This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          Ssc3cYVWPCDKee1mH0u2431lVPHqFvI0HOl7lz8RmHs=
Subject key identifier:   9B:50:EF:73:DF:03:DE:F1:E5:83:4E:1C:CD:F2:E1:EF:64:46:3A:59
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019BF5078EB1E26A2F515D7027F5BA05CFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          13B6
Signing time:             Sun 25 Jan 2026 12:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:11 +0000
Files and hashes:         1: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: LDmvlVpn75JCPP7dM6FbHdd9kTooRY4a/1aAUzvm7yk=)
                          2: J_Si888mTIUXmJzVcE29O7uvG1U.roa (hash: VmGywc+NvwZVzJ1wiqrPqs8vYg44e/VGLRIHOp7zQZE=)
                          3: MhLZWTXS4S3zmEURdP_TdxvNgJY.roa (hash: 9rV4NDo4H6diAwu7rDUdqQOfSLYPartWt7sMtwpYVzY=)
                          4: d01OZQ1h5yd4zGfVbRIIarVh3s4.roa (hash: Xg/0ZNy0ArMdMbPyTvAy9IQ+pjsxh8KiRBOhFT7eW1Q=)
                          5: kviMEyCZuerPbRSjjOAweNUOX9M.roa (hash: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw=)
                          6: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (hash: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:8e:b1:e2:6a:2f:51:5d:70:27:f5:ba:05:cf:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Jan 25 12:01:11 2026 GMT
            Not After : Jan 26 12:01:11 2026 GMT
        Subject: CN=9b50ef73df03def1e5834e1ccdf2e1ef64463a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:77:c8:d6:28:93:5e:a7:01:c7:c8:73:17:
                    b4:e6:04:8c:c0:d0:ea:6a:cb:8e:00:86:11:6a:2d:
                    b4:91:69:cf:fb:4e:f7:25:e3:ab:41:e9:97:17:d6:
                    78:62:b8:5b:25:e1:46:d6:3f:54:bd:21:aa:2a:e1:
                    28:ac:bd:97:d9:e5:c0:ac:60:74:5d:63:77:e5:53:
                    02:7b:1f:a6:78:e4:26:cc:21:7a:dc:4e:5e:c3:e4:
                    91:3e:9b:97:c4:37:c8:ad:4f:0e:49:c3:ac:f3:8b:
                    68:4a:c9:57:9e:61:2a:0c:c9:63:69:aa:07:1b:16:
                    6b:74:96:e3:cb:a0:09:44:1f:3d:4c:60:c1:b4:3c:
                    dc:16:7f:2a:90:c7:76:0b:a7:50:d2:48:92:87:5e:
                    c0:f3:d1:1c:ec:f5:09:a9:1a:7a:be:14:ca:ee:24:
                    30:3b:03:28:08:12:1b:cf:c2:90:1d:59:db:0b:db:
                    f3:fc:1f:5f:8a:3c:6c:55:26:5a:54:7f:e0:ee:b0:
                    29:b4:a3:57:38:f5:db:1c:d3:06:2c:cf:f9:59:6f:
                    66:b5:78:31:c2:f0:39:20:0e:6e:81:9b:e5:4d:e6:
                    c4:94:28:05:1a:e0:59:bb:91:d1:3c:53:47:d0:82:
                    6d:3a:ea:39:25:c6:e5:c8:26:cd:5d:b3:6b:81:42:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:50:EF:73:DF:03:DE:F1:E5:83:4E:1C:CD:F2:E1:EF:64:46:3A:59
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:65:17:c6:c4:7b:00:c0:3e:75:8e:b7:ab:f9:e9:da:21:
         5c:69:35:15:af:b6:f8:3b:80:50:98:fc:9e:90:89:95:ca:11:
         31:49:7b:fa:78:9f:79:88:6c:33:7a:a5:1e:a1:b0:7d:fa:01:
         7d:c7:97:ec:0c:76:5c:a1:cc:f9:5b:27:84:33:cc:98:14:eb:
         53:2f:7d:ac:e0:db:85:6a:7c:ed:82:52:52:8d:62:1a:cb:6c:
         d6:e9:32:69:02:c8:3c:8d:48:2c:35:4d:ad:09:d4:65:ca:f5:
         c1:25:ab:16:39:33:b7:0a:40:e7:78:b9:e9:5b:de:27:14:f0:
         be:e3:9a:64:b7:a1:db:5b:fb:8f:b1:58:68:89:b4:65:d8:55:
         bb:8f:c3:70:2a:f0:ad:bb:0d:44:6f:8d:f8:c0:9f:95:9a:11:
         5a:2c:09:fd:e2:10:bf:1c:8b:3a:f5:f2:df:7a:16:45:1d:39:
         b0:3e:34:6f:63:60:5c:99:19:45:2b:3a:74:3d:13:47:c7:ab:
         37:94:1b:10:fa:60:d4:43:de:59:02:6a:df:7a:f7:e1:70:18:
         34:a4:67:00:a5:bc:bc:83:e3:73:00:10:92:b5:6f:17:48:c5:
         32:05:86:d5:a9:82:ff:71:e1:5a:48:37:43:f3:b8:f5:ad:71:
         94:9d:cb:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1B46x4movUV1wJ/W6Bc+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl
OGMwNGYwHhcNMjYwMTI1MTIwMTExWhcNMjYwMTI2MTIwMTExWjAzMTEwLwYDVQQD
Eyg5YjUwZWY3M2RmMDNkZWYxZTU4MzRlMWNjZGYyZTFlZjY0NDYzYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktN3yNYok16nAcfIcxe05gSMwNDq
asuOAIYRai20kWnP+073JeOrQemXF9Z4YrhbJeFG1j9UvSGqKuEorL2X2eXArGB0
XWN35VMCex+meOQmzCF63E5ew+SRPpuXxDfIrU8OScOs84toSslXnmEqDMljaaoH
GxZrdJbjy6AJRB89TGDBtDzcFn8qkMd2C6dQ0kiSh17A89Ec7PUJqRp6vhTK7iQw
OwMoCBIbz8KQHVnbC9vz/B9fijxsVSZaVH/g7rAptKNXOPXbHNMGLM/5WW9mtXgx
wvA5IA5ugZvlTebElCgFGuBZu5HRPFNH0IJtOuo5JcblyCbNXbNrgUJeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtQ73PfA97x5YNOHM3y4e9kRjpZMB8GA1UdIwQY
MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt
NDRmZDA0MzkzZTJiLzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi
LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOhlF8bE
ewDAPnWOt6v56dohXGk1Fa+2+DuAUJj8npCJlcoRMUl7+nifeYhsM3qlHqGwffoB
fceX7Ax2XKHM+VsnhDPMmBTrUy99rODbhWp87YJSUo1iGsts1ukyaQLIPI1ILDVN
rQnUZcr1wSWrFjkztwpA53i56VveJxTwvuOaZLeh21v7j7FYaIm0ZdhVu4/DcCrw
rbsNRG+N+MCflZoRWiwJ/eIQvxyLOvXy33oWRR05sD40b2NgXJkZRSs6dD0TR8er
N5QbEPpg1EPeWQJq33r34XAYNKRnAKW8vIPjcwAQkrVvF0jFMgWG1amC/3HhWkg3
Q/O49a1xlJ3Lcw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:37 2026 by rpki-client