This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          B+gf50/Ngh/06pcnei1UyLWkF/wGW1RJ4n4d36BCevE=
Subject key identifier:   EC:46:D4:4D:00:3A:4A:92:8A:E3:27:8C:29:C5:64:D7:AF:47:31:EE
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       019BF34F9A8FA50884F0D3D1CFC7A14C9922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          06E2
Signing time:             Sun 25 Jan 2026 04:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:38 +0000
Files and hashes:         1: 2KduMUYel0BWDX-gLCZai2W_4G4.roa (hash: kUlLZqX6QEgDk0fVRbwqPlwQxkUUYksF2ARjRgj1uG4=)
                          2: DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa (hash: pOXeNunBUp7XMmyt7KCLlUiodAtYd49vUDG9ePb2slQ=)
                          3: JjxyiyRAHIZDhSB7r9odWsogzv0.roa (hash: cTZJnhtnZxGwp2Q9A0lYiODLfA95pG6O1DIOhv9ttYY=)
                          4: Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa (hash: CvQQy58T2+JT1V1PpCMrbgGvmKiUqKITp6SsZ8+pjsw=)
                          5: VT3JMz1z0jbN38x85_GPgDiIFxU.roa (hash: 72TztmXHst0nborQVePoZB2l0l3iiUcQvPO38qPkaNM=)
                          6: YTOUV-I7M_A95Q9jf38OHqYeVYk.roa (hash: 3loGyXkC6LyGM26qV5k5kSGBs1UG0LZ1soHTcMsuBL4=)
                          7: o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa (hash: YKENZtDbouX123QC9IjXYuWhmGFmJEwt6IRC/Z5j654=)
                          8: tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa (hash: gRJclz6t9y/Q1g8bocXmUp9M+K0hzT5o06prGgkqzrY=)
                          9: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: PianOFVHmI+LehR49wlWHnoMyGb4FF1j4tUkmXJcctM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:9a:8f:a5:08:84:f0:d3:d1:cf:c7:a1:4c:99:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Jan 25 04:00:38 2026 GMT
            Not After : Jan 26 04:00:38 2026 GMT
        Subject: CN=ec46d44d003a4a928ae3278c29c564d7af4731ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:69:a4:84:33:e8:59:54:10:c9:cc:79:e7:
                    c9:0a:26:58:29:e6:6a:72:f8:9b:2e:2c:c4:07:84:
                    4d:9c:59:7e:c1:81:77:9e:f3:6a:c2:d7:a2:ef:1f:
                    a2:df:77:89:93:22:d0:02:bb:39:13:bc:5b:fe:aa:
                    b7:ce:c3:83:47:3d:76:5c:e9:05:c5:6e:59:bf:ff:
                    e8:43:b7:85:0b:00:20:00:49:36:18:04:97:0b:87:
                    6a:e8:f9:7c:1b:46:e1:5c:7c:6e:ca:9d:bc:53:de:
                    7a:ba:7a:02:fd:3b:bb:14:5a:cf:5b:ca:74:7e:a9:
                    28:f6:ff:5c:27:df:99:0d:10:18:eb:13:ee:f2:85:
                    3d:da:37:65:df:66:f4:94:e3:83:cb:6d:90:f8:32:
                    80:a3:b6:c2:28:46:1a:e2:b8:f6:00:62:ae:81:18:
                    24:a2:66:3c:52:9a:73:31:9d:01:8c:cf:16:57:1a:
                    2a:ed:77:21:30:d1:f1:62:66:c8:e0:c5:04:98:6b:
                    58:9e:e1:02:62:d8:d0:3c:ce:ec:a0:fe:05:ac:b7:
                    07:75:ff:6c:a1:04:c0:1d:d6:86:53:0f:e0:3f:59:
                    3c:75:e0:f8:60:74:b3:c9:33:ed:6f:7e:c6:3b:f8:
                    16:4d:c8:e4:33:96:fe:dd:40:1e:87:3b:6d:4c:a4:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:46:D4:4D:00:3A:4A:92:8A:E3:27:8C:29:C5:64:D7:AF:47:31:EE
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:de:be:e0:7a:0c:37:b6:52:fe:ff:d8:10:c3:cc:15:06:f7:
         f4:85:f9:3c:ef:b6:5f:aa:b8:ae:e4:0a:4d:66:c8:f1:90:8b:
         db:33:a6:13:28:56:e8:26:7a:ba:ae:28:58:df:10:d7:2c:97:
         d2:2a:db:a7:de:87:97:17:24:47:e9:19:7b:fa:39:a7:b2:3e:
         27:7c:d1:78:41:24:00:b9:bb:64:f1:a3:ef:d6:7d:0c:f9:44:
         5b:5e:5e:f0:4a:2e:8c:31:ef:26:05:f7:2a:55:9b:bb:5b:32:
         6b:38:cf:32:0b:bf:10:2e:ae:e5:a4:d1:dc:49:8e:a9:15:7b:
         89:76:3f:bb:0a:03:60:6f:d8:89:a7:69:c2:cf:57:19:c6:7b:
         94:37:7c:a6:d1:a9:e2:1c:93:82:6e:b8:5e:b8:3c:f1:4c:df:
         43:23:f7:d9:a8:f5:ba:64:9d:80:66:86:18:d5:5d:3d:42:92:
         cb:b9:7e:a6:00:9f:98:9c:29:cd:30:83:60:91:44:1b:b9:24:
         94:52:34:04:2b:61:db:31:a5:21:f4:65:da:bf:02:7f:e3:33:
         42:dc:0b:b7:0d:d3:41:9e:17:72:9c:a5:87:c7:2f:9c:01:60:
         28:df:e9:f6:e7:57:9d:35:f0:cf:2d:28:b1:38:03:61:ee:c0:
         ff:93:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:55 2026 by rpki-client