This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
File:                     6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft (raw, json)
Hash identifier:          75mXfJof5tg7fq7k1jDHYS6hhv1176fgAX3nyIu2X8s=
Subject key identifier:   89:76:2D:E4:F0:39:09:A8:8F:3F:03:03:88:2A:E8:DE:95:18:E3:AD
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Certificate issuer:       /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial:       019BF8AD4E6A4736CAF68BC90E2182AB49F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
Manifest number:          17F6
Signing time:             Mon 26 Jan 2026 05:01:05 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:05 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:05 +0000
Files and hashes:         1: 0OaaKkS63755SpYhx6kJMGc7jsk.roa (hash: yp83fzMHWtdzvYdJOYBhZdlBYbmjJSMrdOBnbSCBBV0=)
                          2: 0gfBZ2nkA_aLudP3O3P5s-KdgXU.roa (hash: gvj32J95khO6lKXoLY+MtPbkkgmfJusWvgloAUZdcEw=)
                          3: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl (hash: LMiGisSAagz2+ZD9F88CHQUHl1pxtsHgcUTlDBhL4IE=)
                          4: 861nedPN3phwQWTx-Y3YBAxRMVE.roa (hash: ERm1FnDrwh1xZ/A8rPaxVuHVGwJdfsBJ3Ujj0zNys+4=)
                          5: 96i-W8uHQfELumiyoD8KgUwjEqk.roa (hash: okWOkWFs1Dluipq3KfyuSGfnv1ZB6ULtQt87WU+u/6M=)
                          6: PEdeolhoIkzE4SikXyvr00NuL-M.roa (hash: xgoG+6pl+LCeGvwW7fq5QtfJTv5CaqjKKcOaYnCKPqA=)
                          7: T0iqjs9CkRPBgC6oTuTASwwLQBA.roa (hash: Q90Lq0syuhBK1/bm/BJJncCiwqmrsvZhqk9lxUir/3I=)
                          8: V_N2zZpFUh_jU5hVB-9KfNEepdA.roa (hash: F0gzOL4EyLJL5B+JsRxqs5zs7pl4bKpVfJSp9poZP8g=)
                          9: Z_CiSK55gizRlmUBAQqWDkAsjSA.roa (hash: ZtijwttgCm0QiPAlfL22m300Zqs50WEunsAW/5Jt8Fg=)
                          10: ZrDJgLArZHytatC5Ncvg5XZJ0L0.roa (hash: ulXA8t+3AsLSNeVGGGbJLh38H9YpiJMgj/n7hk5vfj0=)
                          11: _-6JSjmUimh08CjqKCxWw4-rHNE.roa (hash: +nCDi9UjpJd+hQvMDC1IUEgJRdQMfkefNt0DA5Y2kVs=)
                          12: aVOKvpwocFPOybKu2HArVNos6VE.roa (hash: 0a73eKWIb1Dki0lByBB+mR2gYiKoEVUop3iszyB1pNk=)
                          13: cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa (hash: C49PgeT/JLVMAXMoZTAwnDLdQC/24IQFKGkMPm9+JDM=)
                          14: qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa (hash: vLVUscpAnWQjrZiBQs7cgVM6cDYZNsv2RGlwep1lIic=)
                          15: t5g9JJgTeTxlzlS2-l4KatgQqhI.roa (hash: i6WKydZbQwmwygFZkL0wGJ79C8EFlVc8aiS0Dhfq4Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:4e:6a:47:36:ca:f6:8b:c9:0e:21:82:ab:49:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
        Validity
            Not Before: Jan 26 05:01:05 2026 GMT
            Not After : Jan 27 05:01:05 2026 GMT
        Subject: CN=89762de4f03909a88f3f0303882ae8de9518e3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:24:83:db:79:06:b2:bd:89:99:c3:f5:fe:
                    6b:a4:92:9a:96:17:d2:81:f5:ae:b6:d0:98:b7:a2:
                    fd:25:85:10:71:d4:bc:24:db:83:d1:ab:22:a5:ae:
                    14:ba:9b:44:d4:3e:c9:e0:66:82:33:30:3c:6a:9d:
                    e3:7c:e7:f4:d6:8a:83:98:a0:67:df:cd:39:60:68:
                    bc:ab:3a:04:fd:aa:72:0e:47:de:38:14:10:39:5e:
                    85:f4:a7:8b:4a:12:06:d8:38:20:c7:7d:c2:e0:f5:
                    4e:80:a7:81:d6:f3:1d:ae:97:9f:ea:74:a8:99:6d:
                    8a:68:ca:04:32:4c:ec:da:b0:b7:1c:2b:4e:c0:12:
                    68:8e:3f:b3:0f:51:3d:1d:db:af:7b:d8:a1:36:20:
                    8a:81:e0:f3:3e:8d:ad:3e:4c:90:d9:d2:9b:ab:b9:
                    fc:9f:bb:da:b9:49:5a:19:5e:c9:32:a7:40:58:e2:
                    59:65:b3:7e:6c:7e:db:4b:e2:ac:30:21:7a:81:e1:
                    ce:0d:ee:00:93:fc:53:bb:12:18:14:e4:86:f1:e1:
                    27:63:56:3a:76:9e:90:ca:6a:5f:4b:8a:f2:08:c9:
                    b2:c2:d8:5a:d4:70:fe:7f:4d:38:97:61:81:6d:69:
                    fe:85:20:06:84:d4:4f:21:f1:20:e2:4e:01:63:c7:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:2D:E4:F0:39:09:A8:8F:3F:03:03:88:2A:E8:DE:95:18:E3:AD
            X509v3 Authority Key Identifier:
                keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6d:5b:5b:18:11:79:37:f2:aa:47:59:52:02:16:63:4f:2c:
         78:19:52:75:c9:c0:e2:10:9d:82:d2:4f:e5:4b:f2:cc:1c:ef:
         b0:c4:3e:e3:03:a1:de:a3:44:fa:88:d8:3d:8c:aa:e3:86:29:
         da:44:24:d8:c5:7d:10:6a:58:85:d7:86:7e:94:ea:b5:8d:56:
         e5:8e:4e:32:50:29:bd:e6:ea:0b:26:42:ce:e2:76:f4:6c:b3:
         2d:79:de:da:3c:69:81:4c:2e:10:0e:ea:5f:86:30:f6:de:9b:
         de:67:fb:83:8c:d8:7c:35:81:f2:97:8e:7f:7f:0d:03:dc:ff:
         7c:80:94:92:0e:f0:13:7b:a4:5c:05:fc:d9:aa:68:1c:f8:50:
         72:2b:6a:48:6e:b6:99:3a:c4:bf:3f:bd:96:a8:9e:27:83:77:
         cb:1c:96:8e:46:4d:1b:c9:ef:ac:f7:2b:cf:f4:2a:31:d1:f6:
         3b:ea:6b:cb:c1:4f:de:6f:49:1d:93:47:f3:5c:16:c8:08:b5:
         52:98:ee:93:4e:97:8f:a2:70:d3:7a:0a:05:ff:55:f7:c0:2b:
         5e:af:08:5e:95:53:ae:ea:f0:64:36:cf:7b:4b:1c:f3:d6:9a:
         2d:6b:a6:99:5e:77:67:a8:33:99:c9:85:69:ba:60:be:15:82:
         23:f5:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:27 2026 by rpki-client