ba:94:d3:5e:17:fe:3e:56:b8:d8:bf:08:8d:af:
                    c5:37:7b:41:ad:3d:89:a0:24:24:19:0a:f4:c3:02:
                    fb:77:1e:59:e9:9f:03:3d:b7:58:16:3a:8a:4a:0c:
                    3b:66:e7:98:8e:8d:c0:04:c5:9f:70:97:03:ab:8b:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:1F:EA:42:9D:F2:BA:BB:2F:47:65:BD:8B:C1:48:43:12:88:04
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9f:b5:1f:78:82:b2:45:ca:ea:23:7a:8a:15:05:24:ae:77:
         4f:36:de:e0:c1:46:68:d5:0f:f8:df:f0:14:90:4a:e7:fb:95:
         69:eb:5f:43:1b:9f:67:4b:78:d6:7f:92:51:f0:10:92:85:0a:
         bd:7c:7d:d7:6c:a9:87:94:60:1c:73:31:c5:15:3f:f0:6e:b4:
         78:57:73:05:46:90:32:2a:0d:00:f1:64:1d:d5:29:1f:fc:4f:
         56:47:07:17:93:96:54:0b:b3:37:7d:78:10:49:28:2f:b8:9d:
         9c:2c:fe:74:67:99:89:3f:d7:f9:7d:51:7f:6d:0a:8e:1e:e2:
         a0:1e:a0:d8:61:95:18:df:ef:1b:bd:64:92:f9:8e:14:d8:30:
         be:1f:c4:4b:0f:90:94:16:ef:50:4b:21:a4:27:fd:1c:b7:4a:
         a0:79:82:be:5d:8b:ee:05:4a:27:7b:22:8a:93:f4:d1:99:f6:
         10:6f:b2:ca:f7:a2:aa:23:4f:61:22:28:b6:70:fd:64:0d:a0:
         90:59:8d:53:84:ba:3f:87:3e:0f:70:6d:9e:19:96:5a:82:e8:
         35:3b:0d:18:d6:c1:f6:4a:25:75:5a:9f:a7:86:0e:66:f9:9c:
         b6:9d:26:65:db:1c:7b:5b:2f:63:50:d7:dc:b0:67:2b:72:7d:
         61:74:d8:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9a4lh0/tR4DGdAZ9LyPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMTI1MDcwMjAyWhcNMjYwMTI2MDcwMjAyWjAzMTEwLwYDVQQD
EyhiOTFlMWZlYTQyOWRmMmJhYmIyZjQ3NjViZDhiYzE0ODQzMTI4ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEii7RkvPF5Uf+kj8i/sMvVC+hWl
rveXyZD9dRPtrba+uph6AW+CS6YjTfxRfYY+qGoaZc3zktJeENZmxXA0RTuZ70F1
WdEKt+6tzJ1kXVempLIuxyGJhtqyeyCdeAIafINhxWYtOXir/dssZBxivbxPEDAB
xZR7P8j04ZnwJpP2VQW5hUk17zQj62h8z3wnJWyWNsFrCg336siO5d2nMI5agQYS
MT++fVN4WD5tpleJBSkM27rWrC8cyuFT58oW/KSHupTTXhf+Pla42L8Ija/FN3tB
rT2JoCQkGQr0wwL7dx5Z6Z8DPbdYFjqKSgw7ZueYjo3ABMWfcJcDq4uxjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkeH+pCnfK6uy9HZb2LwUhDEogEMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ+1H3iC
skXK6iN6ihUFJK53Tzbe4MFGaNUP+N/wFJBK5/uVaetfQxufZ0t41n+SUfAQkoUK
vXx912yph5RgHHMxxRU/8G60eFdzBUaQMioNAPFkHdUpH/xPVkcHF5OWVAuzN314
EEkoL7idnCz+dGeZiT/X+X1Rf20Kjh7ioB6g2GGVGN/vG71kkvmOFNgwvh/ESw+Q
lBbvUEshpCf9HLdKoHmCvl2L7gVKJ3siipP00Zn2EG+yyveiqiNPYSIotnD9ZA2g
kFmNU4S6P4c+D3BtnhmWWoLoNTsNGNbB9koldVqfp4YOZvmctp0mZdsce1svY1DX
3LBnK3J9YXTYNA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:19 2026 by rpki-client