This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          YSWYrerSzbtPb+F2YXgmHamBtcC++b/8Pr+qml15gAg=
Subject key identifier:   84:7C:27:2B:94:CD:3E:3D:C7:3C:53:49:14:86:2A:BB:7A:20:4F:BD
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       019BF6F5891BD8532CF736DD9F538178C8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          180E
Signing time:             Sun 25 Jan 2026 21:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:45 +0000
Files and hashes:         1: 1-V2f5BIvAjoxWtMfXiOEdpxut6E.roa (hash: D7oyZz1oHRszroBqObV23g+p70gyyYzI6HwkfnsCOpU=)
                          2: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: N11hUyUM9cmT/xB7hRuVBxzKP0UyKqV0bUpCpJsYZNU=)
                          3: 7hi7Ah4iY_QQeOlVJayptAGSNSQ.roa (hash: 91eReMLkF+2CXAAIZp2KhXfLlZYAztOnwmcmPnVUzXo=)
                          4: HWkZUGuQFUtSfIxMZ9ShbmYb-Uw.roa (hash: /p3RuOQH8ff2EFGkQBf64zKFuTokj0i4cJmKRGRkgiU=)
                          5: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (hash: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc=)
                          6: QaR40Du4QHojtPoMdpOj--q01WU.roa (hash: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=)
                          7: SpB_KTlIVnRBfxO4HSVb8NmLqRg.roa (hash: yJWOGjWhGH4V6dZvS0G2XkAOXVlNzvno86kqhv5xibQ=)
                          8: _iw4-UbxRcpMoWsfFn6G2aiGN-s.roa (hash: 2naXiACb6/BywUEITZo6HGPyiSxLs5Zs4g1/62TMQcU=)
                          9: burJ78lKaBi9GwpclBHxJ1tt3J8.roa (hash: 7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=)
                          10: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (hash: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw=)
                          11: iALiZE40TDLMSzbMWnK-jhY99R8.roa (hash: CSX6n7wpmUcKZ7LgevP+s7dOJ8/D0LktOFqzx/ZKW4U=)
                          12: mtubXUlBQXjcnE7fuf616NzQiL8.roa (hash: ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=)
                          13: tEVXcAqmFhkbtGLmUdbLn_80yig.roa (hash: 9MErMfs8Nn0borG1HaQK08aY1yTDK65zdP9huz/FJ9g=)
                          14: wFIC1mkSpA0e2UovbVVh_Scnn38.roa (hash: gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=)
                          15: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (hash: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:89:1b:d8:53:2c:f7:36:dd:9f:53:81:78:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Jan 25 21:00:45 2026 GMT
            Not After : Jan 26 21:00:45 2026 GMT
        Subject: CN=847c272b94cd3e3dc73c534914862abb7a204fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:3f:da:d2:93:89:0f:6d:0f:21:03:e6:e2:
                    e3:0e:87:16:6f:6c:ef:a0:6b:fa:8d:8b:9c:59:50:
                    e6:a4:43:22:1d:29:6c:16:b2:4e:e8:d1:a5:73:68:
                    20:29:a9:f1:5e:b7:24:ca:d9:48:c1:19:98:19:c3:
                    ee:e2:45:fd:19:ee:32:4b:e8:6f:ce:16:14:33:80:
                    02:01:ed:a0:65:4e:dd:84:a1:c7:5b:66:f7:6b:78:
                    43:b6:3d:d1:14:e3:93:05:0b:82:e4:67:d3:39:b9:
                    e0:6c:e8:e0:20:00:f8:f9:19:e8:ba:1f:79:5c:ec:
                    66:f6:c6:bb:af:e9:e4:ed:48:72:06:32:60:3c:bd:
                    a3:d1:cd:5d:b1:09:9b:b5:64:e2:3d:ce:1a:06:90:
                    b6:eb:c4:e0:11:c0:72:72:63:0b:35:07:e5:59:f4:
                    74:4c:8c:51:fe:93:16:ab:7f:0f:88:29:7a:96:d1:
                    91:05:6f:0d:81:57:97:8e:e9:f0:5b:71:b9:fa:90:
                    a4:f7:a0:c4:29:ee:a4:10:14:3f:a5:1c:17:43:53:
                    4f:ec:5b:66:5a:15:cc:97:4c:6f:93:77:a6:ac:b8:
                    58:1d:d4:8d:b5:34:a7:32:1e:74:98:35:76:4e:dc:
                    e9:4d:3b:41:6d:28:6a:0d:be:30:05:75:4b:89:c8:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7C:27:2B:94:CD:3E:3D:C7:3C:53:49:14:86:2A:BB:7A:20:4F:BD
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:89:bc:68:91:fd:2d:24:ba:e1:27:3c:b4:93:0b:08:cf:
         b8:08:d1:3d:c0:5f:68:d3:39:27:3f:5b:56:1c:07:4f:bd:4b:
         ae:f0:f8:43:d4:c6:1e:95:2f:6e:bd:ec:f1:53:5b:99:ef:fb:
         23:ea:b6:e4:c4:15:8d:dc:e7:4d:03:1e:1b:8d:43:2d:43:92:
         73:0b:16:7c:ab:26:4c:57:63:ad:bd:ab:52:76:79:c4:29:fb:
         d5:77:86:4f:05:81:80:fd:2f:41:c2:13:2b:c1:95:dc:60:9c:
         3b:e3:1a:cd:3b:d1:56:bd:21:2d:f2:67:66:67:2a:46:bb:2a:
         7a:8f:9f:1e:83:f6:6e:41:9b:80:27:0e:17:c8:c3:c4:98:02:
         98:27:05:c6:6c:fe:36:1e:32:c6:04:f0:e2:c2:f7:23:80:5f:
         80:2d:9e:87:92:37:b6:06:e1:8e:bb:a4:11:17:b8:96:fa:1d:
         5e:3e:49:12:fd:0f:38:1a:f2:b1:83:d7:1c:f2:fa:3d:4c:b5:
         92:ee:d2:cb:7b:44:e1:2a:c1:81:56:1c:b2:0f:ab:9c:9e:3d:
         a8:09:0b:a2:af:44:6d:78:dd:41:2f:52:11:82:45:39:c2:f4:
         c2:1c:d5:90:8d:ef:d0:24:47:42:4b:0e:38:e7:7a:07:92:97:
         77:2c:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----