This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
File:                     6p03bVRB9Is91QhRWxb-lcWhF4I.mft (raw, json)
Hash identifier:          Gh6/hxLf0O7GtROVZVi1jTdPsm75Emg38vaD0Iu3gHc=
Subject key identifier:   51:D2:4A:04:1D:E1:3D:02:AF:65:45:94:AF:E8:DA:DA:58:30:70:82
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Certificate issuer:       /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial:       019BF9887DA1699B331990D7849261C39FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 09:00:30 +0000
Manifest this update:     Mon 26 Jan 2026 09:00:30 +0000
Manifest next update:     Tue 27 Jan 2026 09:00:30 +0000
Files and hashes:         1: 6p03bVRB9Is91QhRWxb-lcWhF4I.crl (hash: /k44nxcGguEydnId0cKVef8mxuXfI7g3DzMRi3gh99k=)
                          2: QNvj6tUUilZewAiCGmyYMu4YKY8.roa (hash: HQZTu9j4FF8eevUrS/YHuhLDP0eBM9CMdSTMPaaRMr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:88:7d:a1:69:9b:33:19:90:d7:84:92:61:c3:9f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
        Validity
            Not Before: Jan 26 09:00:30 2026 GMT
            Not After : Jan 27 09:00:30 2026 GMT
        Subject: CN=51d24a041de13d02af654594afe8dada58307082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:10:2d:e4:db:35:09:26:11:aa:8b:f7:b0:
                    10:10:f6:46:19:6d:58:fa:87:b9:6b:15:60:a4:24:
                    32:16:de:60:f1:d6:30:68:af:85:eb:ac:40:67:5e:
                    52:66:00:12:91:45:e1:35:c9:9b:a8:10:b7:48:0c:
                    4d:37:55:cf:32:f7:54:28:85:94:25:20:66:e7:25:
                    98:24:64:2e:6a:20:49:06:ee:27:70:4a:ff:bd:4b:
                    9a:8b:6b:50:35:5b:e8:d0:21:9f:90:d4:a5:35:65:
                    98:97:1f:8f:0f:5a:a3:05:7c:62:71:b1:97:c9:1d:
                    d2:84:95:89:79:7a:d3:e9:a2:66:d2:cb:a7:a9:20:
                    25:b4:0e:11:fa:0b:bb:79:21:ac:fd:f7:db:ed:30:
                    97:c5:c8:71:63:71:33:91:7f:45:5f:a0:47:dc:f5:
                    cb:18:95:d9:d5:80:af:83:bc:8e:75:9d:b3:32:ec:
                    92:c0:42:cb:10:3f:30:13:d4:98:a1:47:08:71:f6:
                    b6:cd:21:91:f2:09:89:29:11:75:a3:f4:51:23:5c:
                    fd:36:53:14:a2:3f:92:df:87:d8:85:ed:d1:5c:9f:
                    19:50:f4:ef:61:8d:b8:ea:c0:29:69:bc:32:e6:5c:
                    b2:11:38:78:3d:42:de:25:77:a7:4d:83:29:9e:e8:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D2:4A:04:1D:E1:3D:02:AF:65:45:94:AF:E8:DA:DA:58:30:70:82
            X509v3 Authority Key Identifier:
                keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:fe:be:ee:f7:bb:09:b1:24:fc:b9:8e:9b:fe:ca:81:83:
         44:63:88:e2:1f:33:59:78:1a:15:45:6a:f3:7b:9b:8d:0d:ca:
         13:3d:7f:3a:03:28:0b:8b:27:88:57:19:09:5f:5e:c3:42:56:
         f8:fe:5f:de:f0:4c:7e:01:8a:5d:26:7a:4d:87:1f:44:ac:6b:
         2e:a3:d3:1b:84:88:79:88:7a:36:e0:c0:db:f1:0f:6c:6c:54:
         ee:55:29:14:b6:8c:0a:95:2f:bb:92:99:bd:12:a5:04:18:f5:
         d5:04:6b:c5:df:b1:8b:a2:0a:7e:cf:98:56:e4:18:cd:c9:46:
         99:8d:6a:48:b1:5a:2b:60:d1:e5:37:ef:dd:c0:98:ef:99:2f:
         75:a8:b4:cc:2f:3f:70:26:87:57:5b:c4:85:7c:0d:d8:7e:f1:
         db:f3:f2:40:2c:7c:00:be:3b:1b:6d:ea:37:98:49:1b:eb:41:
         e2:ec:d2:f5:2c:9d:7e:7b:26:a8:9a:b5:4e:03:3c:51:6c:a1:
         97:93:4b:b6:28:6e:29:32:30:bc:a3:7f:0f:42:ec:a9:38:31:
         7e:84:8e:ef:87:7e:05:06:be:8b:f4:7b:6a:54:44:7c:be:60:
         68:f9:1a:9f:37:db:41:d5:23:bc:90:88:77:26:e2:32:9e:76:
         e4:91:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:05:25 2026 by rpki-client