This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          br0md/IWkAoZ5B0ipcnubzU2UNCS4aDakBDUoy/rP3Q=
Subject key identifier:   1A:07:31:76:F4:27:FC:00:F7:8D:D9:3E:BB:9E:9C:FC:BE:C5:E1:25
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       019BF53E8C485C3892FE1D2369C6C7445746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0D36
Signing time:             Sun 25 Jan 2026 13:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:15 +0000
Files and hashes:         1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: otNf98RmKMrIjNtnHvgISrQ99k6+f7z2psoB3ds74hs=)
                          2: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (hash: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc=)
                          3: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (hash: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ=)
                          4: _ciy-lTi4OPOE4H7jBh6iVeSzM0.roa (hash: UoO0miY2aliagEe8/7pX67pSC1+YIe4R/lR+1wd4LX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:8c:48:5c:38:92:fe:1d:23:69:c6:c7:44:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Jan 25 13:01:15 2026 GMT
            Not After : Jan 26 13:01:15 2026 GMT
        Subject: CN=1a073176f427fc00f78dd93ebb9e9cfcbec5e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:f5:9b:e3:95:d6:38:ea:32:82:5f:cd:25:
                    f9:de:45:2a:33:83:d7:d5:47:82:8a:db:14:25:24:
                    9a:40:1c:3c:a6:61:52:bf:54:a4:c8:c5:a2:f3:ea:
                    05:fa:b4:b7:fe:7b:cd:4c:4b:1e:34:75:81:1c:a9:
                    be:e6:97:f2:a3:0d:2e:97:8b:a7:2c:4e:52:dd:f2:
                    57:04:f8:f7:a3:6f:e0:b4:0c:9a:b0:44:ba:b2:fb:
                    1f:d7:e5:c6:bb:90:04:58:1d:5c:45:89:ec:91:c8:
                    e6:e8:64:6d:43:27:cb:ba:32:72:6a:30:de:06:3f:
                    47:95:57:00:d8:79:cb:3b:49:b2:6f:c5:82:41:6d:
                    ea:ea:c9:0e:28:6f:c9:75:39:72:49:66:35:f4:b8:
                    92:da:23:30:a5:29:cd:52:4b:74:fa:ef:6e:bb:5f:
                    6b:21:cc:f3:e3:fd:de:c5:2a:b8:88:b6:75:76:04:
                    13:64:28:f2:0b:52:28:f1:9e:44:64:a8:c4:1f:5a:
                    9c:8a:89:96:86:54:6b:19:4b:82:ba:13:97:9b:58:
                    8b:cf:89:4c:ef:f4:3f:5d:cf:71:d0:74:7b:55:21:
                    1a:77:b3:e3:64:9e:80:f9:a4:8f:f1:08:a5:cb:5f:
                    93:da:3b:fc:06:93:74:96:28:30:67:a1:da:a9:a9:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:07:31:76:F4:27:FC:00:F7:8D:D9:3E:BB:9E:9C:FC:BE:C5:E1:25
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f9:c6:70:45:c5:77:af:f7:16:0c:49:30:9b:6f:ee:c9:0a:
         52:47:0a:90:24:48:84:98:a9:b6:8c:1e:99:12:97:6f:8a:19:
         36:6f:c7:86:68:23:69:1a:e0:8f:5c:5e:08:2b:fe:fc:79:02:
         49:f6:7f:95:c7:d1:43:44:53:70:07:26:66:8f:60:71:e5:6d:
         4c:5c:33:73:ef:c1:f3:d4:8a:84:98:f8:3b:0a:7a:3e:e9:b6:
         9b:1e:1a:da:c6:51:c2:80:1e:a2:8d:a5:ce:4e:9a:28:8b:f1:
         8a:cc:43:e0:1c:43:b7:b3:bb:65:cc:3e:e7:3a:5f:33:46:bb:
         03:28:d0:8b:70:f0:3c:26:b4:f0:ac:a4:3e:0d:00:f7:9b:2a:
         ae:a8:34:e6:1e:13:a9:c1:d5:de:0c:82:fc:c0:91:9e:09:ac:
         42:3a:2f:d6:6a:d5:54:c8:0a:ee:f3:3d:13:7e:ec:ba:de:94:
         c5:8d:c9:62:e0:6b:c9:94:df:e1:72:45:43:c5:b8:53:51:3d:
         dc:47:2c:d0:33:5e:60:f3:37:12:98:04:09:64:35:b8:a1:0a:
         8a:ca:b1:01:1a:38:1d:58:81:40:11:eb:ce:10:e1:58:ab:a2:
         41:e9:55:5d:ac:48:63:80:90:4f:a0:f3:82:ed:82:06:2e:7e:
         f2:31:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:57:27 2026 by rpki-client