This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          cQ0z8jKFOXTvE28akNSXQQWrIJi80Vxa/gGEm18UEcY=
Subject key identifier:   32:56:6F:76:C6:47:D8:D6:5C:35:44:05:77:2C:4A:EC:70:47:FF:61
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019BF4D0CB2E3962716DFF9872FB8B4B17B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          1803
Signing time:             Sun 25 Jan 2026 11:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:22 +0000
Files and hashes:         1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=)
                          2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: 6F9vUsaoYIKNJEu6XvZ4AAMzjHg9l4pLIUA82JaCwM0=)
                          3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=)
                          4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=)
                          5: Ers0lMXA5ok349Wr6SFWIF2csrg.roa (hash: nzl1RxmeoBfyHiC+5nu7MWFJ3ak5M0GdXB6zXYSGWvI=)
                          6: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=)
                          7: KiD6ssPlTlxGNfiwbyM4hLM9pzA.roa (hash: yAf1scWMjSGjega912ghv6J5AS/+kGn8+3uGUK0y55s=)
                          8: MfXXH5uyMjxJS9-0ROwlt3yXcEk.roa (hash: 1+CoCqM4Yk8Y6cvI59FiuCQ7nWHGYta/hsbHqMSiJAM=)
                          9: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=)
                          10: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=)
                          11: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=)
                          12: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=)
                          13: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=)
                          14: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=)
                          15: qYTtq3q7q4Gc2_WgkbgN_uPF6LY.roa (hash: BKUzX6nX7zJSvj7pEJzBFin4cchED2WFv/FH/o3TjAY=)
                          16: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=)
                          17: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=)
                          18: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:cb:2e:39:62:71:6d:ff:98:72:fb:8b:4b:17:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan 25 11:01:22 2026 GMT
            Not After : Jan 26 11:01:22 2026 GMT
        Subject: CN=32566f76c647d8d65c354405772c4aec7047ff61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:bf:0e:e9:56:e8:da:3f:bf:d1:33:c8:3c:
                    c2:0d:d0:1b:63:8b:1b:eb:3c:2e:3d:5f:49:db:43:
                    2d:cd:f5:8b:fe:73:8a:7e:e6:fd:e5:15:88:64:ac:
                    4e:65:cd:70:2c:10:6b:b5:43:09:e1:be:21:81:13:
                    58:21:39:65:06:a4:78:13:8c:0d:c6:e9:4a:d9:d7:
                    06:32:d1:fd:4f:1c:69:27:7e:a5:0b:b7:3f:ef:ff:
                    77:79:5a:1d:eb:29:f2:60:55:21:4a:4b:aa:99:99:
                    18:d7:f7:64:00:04:17:5a:dd:50:cb:27:58:52:30:
                    72:96:7b:eb:9b:57:07:08:b9:fb:e9:26:87:30:6f:
                    23:c0:e9:63:ed:4e:4e:14:c5:b6:50:a6:48:0a:ae:
                    19:bb:f8:65:07:b1:9d:0d:ed:79:fd:30:5f:a4:d2:
                    6d:68:66:18:02:a1:a6:5a:6d:51:30:9d:7b:ce:56:
                    20:5c:51:8f:e1:54:1a:3d:fd:23:cf:27:14:a4:9c:
                    67:9e:53:c5:49:78:8c:77:97:53:99:56:ee:a8:01:
                    45:5c:10:4b:8a:a9:af:44:5f:ec:a1:de:cd:84:3d:
                    d2:d7:f7:fa:86:74:43:24:43:77:cd:b4:87:33:31:
                    42:81:44:85:ae:89:b6:59:e6:60:63:a4:29:ae:43:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:6F:76:C6:47:D8:D6:5C:35:44:05:77:2C:4A:EC:70:47:FF:61
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:39:b4:bc:f9:1e:c5:bf:6a:14:f3:ed:8a:9b:f3:21:80:a2:
         e3:4c:13:ff:f2:88:1d:2d:5b:1f:c1:0d:44:45:ed:fb:37:75:
         9c:d7:f8:39:be:87:ca:91:a7:33:a4:f6:3c:1f:7d:fb:f5:95:
         91:34:a5:f3:6c:22:1e:7d:65:cd:c3:b4:80:ef:1f:33:52:97:
         c5:3a:31:2f:ac:37:42:7f:ac:4e:35:e3:02:21:a0:0c:d6:23:
         e5:48:12:51:c6:b1:ab:57:c1:c3:dc:dd:d3:67:a9:d8:eb:52:
         10:04:15:0a:5b:e9:51:45:15:82:21:ab:75:ff:3a:ad:b2:3a:
         60:e1:8f:49:73:0a:c8:87:f0:bd:12:26:5a:05:d5:a0:53:a9:
         b8:15:9d:f3:8f:14:f6:13:58:09:eb:21:8a:2b:39:7a:80:56:
         97:02:8b:df:e1:70:f7:ff:30:73:76:41:2f:df:67:d3:5e:d5:
         73:3d:90:3e:15:2b:15:b3:38:2c:81:10:cc:a6:87:dc:39:94:
         b7:05:b1:8a:82:4a:66:c5:5c:21:71:7a:b9:3e:f9:29:83:2b:
         06:52:21:be:4b:92:b5:d9:f1:b8:f3:cf:ed:e1:6c:93:ba:a2:
         9e:bc:b9:1d:4b:96:c1:5b:28:d2:6e:a6:5e:2d:e6:35:75:10:
         00:7f:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:13:46 2026 by rpki-client