This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          2zPk5fQyO48vOOHTap8f5sUqcVheCOOl63NZBtIZDhs=
Subject key identifier:   A8:A8:DB:62:73:FB:E7:C6:DB:B1:A4:BC:BE:BE:B3:01:70:53:19:42
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019BF68836E48C8C45395C684E8AE6B75921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          1505
Signing time:             Sun 25 Jan 2026 19:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:20 +0000
Files and hashes:         1: 476cp-mWIu1bVun3jZtj5Ncwvdw.roa (hash: IoOiMA21c+z5riXnsno8GmSoKbkDrLpnuAfrPnv1Bkk=)
                          2: 6E4qYsUMxwmtQnOWwvIHMjJRa1g.roa (hash: MGYDAonMBmODXrBLW59dclviCWFHtYhxAosk9RsF+AY=)
                          3: 6FoZpE1arsFmxZr9Y8VI3UVLmv4.roa (hash: DxK1hhInx4stff7E5f9zUgK7ZPEAsdtdaJNP5OgTX3w=)
                          4: 8cTdoFpyK1uxlvGe4E4cJOYy2DU.roa (hash: 8z1/2tfGmavVOd/S2OQwFJV+uwtGMYHfbjubllDpPe4=)
                          5: 9P4hqblliSkSOMVcrNMKmijKGcM.roa (hash: q15PjwzdZRYltlXramnsmodNMs8JDfmkAg/Nz7jTEMY=)
                          6: A0srGWZl2UQ2DHzU59NTspJpWEg.roa (hash: 0qmFl61ly9Yd+1vALFGtJIGWFR5pm8mWDsm69bfTCtQ=)
                          7: FSnX-Oc95zQD86fTYpxZ0h25JyA.roa (hash: R0cQZUP2AaX46KiaNmAHOVyk+pRrBa/Ykogxb4eBV5A=)
                          8: LEukA4xnTfPLig6gUuD1aPwElC4.roa (hash: 6Rm+26DOFUf6kZowj4HuC77VI0dfbQtfIDmPDpYOzlU=)
                          9: NDB9wdIr8C1oiwWf4cOkdecG3vM.roa (hash: 6dC3AlwYRMRxEUFKAwwDy15kTRvFcJz1JchZZrBqjks=)
                          10: SzHJf1_z9dU3KM5sDi_wZZPaT4g.roa (hash: uOcBVeXm2n0ouBDFnTjXVf4GMua7wgfr7TJSzfNF7PI=)
                          11: W5T5YM6RakWxLAbO8hgQK3sFPwE.roa (hash: UQWL1nZftQZ6mbwJ6AE7C+SY69nqOWZ3rKoLddHHVmM=)
                          12: Z-4CpN1tKsoOSMb4TB3JCchHY58.roa (hash: Z7eAgELYlzl5EqtJ31YuJrjV0dN4fNOaXu4xaJp9Ymo=)
                          13: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: 6cvuhyC4Db7JzyicQKTmmKGI88GYCQQ3pFhXOlci/eQ=)
                          14: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
                          15: jr2MrmNKvgvkaJUvTwgCK9768R4.roa (hash: 7wyrtDZfRy4mA/6PukeLbOrGbjNWDRzfMCXsJFdFPfM=)
                          16: kH_gZkSXDuU9QidJel6F9yRcIM0.roa (hash: /2ie7puJnghd8pM6wSNKl73SqpeUmfdqVNlLoIPODtM=)
                          17: l41tPbW0CGX9IcVGZgmgWe5jH4s.roa (hash: y0faCmccquFF4ouGqh3Xs63Vn1DtW0HQ5ohMNtuOq64=)
                          18: mAx98JfPhDLCrH-MWTXW6Mq1lcs.roa (hash: wPC82FVYZPE02MEAyWj2Vz88uVP6Jay8pwhChdxfydA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:36:e4:8c:8c:45:39:5c:68:4e:8a:e6:b7:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jan 25 19:01:20 2026 GMT
            Not After : Jan 26 19:01:20 2026 GMT
        Subject: CN=a8a8db6273fbe7c6dbb1a4bcbebeb30170531942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:11:6c:76:97:0c:c3:e0:2c:3f:ec:26:5c:
                    d8:43:26:35:70:f7:bd:26:cf:58:fb:c4:ec:bd:9b:
                    a3:ba:e2:b8:73:53:55:57:75:37:96:e6:08:3e:a2:
                    b3:ec:35:4c:b4:28:e1:d0:c7:b5:3e:ce:c1:91:a7:
                    7f:43:17:e3:5f:f6:32:80:3f:be:f1:09:df:fa:e3:
                    a2:45:9d:02:58:14:bf:0d:58:94:cb:34:28:e0:aa:
                    52:ef:0b:eb:a4:b0:4a:8d:9b:c2:49:85:ec:2c:06:
                    f2:fb:af:2c:42:db:aa:27:5f:f4:c6:b2:fe:2f:49:
                    6a:70:cb:71:cb:0a:f8:3f:a5:f9:d5:6a:38:9d:e2:
                    b7:4d:6f:25:5d:73:db:9e:3a:d4:1f:22:05:0c:9a:
                    0d:76:38:6d:c5:52:a2:fe:6f:78:62:13:81:a5:8f:
                    79:07:37:bc:2a:3e:fb:68:63:4e:7c:6b:8a:53:b7:
                    56:c3:57:03:f7:d1:61:6e:cb:c0:d2:20:2c:03:8f:
                    ba:77:b3:fb:1a:48:df:8e:bc:e5:69:75:49:46:8d:
                    b7:00:b3:15:1c:a1:40:d9:47:bb:ad:cb:b4:20:94:
                    7a:60:c7:2d:ed:8d:be:5c:9e:20:5f:15:a4:93:26:
                    a9:0f:21:38:d5:71:d8:6d:3e:52:25:5c:ee:5d:99:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A8:DB:62:73:FB:E7:C6:DB:B1:A4:BC:BE:BE:B3:01:70:53:19:42
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:10:f1:59:3e:b8:3a:4e:bd:d0:39:73:7e:bd:30:35:3e:
         b3:3d:7a:7c:b4:f1:85:59:ef:c2:1f:80:7a:8d:d8:8d:b3:9a:
         b1:91:10:11:1d:99:96:a3:30:93:63:27:ab:a3:6c:a2:a1:bf:
         af:50:59:21:d9:ca:b4:32:40:12:98:ea:a6:2b:9d:05:d3:1e:
         4a:7b:a3:f1:cc:d7:ad:2c:8a:50:c5:79:60:c6:b6:cd:00:71:
         59:9e:ad:82:21:50:f8:65:ac:64:62:79:c4:de:6c:d6:12:bb:
         66:c6:74:13:ed:d6:55:34:02:99:3c:80:7f:04:1d:cc:02:67:
         89:62:01:63:8f:81:af:de:41:56:96:95:9b:ae:9b:67:7b:93:
         0c:40:bd:7a:0c:81:61:5b:0e:4d:94:ca:4f:8f:64:4c:e6:9e:
         9a:03:a7:c8:e0:b1:2c:b9:82:0c:46:bd:33:2b:79:1a:5b:cf:
         05:f4:80:dd:4a:55:12:e8:39:43:c5:00:32:ec:3e:e8:4f:a0:
         4e:ea:3a:c7:5e:9f:5b:12:39:8a:b1:cb:f5:fd:ff:1e:68:2f:
         4b:ce:16:ad:dc:e5:85:b2:ff:c7:a4:be:94:dc:6b:60:56:4f:
         e2:bf:c8:ce:f0:69:15:43:99:b9:58:d3:22:62:54:2c:6d:ce:
         a0:25:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:53:14 2026 by rpki-client