This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
File:                     6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json)
Hash identifier:          6Vl8/lclWy1hrY0ax/+PCVDpoSmbf90lNkA6JP4H9Xk=
Subject key identifier:   46:22:B9:61:D4:5C:E7:78:C1:71:BE:3C:8B:40:41:B8:BE:CD:E8:CD
Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
Certificate issuer:       /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Certificate serial:       019BF83F061E465CB71737B227C340AF5514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
Manifest number:          0152
Signing time:             Mon 26 Jan 2026 03:00:38 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:38 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:38 +0000
Files and hashes:         1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: 2DbdusDP/U3UFfIWqG7CfIi8ZYPDCSZeQesgwqwo1mI=)
                          2: n26cCYAcOhIFYAKn4bjFjFh7xRc.roa (hash: DPfOpP0A4iPdwjipLuqhqxwCuOKqp7u2xmFkTIq4Dqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:06:1e:46:5c:b7:17:37:b2:27:c3:40:af:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
        Validity
            Not Before: Jan 26 03:00:38 2026 GMT
            Not After : Jan 27 03:00:38 2026 GMT
        Subject: CN=4622b961d45ce778c171be3c8b4041b8becde8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:70:c0:1c:83:cd:32:b7:8d:5e:22:80:fb:07:
                    2e:0e:48:4b:e9:96:13:a9:9e:0a:42:3d:f2:9b:51:
                    04:42:66:fa:86:51:e7:74:e1:0e:52:f3:aa:57:49:
                    af:40:19:c0:41:7e:b0:12:0b:12:16:e9:d2:3f:06:
                    85:96:5d:5a:ab:6c:59:f8:be:37:de:e8:8c:3e:bb:
                    07:02:c1:69:d9:1c:c2:a2:30:5a:34:fb:74:64:95:
                    9b:a6:f1:bf:2e:f7:e7:e6:2b:c0:a3:db:c5:d1:b0:
                    5c:c6:20:38:75:0c:62:0b:8c:8d:a3:2a:0f:82:78:
                    4f:72:85:9c:af:a4:70:ed:f6:35:5b:b5:69:40:20:
                    b4:e6:cb:1b:3c:50:a8:d5:20:08:06:ba:65:74:b6:
                    7a:e0:f9:11:82:00:65:87:d4:80:f6:ab:ba:78:60:
                    f3:d1:26:13:4b:04:a2:ab:20:c8:43:b5:c8:39:64:
                    61:05:a6:aa:5a:94:46:3d:08:8f:4e:a9:86:8c:e9:
                    71:e4:a9:b5:3d:1e:29:71:e6:af:8f:2d:d5:e2:25:
                    c1:5b:bd:15:fd:af:00:a8:a2:d6:d0:f1:1d:b6:87:
                    da:b2:75:52:30:86:65:c8:7b:46:6f:e8:84:aa:2a:
                    be:78:6a:96:95:8d:84:9c:3f:bd:75:67:5b:ee:1d:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:22:B9:61:D4:5C:E7:78:C1:71:BE:3C:8B:40:41:B8:BE:CD:E8:CD
            X509v3 Authority Key Identifier:
                keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:78:01:2d:05:75:c6:3d:8c:c1:48:af:e1:74:cf:e9:e2:38:
         58:47:0f:72:5a:2c:79:59:6e:93:b5:ef:c2:67:e1:d3:7a:a9:
         a5:0d:55:17:08:41:ab:ec:f4:21:4f:58:7b:b3:8a:55:56:d2:
         bc:5e:7c:dc:e8:be:cd:ed:80:7a:ee:e7:88:f1:a7:e9:a6:c3:
         5d:3a:2d:fc:2d:c3:4d:01:8f:3b:2f:8b:f3:b7:52:b7:06:f7:
         7f:a3:ab:32:f6:a1:6f:b6:a1:8c:e1:03:02:b3:83:03:cd:86:
         db:94:78:a6:10:fe:23:61:ab:28:1a:b1:e4:62:d8:56:f1:3c:
         2d:bb:f9:f2:6e:20:79:2d:5e:c7:4c:4a:18:5a:e6:09:43:9e:
         20:1c:cd:26:84:a4:ab:1f:3b:98:57:a8:3f:d0:7d:63:aa:a8:
         cb:7d:cc:0f:03:72:5c:e5:7f:35:96:28:1a:03:b3:7a:a7:74:
         9b:31:b6:ff:de:95:4c:16:09:85:c8:3c:75:ee:ee:fe:65:eb:
         e6:04:c8:8b:29:ab:ce:13:6a:13:8c:aa:93:ac:b3:18:04:ab:
         56:3b:51:a6:12:64:61:0b:78:59:5c:d3:ad:e3:f9:49:2c:7b:
         9d:ba:5c:21:3d:61:84:d2:df:a2:b7:2f:3c:ce:41:6a:da:4b:
         09:19:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:40 2026 by rpki-client