This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          B94k6JDZURajMppmolStbMni/9ITPEMkS6AIhOCzKxk=
Subject key identifier:   C8:82:01:2A:99:DD:CD:D1:C9:F5:F1:E1:80:55:9C:0E:66:82:CC:35
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019BF4D0BA9529FF916E4D9A94733242762A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          0EC9
Signing time:             Sun 25 Jan 2026 11:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:18 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: nnjCiXm+DGzNUIFP6CEox2JJINbb0pPrvzWyK4KPKTM=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:ba:95:29:ff:91:6e:4d:9a:94:73:32:42:76:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jan 25 11:01:18 2026 GMT
            Not After : Jan 26 11:01:18 2026 GMT
        Subject: CN=c882012a99ddcdd1c9f5f1e180559c0e6682cc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:ba:b4:57:ee:4d:1f:d1:4f:43:25:dc:5b:
                    0e:17:32:de:90:14:38:68:d1:93:e9:72:d7:9b:53:
                    17:f5:4a:61:6a:c2:c8:c5:f1:7d:f3:1b:31:51:05:
                    25:d4:62:e2:05:c0:7d:1d:da:6c:14:16:4b:22:43:
                    71:c6:5f:70:51:90:52:7c:0e:54:35:5e:96:e6:73:
                    70:49:ee:80:07:83:9d:fc:48:ac:7d:1a:37:3d:e5:
                    61:23:04:19:72:df:7d:eb:c7:9f:19:75:f4:ad:b5:
                    65:d8:c0:26:80:bb:e3:df:dc:fa:3b:e0:1c:ea:ee:
                    ee:82:79:5f:3f:47:f0:d0:67:5e:62:10:b2:b8:ae:
                    3d:3a:c4:88:77:a6:57:a0:da:7e:dc:51:f8:3d:ea:
                    a8:cf:e4:99:f5:89:76:cd:18:fb:32:42:d1:4e:4d:
                    ef:c9:aa:73:04:eb:62:81:0e:9c:09:d9:b1:7e:c3:
                    b6:34:af:24:bb:2b:48:0f:e0:c8:d1:49:34:32:3a:
                    1c:c0:d4:f3:92:1d:4e:f5:4d:36:aa:4a:50:ca:29:
                    b5:c8:46:1c:95:ff:c0:f8:98:17:ac:9c:df:d6:09:
                    de:39:69:ed:97:3d:98:23:09:be:30:10:8a:8f:c2:
                    1e:0d:9f:72:7a:3c:f1:71:cb:d5:95:e2:53:37:c3:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:82:01:2A:99:DD:CD:D1:C9:F5:F1:E1:80:55:9C:0E:66:82:CC:35
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:10:4a:c3:87:61:1c:67:21:6b:cd:63:5f:da:17:dd:f5:2e:
         48:a0:9d:86:79:7e:c9:6f:fb:5a:89:93:57:32:4f:6d:3b:6a:
         3f:c9:0c:26:26:bb:4d:ae:fb:44:85:d3:01:d3:76:8d:5b:d1:
         07:8c:73:da:41:88:e1:b7:01:42:53:87:8c:ea:8d:09:95:86:
         00:7d:e2:e4:c7:81:f9:98:90:87:75:b5:3d:05:59:a4:b9:fb:
         bf:52:63:c2:46:38:e6:a9:6a:76:a3:e2:01:f9:c1:97:21:14:
         6b:af:d9:43:6e:58:1b:5d:35:3f:0d:87:a1:15:53:7f:9c:2b:
         8c:65:ae:f4:ed:58:6d:4f:02:89:8a:69:5e:9d:31:1e:78:fb:
         c5:b1:71:63:a4:c4:6e:11:cc:41:e9:14:f2:22:0a:a4:84:0e:
         a2:4a:fc:88:4a:77:fd:fb:a5:42:52:31:31:dd:aa:70:2d:63:
         db:5b:a3:21:fc:ea:9b:5e:e5:8d:bf:3c:5f:f5:38:ac:9e:e0:
         73:95:ec:22:51:e1:5a:06:22:a3:90:21:c7:43:28:42:43:62:
         37:30:93:b4:07:6b:d6:e1:e9:20:e7:17:bf:0b:17:05:9b:82:
         9a:30:ca:10:a5:71:0f:85:f3:9f:c5:6b:8e:80:c8:f6:b6:be:
         3d:52:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:16 2026 by rpki-client