This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
File:                     i9rBinrVAbp-oTVnkJ8X5PcydBM.mft (raw, json)
Hash identifier:          Hs02SyMGrU6cHi+2xZk1VNvTuCFNb7xAnfrnH1BHY0I=
Subject key identifier:   A6:F1:A2:3D:C0:C2:FE:5D:C0:9C:52:88:29:1A:00:F5:D4:91:45:75
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Certificate issuer:       /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial:       019BF807FD125D90A5D26DC61E4AE913EE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
Manifest number:          1759
Signing time:             Mon 26 Jan 2026 02:00:31 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:31 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:31 +0000
Files and hashes:         1: 4UxPVNMUTbdWoU8-6H-YrNd5L28.roa (hash: jqtK72novEhOqpQ7V6Nc1EKSI7gynpMCdZyxZfD+XSA=)
                          2: UA7gHJC_Z2p982U68NF8E3UG9U0.roa (hash: ZEl+7GoQK71F1LLwY1ArVXJBbCVjWwxvhpEbDOY6rzo=)
                          3: bsBKeV9TKKB0T6Q5bAGtAobZQpM.roa (hash: lHXTNkiHwNjphOmxd7u1esiqM8zHkBlYPkOwTiTiW48=)
                          4: fJBYOrLyzk14UTEo1zFCG7NWE2o.roa (hash: zOjZk7XtL8k8a26MB1UedbKFLjYjzmbLPnFplVavzVo=)
                          5: i9rBinrVAbp-oTVnkJ8X5PcydBM.crl (hash: qCLSuxoPeLYVS36B9KCaQy4mj1cgixCzxdqIE6j5Vvk=)
                          6: mr0C8N8KBsyLajcjyb0LeLTUSOw.roa (hash: pjpnLVm72B9KKrhRvM3BuG5BE9uOdhz0t9cdxfE/7K0=)
                          7: qL69xkCGLgiDyQWJUYRhpMjkfTA.roa (hash: YdGGVpr+Y+IxTlzNIaHuGEOlkl1gsiK04G6j0VWgxxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:07:fd:12:5d:90:a5:d2:6d:c6:1e:4a:e9:13:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
        Validity
            Not Before: Jan 26 02:00:31 2026 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=a6f1a23dc0c2fe5dc09c5288291a00f5d4914575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:28:35:43:2d:a3:44:93:cd:17:74:b2:fe:bd:
                    4b:61:2d:35:18:c1:1d:2c:d7:7d:de:e5:57:8d:67:
                    90:8a:78:67:2e:ea:29:05:75:c2:8e:53:b6:72:31:
                    ef:a5:90:4c:81:6c:67:6e:86:14:24:39:28:55:e4:
                    9b:8d:e7:d8:be:37:5f:16:a4:e9:64:6b:4a:d2:97:
                    28:78:44:06:0e:08:43:8c:46:6e:73:7d:b0:2d:70:
                    a3:b2:30:69:56:91:b1:2a:e2:06:7c:22:a6:55:2b:
                    3e:5b:8d:21:8e:31:6f:40:be:25:fd:d1:f2:55:31:
                    bf:22:a4:6a:aa:00:83:d3:c4:2a:60:5a:f1:12:0a:
                    0f:be:03:79:e2:46:cf:d8:ec:c2:a6:68:02:d2:b3:
                    72:08:50:da:dc:ed:01:b4:ba:d9:fb:e0:2c:0f:8a:
                    36:7a:a0:97:d9:5c:3f:bd:a5:3e:d6:dc:83:49:27:
                    98:db:de:26:92:c0:e6:f9:68:49:37:1b:d8:3d:b8:
                    b2:2f:12:e8:96:f5:27:24:d2:39:eb:82:80:26:fc:
                    9d:d8:1e:fc:48:b0:c9:d9:1e:34:50:81:fc:92:59:
                    7b:ae:46:10:fc:78:fd:1c:72:f6:41:81:74:2a:4d:
                    df:b3:52:6a:0e:2d:21:e9:1c:f6:8e:fb:e0:cb:8a:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F1:A2:3D:C0:C2:FE:5D:C0:9C:52:88:29:1A:00:F5:D4:91:45:75
            X509v3 Authority Key Identifier:
                keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:ef:00:86:bf:19:e6:1f:f1:8e:8c:43:54:36:aa:7d:be:
         2d:9b:85:cb:fd:b0:d1:ea:f9:8c:42:b7:9c:5a:e6:34:00:d6:
         f1:48:19:de:72:6d:d0:a7:74:74:3f:a3:36:05:55:ae:2b:73:
         5b:77:fb:6b:4c:1a:b0:4e:6f:a4:58:67:0b:2f:57:4f:1e:7e:
         82:2f:9c:9e:5f:42:03:58:9f:0e:22:86:ef:a5:04:46:cc:2c:
         ef:df:a9:73:1f:63:a0:90:77:53:bb:b6:b8:ea:cd:99:98:0b:
         eb:52:76:78:c3:02:1d:0c:1b:a0:fa:19:da:93:51:81:f0:6d:
         7a:cd:24:6f:c1:29:e3:86:8f:1f:3c:2c:cc:ad:39:20:32:1b:
         d1:02:bf:33:61:5d:15:39:50:c1:1a:05:02:45:6c:9f:58:bc:
         1e:52:cb:01:7b:ab:9d:56:16:85:57:44:b9:2a:1d:79:bf:1a:
         9c:e8:4c:ee:b2:0b:3b:c8:4a:8e:e9:1f:29:71:11:3a:f7:0a:
         5a:37:ab:7a:a7:26:87:11:5d:f1:f7:4f:9f:1f:88:f1:b0:fe:
         c5:e5:23:98:26:11:b3:5d:6a:61:93:de:1a:fb:ea:d6:e4:17:
         8f:63:8d:15:39:16:97:44:51:bf:53:16:30:9a:64:5d:cb:39:
         b1:84:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:05 2026 by rpki-client