This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          lt0RSpKT9i8zYn4YYg5+CZII/bHtfcXxHJvwU+a729o=
Subject key identifier:   FC:6D:80:29:39:71:E2:91:51:88:1E:AD:CE:09:2C:9E:37:7A:88:25
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       019BF575008B218C7CECB97A24DE6E8584E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          0D09
Signing time:             Sun 25 Jan 2026 14:00:44 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:44 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:44 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: snP7xKE8ocU6WcWldNE0zMDWgQlrw6CA5EHdo7SUr88=)
                          2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
                          3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:00:8b:21:8c:7c:ec:b9:7a:24:de:6e:85:84:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: Jan 25 14:00:44 2026 GMT
            Not After : Jan 26 14:00:44 2026 GMT
        Subject: CN=fc6d80293971e29151881eadce092c9e377a8825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:c5:a8:48:51:ce:71:33:67:81:d5:ab:8a:
                    e9:97:ea:6a:e6:d2:1b:e3:c1:3a:5b:15:5e:c1:df:
                    c4:05:13:05:d3:f2:e1:03:ea:b7:15:a4:8b:4e:c9:
                    9f:38:99:0b:ba:ce:76:e9:8b:67:68:e1:c1:76:14:
                    68:ce:9a:55:dc:17:41:69:20:67:35:d2:26:d4:af:
                    80:a3:6f:b4:a7:61:53:6d:13:f5:89:7d:1c:28:09:
                    00:b4:d0:83:56:5a:12:fc:c9:1c:8f:06:3e:d7:96:
                    79:45:e0:c4:8e:6d:7c:92:e5:4d:57:6d:04:2c:62:
                    0a:f4:19:b6:f6:6e:c6:50:b9:16:c4:66:40:85:d7:
                    fd:51:e3:d2:f1:56:10:0e:07:d6:5e:e1:e9:f3:6f:
                    65:42:ce:ad:0b:7d:c0:1e:a8:1a:3b:f0:2a:ea:db:
                    49:a0:eb:e6:60:37:6e:61:cb:6b:96:63:cf:09:d2:
                    51:20:de:3d:87:b3:68:9a:cc:3d:9f:97:4e:eb:b1:
                    b5:04:e9:e8:e0:40:fc:ca:c6:0b:d4:69:d8:40:9d:
                    95:36:29:97:3e:2c:de:01:38:4f:b5:9c:6d:68:d9:
                    23:77:11:09:cb:77:4c:31:3a:ea:d4:52:ec:9b:92:
                    20:0a:36:2c:97:f1:4a:67:91:3f:f1:7d:e3:04:75:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:80:29:39:71:E2:91:51:88:1E:AD:CE:09:2C:9E:37:7A:88:25
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:62:67:9c:39:82:52:f8:13:09:37:fa:e5:77:c8:15:67:
         a6:b8:20:ff:a7:2e:c3:ed:88:55:fc:3d:f8:19:c1:20:6b:3e:
         ae:70:ad:1d:21:68:c1:2d:d7:1c:c4:55:93:b7:18:1d:b2:21:
         c8:c6:9a:f4:1a:fd:79:3d:56:47:df:aa:e1:71:81:49:2c:a2:
         1d:06:be:87:ba:e6:bf:37:82:54:76:5a:9d:59:95:67:aa:42:
         c5:40:5d:df:25:16:d3:c5:8d:44:8f:ab:d2:6e:c4:81:c6:f0:
         53:09:09:f3:7d:85:e4:aa:78:9f:e4:da:b2:cd:e2:d2:e1:72:
         0a:73:47:be:a9:30:88:db:b6:b5:11:e8:15:b0:f4:db:a4:03:
         4c:79:57:9b:c0:6c:65:a5:76:dc:e2:51:0a:a9:9f:4a:19:be:
         41:9d:c9:d9:e1:c2:b8:dc:d4:e7:38:f1:a9:24:fc:ab:ad:ae:
         a9:3f:4b:7d:c7:5e:e7:74:ba:95:ba:a8:3f:b4:8d:9e:be:9e:
         32:63:d2:21:ca:0b:f8:e5:68:5e:8a:6d:e7:ba:76:dd:51:9a:
         b4:6f:4d:bd:f0:06:53:75:31:30:87:12:5a:85:32:0e:49:4d:
         8b:47:fc:63:5c:04:22:9b:d2:7f:a1:20:94:33:b0:b6:0c:2b:
         bb:16:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:46:11 2026 by rpki-client