This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          v8Ax8RE+YSiT/XWKC5P7pk0WRfKHk4N4gn4dvLapJlk=
Subject key identifier:   62:BF:62:DE:8A:6F:51:94:0F:27:4C:0C:ED:10:4E:39:FF:69:77:55
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019BF6BF3D83E15E6797D374BBE54CB290A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          17B6
Signing time:             Sun 25 Jan 2026 20:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:26 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: aL6LbdNSDzk8FBSkp8mlp0UaEZge0wfbAqn58GbUgb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:3d:83:e1:5e:67:97:d3:74:bb:e5:4c:b2:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Jan 25 20:01:26 2026 GMT
            Not After : Jan 26 20:01:26 2026 GMT
        Subject: CN=62bf62de8a6f51940f274c0ced104e39ff697755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:2b:91:60:bf:07:bf:30:0d:35:71:9f:69:
                    60:f4:1e:55:60:38:f7:f9:b6:ef:1d:b0:50:b3:3b:
                    b0:e5:29:b3:1b:c1:18:10:03:00:82:14:0e:d6:08:
                    4a:51:38:3d:e5:3b:8a:09:2b:41:77:01:34:8e:b1:
                    22:9c:93:18:1e:08:a7:83:69:97:46:b7:55:ca:b5:
                    5b:67:63:a5:74:29:b6:c1:39:14:12:96:48:5c:ee:
                    ce:39:10:90:0f:7a:14:dc:86:1f:43:7a:f0:40:60:
                    11:a0:9f:36:99:7c:53:29:25:c5:90:15:05:e1:7a:
                    84:58:8e:e7:8a:98:d3:e0:33:d0:07:99:cc:3e:13:
                    29:a0:90:77:0c:28:a8:4e:b2:9b:13:1f:fa:e5:64:
                    95:10:40:98:69:ac:46:d5:1a:9e:8f:be:67:65:8f:
                    9d:47:09:0f:ea:6f:b3:0a:06:9d:95:a9:b3:49:46:
                    0c:54:06:d7:85:57:1a:98:f1:13:47:4a:a7:7f:d8:
                    d1:03:4e:3b:70:e9:0e:3a:e5:65:dc:4c:0b:df:e8:
                    2a:df:ef:36:ef:c6:cb:47:4d:1f:3c:64:16:dd:51:
                    ac:71:cf:39:00:29:aa:ad:f1:d4:e4:62:5e:21:2a:
                    5a:a3:b5:c0:9e:b9:c0:fb:e5:69:81:a6:c4:db:7c:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:62:DE:8A:6F:51:94:0F:27:4C:0C:ED:10:4E:39:FF:69:77:55
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:ee:12:15:95:fc:4f:a6:4b:4a:d3:4e:98:5d:a9:d9:5c:
         ca:d8:ad:09:11:e4:13:a5:7a:d0:2b:9f:45:26:a7:9b:21:fd:
         6f:4b:f5:76:51:74:1a:14:e3:87:be:df:ef:60:7f:ad:e4:3a:
         c0:58:8f:45:9e:1f:17:03:ee:5c:12:97:c6:31:9b:73:1e:73:
         a8:0a:f4:9e:d7:9f:cc:2f:04:74:63:cb:48:cd:fd:f1:39:3d:
         5b:88:da:b4:a9:17:c0:04:ad:77:91:c3:9c:7f:4b:68:5b:45:
         db:d4:11:bf:61:1e:3b:32:03:c6:79:63:f2:38:c0:31:5f:15:
         87:f2:6e:73:34:2c:a7:91:5e:28:d1:aa:c8:2f:97:45:08:05:
         d1:14:46:91:af:e6:97:6c:9a:13:66:f5:a6:06:e8:b7:00:85:
         f6:fa:e5:41:3d:81:e0:61:1f:18:20:04:f4:56:3a:d1:fb:6f:
         db:7c:a1:ff:cc:cd:ed:10:86:4b:da:af:d2:26:b7:2d:6b:5e:
         2e:7b:ad:17:25:e5:5b:45:a5:aa:af:e7:ba:61:10:92:0c:33:
         aa:21:61:c2:a9:6e:74:7e:7f:b9:6d:b0:30:a3:33:94:37:58:
         e7:11:25:d7:92:59:b5:0b:2f:df:54:69:82:c7:d8:38:26:47:
         98:21:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:05 2026 by rpki-client