This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          RiIuXLxoGg5+ULw/61xnrtl5ZYQNl0+5eYIA3vvUGUE=
Subject key identifier:   1B:CD:53:81:8A:ED:89:D2:4B:B3:18:8E:1C:91:B0:5F:95:64:C9:7B
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019BF387177FF3AB11E81937407683DBFC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          1773
Signing time:             Sun 25 Jan 2026 05:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 05:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 05:01:15 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: Lo6iEaSRyd5srxQdXzP2PpPNRVXU/5Fd5fHb4mADT6g=)
                          2: OEcoV0x2ZiERZGgDrlv6frQzG3o.roa (hash: Fnf+bBSZRAjDDHsRlYG1QWMEEm9hP4YKSKPdjjCMdQc=)
                          3: U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa (hash: ynlZLfA1KKQGA9ays2zyoOPFiR0SmVJSMZZfG1zu6sk=)
                          4: f_5BjnEr80pGWfL1w3q_5fZIFf4.roa (hash: RpdasGSTz3LwfRMX6VuVLK5/qxPoIGc1oN473heL/WE=)
                          5: mtPVSWGGA9av5jGLn16eQn0UQjc.roa (hash: rVQVTg7c8+hdflSpxdf+lr1Hlsinw9GyRMav2V9r1s8=)
                          6: pK6hDJxmfZUaCBepnWZvEBb9jQ8.roa (hash: +OSS7va6u+BokiYgs5Z+5mtwaa42GT6KDBzxwPZg2k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:87:17:7f:f3:ab:11:e8:19:37:40:76:83:db:fc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Jan 25 05:01:15 2026 GMT
            Not After : Jan 26 05:01:15 2026 GMT
        Subject: CN=1bcd53818aed89d24bb3188e1c91b05f9564c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:a6:6e:b5:8b:f8:7d:d0:86:74:b4:61:82:
                    90:1a:65:da:7c:77:96:13:e3:2d:8c:5f:69:4a:f6:
                    1a:e8:08:cf:c5:6f:e4:18:2a:db:d5:db:39:cc:7e:
                    2f:93:54:8f:59:87:d7:5a:10:9d:c7:d1:e7:07:e5:
                    b5:4d:d8:25:2a:17:8c:4e:92:b3:02:a4:fd:44:de:
                    a9:3b:e6:b5:23:d1:fa:e5:08:3a:92:fc:a4:8e:49:
                    0e:33:62:19:63:ed:d8:42:46:9a:f6:47:ec:fe:90:
                    7d:b2:66:c2:f3:06:38:f8:c6:5e:25:2d:b2:4f:31:
                    f6:99:37:bc:da:05:e6:9b:ca:ea:aa:f0:c9:28:2b:
                    ea:2c:72:a1:59:a3:cc:cb:a2:5e:6a:7f:2a:93:12:
                    65:c3:a8:ba:16:12:a9:bf:1c:71:d6:f9:9c:0c:f6:
                    20:41:02:82:64:2f:a2:17:10:95:38:5f:3d:ea:8f:
                    0b:57:ed:2c:e0:1e:95:4c:a2:04:4d:14:c2:41:45:
                    3d:65:82:7f:e1:46:0e:2f:7e:46:78:b9:a4:f6:f2:
                    10:dc:f2:62:03:6d:8d:6a:21:f4:d7:fa:02:0e:3d:
                    4d:cd:e4:de:e0:39:3e:f2:34:83:da:a3:0b:d0:5b:
                    51:96:2c:3a:9c:c0:a2:43:03:37:6b:20:d3:d3:89:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CD:53:81:8A:ED:89:D2:4B:B3:18:8E:1C:91:B0:5F:95:64:C9:7B
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:1f:0e:39:05:f6:65:4e:89:eb:fe:a0:45:d1:76:fa:7a:
         2b:a7:d8:59:12:c7:27:56:9b:90:0c:2a:10:70:44:4e:f7:e7:
         af:5c:0a:f9:c4:b7:92:4c:2c:54:b6:cb:e7:02:32:25:61:0c:
         02:76:9f:8e:92:be:14:f2:0c:18:a0:ef:39:62:85:f8:4f:7f:
         c3:5e:0f:61:66:3f:d6:10:f9:b6:61:59:1d:e1:16:22:5f:a6:
         83:c2:7d:fe:c5:ab:ea:0e:03:81:68:dd:4c:09:2d:43:69:d9:
         0a:9e:fb:64:75:36:80:69:df:7f:ff:d1:4a:95:75:74:2b:91:
         2d:53:b2:39:64:5d:0b:8c:bc:58:87:c0:83:f5:4c:8d:fe:b4:
         fc:95:fa:99:62:0a:a2:2a:45:6f:29:3e:0e:33:35:47:f8:c8:
         14:93:a3:6b:a1:e1:4a:f2:13:1d:9c:d0:f7:8e:6c:b8:ca:6f:
         8b:6f:0e:71:87:4e:49:7c:12:6d:7a:89:73:55:76:96:0c:f9:
         c9:1b:19:bd:0a:f5:c0:ad:7d:b7:8a:34:a0:4e:7c:69:8d:72:
         26:57:0f:9e:13:fc:9a:3d:19:5a:cb:51:19:70:c0:cb:f7:bd:
         89:82:74:b0:cd:4f:57:15:3a:92:f7:17:ff:ce:9f:99:f7:04:
         a8:09:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:09:43 2026 by rpki-client