This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
File:                     6Vv1iCFn0VKIW0akbDYJbscsEOg.mft (raw, json)
Hash identifier:          +YD9JVqH22QTM3B7BWVVXnWRta/2kbLg535adVMpg3o=
Subject key identifier:   26:E2:E5:36:5D:0D:84:17:50:CE:31:E9:71:D6:A7:E7:8A:E9:F7:1F
Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8
Certificate issuer:       /CN=e95bf5882167d152885b46a46c36096ec72c10e8
Certificate serial:       019BF8086A61708CFB4B713844FBD1F63C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
Manifest number:          01E2
Signing time:             Mon 26 Jan 2026 02:00:59 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:59 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:59 +0000
Files and hashes:         1: 6Vv1iCFn0VKIW0akbDYJbscsEOg.crl (hash: 3Q8FLnZKv5bhruD48eSArZYN5gFska9JSHsaYlnj1Qo=)
                          2: lsqyIsBpeXNcnzeA__pb_tIJpCw.roa (hash: HoC4xWQnoAYB+cqd8waKYlqr45hX2BtPdIJZjs3Wcow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:6a:61:70:8c:fb:4b:71:38:44:fb:d1:f6:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8
        Validity
            Not Before: Jan 26 02:00:59 2026 GMT
            Not After : Jan 27 02:00:59 2026 GMT
        Subject: CN=26e2e5365d0d841750ce31e971d6a7e78ae9f71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:70:89:19:c8:05:92:62:60:10:35:a6:b1:
                    ed:6f:9b:e8:78:17:6c:97:25:99:20:aa:ae:bb:bd:
                    ae:80:96:38:6f:1f:e2:45:0f:2a:bc:fd:cd:bd:5e:
                    2f:64:86:98:21:a2:c2:4d:3c:2a:30:5b:59:12:cf:
                    fb:45:24:af:b6:e8:6c:7d:41:1e:b1:78:51:38:56:
                    7a:17:94:e3:02:5c:a8:3a:e0:e3:54:8f:ce:b7:c1:
                    02:9d:e5:4a:35:93:5f:e2:9f:26:53:e7:95:3e:a3:
                    f3:e2:27:3b:4a:8d:59:6c:fd:76:97:7e:ad:e0:e7:
                    28:eb:c6:50:e9:b8:d6:a5:52:4e:42:f4:35:13:a9:
                    92:ea:0d:1c:ce:97:bf:61:7b:50:ad:9f:f5:59:90:
                    07:90:36:f0:1c:45:3b:da:cd:26:ba:6b:da:bd:45:
                    6a:c0:10:8b:ea:41:35:0a:25:e8:ae:df:d8:44:8c:
                    35:55:bc:71:d9:59:60:15:d9:7b:e4:f1:68:a4:17:
                    a0:07:73:d1:73:f0:dc:26:37:d0:f2:c5:08:8c:6f:
                    bd:cb:dd:b9:9f:8a:cf:32:4d:15:0d:fd:44:41:ee:
                    96:70:45:01:87:b8:e1:49:32:06:b9:65:db:fb:8d:
                    48:5e:4a:72:46:89:de:4b:50:8a:9b:83:7f:c4:9e:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:E5:36:5D:0D:84:17:50:CE:31:E9:71:D6:A7:E7:8A:E9:F7:1F
            X509v3 Authority Key Identifier:
                keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:7b:5d:f0:6d:b0:33:7e:93:8e:07:23:58:1a:d0:6a:91:
         4d:4c:63:60:5d:39:d6:2f:ac:83:94:98:02:3c:72:04:bc:04:
         9e:c0:9e:23:1b:42:59:71:37:40:80:b9:9e:35:ff:89:04:70:
         49:e3:ff:00:1f:ab:0e:2e:6a:1c:5d:8a:71:83:ee:b1:d9:33:
         47:d7:74:3b:90:80:dc:6d:ce:5f:2c:f0:15:c1:e2:e6:fb:31:
         bf:ac:25:08:2a:76:3d:4b:56:92:7d:22:18:d2:9f:4f:61:e6:
         6a:00:99:4b:92:a1:7d:53:39:e7:54:04:48:36:9c:39:d6:84:
         0d:ea:71:bf:3b:a8:ab:a4:7e:b5:8f:93:17:8b:cd:40:a0:c3:
         e3:cb:2a:d6:2d:20:fe:75:9b:7d:2d:46:77:27:a0:4b:1a:82:
         c3:1a:fe:9e:0c:31:4e:b3:10:45:82:3a:91:5a:08:b1:6c:ee:
         71:df:4c:9d:dc:87:5b:61:96:87:14:92:1b:2e:40:32:0e:88:
         a3:3b:cc:3f:cf:c8:b8:68:0d:ca:bd:55:36:f4:92:82:f6:82:
         5b:69:51:c5:bb:d3:39:f3:a0:2c:88:0a:33:18:72:2b:b4:b3:
         f8:9d:da:5a:c6:df:6f:4c:20:23:02:7e:dc:e2:ad:5e:e6:d2:
         08:b0:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:58:10 2026 by rpki-client