This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          ZW51Ju6uO3tFJY7/9UY0gM0zrLLES7qS5AIVqqFW6to=
Subject key identifier:   4F:6B:01:07:7F:E4:E2:2A:85:14:93:82:9D:F7:87:9B:0D:D7:A1:68
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       019BF1CF2C6DA7043241470928E277277715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0923
Signing time:             Sat 24 Jan 2026 21:00:44 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:44 +0000
Manifest next update:     Sun 25 Jan 2026 21:00:44 +0000
Files and hashes:         1: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (hash: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY=)
                          2: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (hash: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A=)
                          3: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (hash: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk=)
                          4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: 6irnhS07I/VbGsuBGBOfOezzpzledosHcw3Nwj/WbVs=)
                          5: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
                          6: kIDgGMW1uXNaj9KusJXcTTlIh7c.roa (hash: PwAEtgyKC+fUUIGh92oSv3jyXm09MobuWsRtDnHhYsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:2c:6d:a7:04:32:41:47:09:28:e2:77:27:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Jan 24 21:00:44 2026 GMT
            Not After : Jan 25 21:00:44 2026 GMT
        Subject: CN=4f6b01077fe4e22a851493829df7879b0dd7a168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:e8:48:db:03:87:af:4c:a0:84:16:39:50:
                    c3:72:9d:e4:8c:9e:7b:96:7e:69:98:12:d7:10:71:
                    55:08:6e:8c:30:4d:6a:bd:76:e6:01:f3:9b:c9:15:
                    66:51:57:25:a4:7c:42:67:a9:97:be:b9:5b:d4:37:
                    43:91:a3:11:4b:b1:a1:f0:81:46:05:a8:56:cb:a7:
                    1c:47:9c:7e:b2:f7:6b:8f:8b:33:2b:4d:cd:05:6b:
                    52:31:88:c0:3a:91:34:e5:08:9e:57:18:14:1e:73:
                    7a:41:b0:b5:94:ad:b2:32:ed:6c:40:bc:89:36:e4:
                    46:2c:fe:12:e8:45:ad:21:92:30:7e:cf:25:84:9d:
                    38:e5:e9:ae:bc:ef:91:6a:dd:82:51:99:76:ca:b4:
                    95:89:68:ac:ae:6e:a9:42:9a:89:4a:27:78:92:f9:
                    9c:31:0e:67:bf:bc:0a:e8:29:69:17:8a:c4:71:84:
                    ee:bf:32:76:e1:4a:4d:88:75:cc:60:36:56:f4:93:
                    b4:8b:41:f0:72:7f:a9:6a:d6:91:02:c0:a1:61:25:
                    a0:41:13:ac:ec:a3:08:0c:48:a7:bf:13:f0:2a:20:
                    12:f9:0d:5e:da:88:79:8e:3e:a5:ba:52:98:3e:a6:
                    81:cf:d5:0b:5b:c5:e2:8e:38:8c:cb:19:0f:98:45:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:01:07:7F:E4:E2:2A:85:14:93:82:9D:F7:87:9B:0D:D7:A1:68
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:13:03:73:fb:64:0e:0d:9e:58:d4:3b:b8:87:0d:6d:db:d8:
         8d:44:67:2e:6d:a2:fb:44:5b:83:2a:a9:72:93:47:82:27:d6:
         56:5d:6f:cc:64:89:e9:a1:8a:d4:e4:d8:f9:c1:b0:a9:b0:1e:
         33:16:8c:ff:f7:26:08:4d:ee:47:62:89:45:a3:ce:a3:7e:e7:
         f2:27:71:4b:e1:0c:9d:0c:6c:92:72:60:07:95:64:0e:b4:59:
         9b:bd:76:6e:2e:0f:39:b9:cf:0b:f0:8a:4f:8b:9d:0f:80:16:
         23:0a:3a:b8:46:26:2c:67:27:c4:fd:36:46:14:a3:39:09:bc:
         b1:d8:40:f0:68:63:08:9e:2d:69:91:dc:7c:78:e5:80:d1:55:
         8d:a8:38:d0:80:c0:21:23:45:d0:55:05:c5:9f:9c:76:ea:fe:
         2a:e6:a2:27:5c:62:f2:48:c8:8c:3d:c8:3f:55:f2:9c:19:ea:
         3f:a1:3d:11:01:6d:8b:34:29:bd:a7:73:a8:a1:41:69:9c:e8:
         7d:c5:ac:14:95:cb:f2:c7:41:57:a6:8f:e8:d3:11:7b:70:01:
         22:62:2f:50:06:b9:b2:1a:b6:44:10:8c:48:d4:73:b9:ff:2d:
         90:fe:ed:97:7d:64:ba:ec:2d:67:da:7f:f1:92:db:57:44:03:
         6d:55:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:52 2026 by rpki-client