This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier:          If8vwf07ZqULLHwjLja/RpWU7GKz6Fp8Fx4SJ6t9Gsg=
Subject key identifier:   39:E1:DF:93:AC:34:D9:2D:9C:2F:55:C9:A3:76:A6:2E:03:97:F8:A4
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer:       /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial:       019BF651A95C6CE51B95E29BB4DDB7B55C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number:          17F8
Signing time:             Sun 25 Jan 2026 18:01:45 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:45 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:45 +0000
Files and hashes:         1: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (hash: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8=)
                          2: 4zWqGYcx90MSsSObTI71OMevGLI.roa (hash: 2KPRh6/VRnqwHzM72EcE6I/hpiMNrQvfbcobdTHvrp8=)
                          3: 7qF8DvtzC3jirhL3pV2eCHws_Sw.roa (hash: PlA0iR4i8nMPJDQi1dSKU0Vsn1Phg8l6qs5AKvbNobk=)
                          4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: YS/aTN7buUsPp/wXTIxAwOOZFx8mDkLbz6NTItbzIp4=)
                          5: TYL3fd3U3hdntx9HEZmBNJvIfy8.roa (hash: e+FavOHdj6PxW9K+YpaIIbMqrQ5M/B4rSbRg/GiLGdY=)
                          6: X36wvkpUD5ZEtmHolX5djkBU7G8.roa (hash: 1peSiVa6+f8j5mPTp+kwnGd3XE3ejw1Eh+Z8/AWETA0=)
                          7: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (hash: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM=)
                          8: jIq1ZwfYXAAqF6SypiZfEAegC9E.roa (hash: v2vJlBOD+C5w7yw+8XzyFUOoQGvh/5fPqoNiFmi6fEA=)
                          9: molvQvJ_lXsmLhzkv5IAyHx3jBE.roa (hash: ix0VFib2vtnH3hKp8PnHjw409S+kU6b3YPQlaCcVI/k=)
                          10: sE6ob5p7cvBS3YZqxyoPQMbjYxc.roa (hash: dhUKIHoGV1Pe+2e5vIvUmP73NR0v7KSZ4nk35w2qwfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:a9:5c:6c:e5:1b:95:e2:9b:b4:dd:b7:b5:5c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
        Validity
            Not Before: Jan 25 18:01:45 2026 GMT
            Not After : Jan 26 18:01:45 2026 GMT
        Subject: CN=39e1df93ac34d92d9c2f55c9a376a62e0397f8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:15:2d:ce:b6:a4:dd:b2:0b:b1:9a:d6:b4:
                    58:e3:fd:a8:4d:c5:cc:fc:6f:79:5c:37:e5:7c:c8:
                    b3:86:64:4a:a4:72:34:c4:2e:d5:f3:3b:1c:5d:da:
                    3c:94:2a:c7:b2:ce:d8:ea:67:c4:63:07:e2:7d:05:
                    ff:2a:c8:4e:ff:64:f5:e1:19:c8:9d:73:dd:c6:b9:
                    d9:1e:42:13:ca:c4:97:c5:65:9b:3b:cc:8b:13:d3:
                    98:18:be:4b:15:bf:87:0f:54:6d:be:b4:44:c9:cc:
                    38:7f:cb:42:fc:1e:d3:23:de:b5:3a:e9:90:fa:0c:
                    28:bb:d0:7b:f3:45:10:e8:94:2b:44:6f:d6:cb:4a:
                    3b:be:6a:c0:b1:bb:dd:03:12:9b:77:47:33:98:21:
                    f8:91:45:4b:57:61:5a:d3:69:e8:55:9a:44:66:21:
                    01:52:6d:71:6c:ea:5a:ea:8b:fc:20:0e:8e:67:ad:
                    48:c3:9f:b6:ba:08:43:70:89:f9:7a:6a:32:ec:d2:
                    ee:ba:2e:f3:f2:d6:b0:c7:c2:63:fb:91:73:04:7c:
                    b0:ef:2a:f6:05:20:d1:63:93:dd:34:09:aa:a9:0e:
                    9f:19:c4:c8:f1:f9:e7:b9:34:23:54:44:6d:cb:44:
                    b8:89:d7:f3:27:0d:5f:46:5a:b4:c2:cc:7e:c6:12:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:DF:93:AC:34:D9:2D:9C:2F:55:C9:A3:76:A6:2E:03:97:F8:A4
            X509v3 Authority Key Identifier:
                keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:38:70:20:36:60:5a:14:7f:79:b2:c1:03:69:c5:08:12:
         62:f0:5b:52:33:38:7b:7b:cb:7c:5c:70:66:fa:de:f5:69:bc:
         e5:66:08:8e:f8:b2:b7:81:ff:77:3e:a2:f1:64:af:f8:56:27:
         a0:93:23:9c:4a:b2:9c:fd:f1:60:23:af:c8:30:4e:40:31:6f:
         33:53:01:70:e8:91:bb:56:3e:33:db:b6:3c:04:31:d1:7a:6d:
         e1:25:5a:e4:19:d5:98:5a:12:76:25:3c:9a:c8:f2:3e:a5:a3:
         8a:24:f9:3f:ee:f0:1f:bf:4b:7f:2f:a8:8e:af:35:dd:ac:b5:
         72:24:93:52:f9:60:ad:f3:42:4e:d4:10:84:81:a2:71:dc:ec:
         b3:68:8f:4f:f7:2b:b9:ae:41:c0:27:7c:b1:e9:7e:23:0f:6b:
         91:62:09:16:f0:65:87:2d:e4:85:8c:1f:dc:b5:76:96:b5:e9:
         b6:71:a9:8a:fc:73:c5:46:9c:ea:89:f5:9c:c7:28:02:b6:e8:
         2e:39:f9:b6:72:3a:0d:d3:1b:02:d7:9c:73:56:55:e8:da:3b:
         fb:fd:30:2c:81:fd:e2:5c:18:83:5a:3a:e2:0e:da:65:a1:f7:
         58:ce:01:d8:7c:b2:8a:a9:11:39:bb:83:6c:36:38:80:69:e1:
         db:a0:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:26 2026 by rpki-client