This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
File:                     e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft (raw, json)
Hash identifier:          gZZGWXQsFE2xIkp4E9rCAl5XAcPjh9yPkv82BgLlD08=
Subject key identifier:   0D:A5:8B:2B:B2:D4:3C:4C:9B:FA:28:8B:35:19:79:D4:39:D7:E8:2A
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       019BF5757B6ABA0BA6FF97675F81239BEF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
Manifest number:          0DE5
Signing time:             Sun 25 Jan 2026 14:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:15 +0000
Files and hashes:         1: 1-HBmqkPxk1U8YETc-YiME1k2DPw.roa (hash: wKAhKIDuBABecclgk8tglnMAWX1uPr/fNzMldx9ZyBc=)
                          2: D5CU0J4aOE-guuZrF-x88dYJu60.roa (hash: 3+UAZWoH8Ujlfit64dH7jiUqGde2nrxqjoG3SgyDLRU=)
                          3: Rt1klmsuPPhKUUAX1jpG9imFa2c.roa (hash: sokdc0UCHJ/WMQvZrRXw0OuefJTfuVtBVLK9tFuDXWI=)
                          4: e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl (hash: OzN73iYv6AkZwARlYNM1np2XiDXVAewzrvn1bgcc7uY=)
                          5: kfXp6PWz1OVCq-MHROwaEPF9wAg.roa (hash: BizfokTf2mZNuGQvMfl1UgLcNIjIH9XqdrYWnU3/uU4=)
                          6: v_OXt8Z9bxxVYhgYnrkDGSyM54I.roa (hash: ATsBe22vKVETJCP8w9d7eB+q/lzN6NyzL4OSGucH4dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:7b:6a:ba:0b:a6:ff:97:67:5f:81:23:9b:ef:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Jan 25 14:01:15 2026 GMT
            Not After : Jan 26 14:01:15 2026 GMT
        Subject: CN=0da58b2bb2d43c4c9bfa288b351979d439d7e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:c2:fd:b3:23:26:04:fa:49:84:8d:41:f4:
                    9a:ac:f2:3e:0e:5f:d4:0d:81:f4:76:5b:6c:4e:48:
                    6e:f6:77:47:2a:63:7a:23:c7:db:66:97:c1:3a:5c:
                    70:ff:b4:93:5e:2f:9a:95:d1:af:66:5a:3a:d9:69:
                    93:19:c2:9e:70:3f:95:15:5a:af:72:53:71:8c:81:
                    2e:4e:bd:ac:c0:7d:03:94:37:33:62:5f:f6:94:9b:
                    42:86:58:98:73:94:bd:f8:d1:96:0e:71:30:80:16:
                    52:87:6b:fc:c1:b4:12:5e:54:17:28:66:c3:e9:e0:
                    d4:02:0b:54:5b:d9:48:6d:ac:6a:7b:cf:7a:b1:47:
                    c0:d4:32:70:58:8b:3c:d1:82:a1:75:c7:ce:51:26:
                    f6:c7:b1:98:88:95:a6:dc:fc:7f:97:8e:14:2f:87:
                    51:e1:b0:a8:ed:4f:c2:a1:d7:b3:53:b2:4d:3e:f7:
                    a2:ce:0c:9e:c3:4d:e5:76:a8:93:05:f3:af:4d:6e:
                    a3:a6:74:21:9f:48:d5:8b:03:eb:95:82:ad:31:5c:
                    8d:5b:9e:32:7e:95:8b:57:22:ad:7f:a5:7a:3a:35:
                    29:e5:e6:3c:9f:3b:3b:65:b8:4e:b5:ba:16:da:bb:
                    46:ed:97:16:65:3c:65:05:f0:e5:7d:92:8d:c7:e8:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A5:8B:2B:B2:D4:3C:4C:9B:FA:28:8B:35:19:79:D4:39:D7:E8:2A
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:ef:a2:97:9b:6f:17:3a:08:73:78:a9:d2:30:de:68:8e:
         d1:50:57:89:b2:5c:14:7c:b1:06:23:cb:65:98:0a:a6:81:ae:
         5d:01:fe:19:64:95:e6:63:2d:59:c1:45:ed:fc:6e:36:b6:62:
         54:d2:9e:1a:44:08:9a:a0:2e:42:8f:0b:da:4e:ab:40:39:f7:
         c9:8e:a8:90:7c:1b:f3:96:66:b6:ed:70:6c:65:1a:b8:df:db:
         ab:a5:56:22:78:ff:ed:20:60:5a:90:4f:ab:b9:eb:fc:60:77:
         72:9b:cb:be:9d:79:e4:bc:d9:29:9b:5f:0c:a6:03:66:ef:b8:
         a0:66:5b:d6:1c:8e:d8:e8:43:b0:95:f1:04:4d:c3:58:46:f2:
         d2:52:9f:f0:0b:3e:eb:da:38:0d:36:97:e2:05:cb:59:d2:bd:
         2b:61:ee:18:e4:0b:cd:4c:fa:d2:e1:69:ef:97:10:06:5b:7e:
         72:99:c4:6e:e7:15:ab:8c:89:3b:29:b0:bf:1d:25:77:64:d1:
         7d:9a:74:43:39:2d:65:33:33:3d:18:82:d7:0a:00:55:75:7e:
         93:fa:b4:df:d9:31:13:ee:19:33:8f:8a:d1:f3:32:1b:19:04:
         e7:9b:34:62:57:b0:ea:33:db:08:99:97:c3:ab:4f:f9:81:14:
         36:86:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:46 2026 by rpki-client