This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          cxuMtN4XlfehdkCtbK5dxeAlPc+FAMyJLThtoUZllno=
Subject key identifier:   1B:CF:DC:85:89:3C:2E:1D:27:07:AA:A1:28:AB:74:EE:99:B6:0E:DB
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019BF3F53C99D1C20059A962543BAC93C960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0BF2
Signing time:             Sun 25 Jan 2026 07:01:33 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:33 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:33 +0000
Files and hashes:         1: 3DD7IN1RUhoFtGejl5QLGTUPcbE.roa (hash: 9QU9RS48p4Gk8eFQ8qLmQJqFrlkSGfDL9zyv/+59Y7I=)
                          2: CCDVDQ2Oruym1KjDDrngcHA3Mew.roa (hash: chiL5mGQkOXPpO7ivyw1/1nTMgncbyhd+zfPcNA0gXQ=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: 9EVNzbByFvqt4PlwlqttZyTlWtWQktRnNsP8/s65sHM=)
                          4: QI46eicieX49OrM0OPKuHdePV44.roa (hash: WEPMgLFqdCTHxuIP+JQV+EA0WeN2b1pXmwAA9gvatUY=)
                          5: TMIETZCkfwkv20GhYgXVDmLAdSE.roa (hash: rj6hnXGmK4tKBpRVA2yKPqqLtv9PZV5O4KXBEttP6pM=)
                          6: n2nCI-ptzMTQlle8XBsEF_kBMlc.roa (hash: R677cLGAhKw+n+X1YDl+AhJzznYJjl/tMQGRlN03THg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:3c:99:d1:c2:00:59:a9:62:54:3b:ac:93:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Jan 25 07:01:33 2026 GMT
            Not After : Jan 26 07:01:33 2026 GMT
        Subject: CN=1bcfdc85893c2e1d2707aaa128ab74ee99b60edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:11:b4:ef:0e:0c:cd:e6:29:46:b8:c1:3f:
                    58:01:6b:2b:f5:a7:a1:a8:eb:41:c9:7d:9e:5d:1f:
                    68:ed:45:22:4f:4f:7f:96:60:b3:ec:e3:a3:52:37:
                    76:3c:08:f6:16:30:9d:be:c9:ce:07:a8:07:d9:36:
                    4b:3c:9c:54:f8:1f:5f:2d:4a:77:96:65:e3:46:68:
                    2a:18:44:8d:62:ba:23:1f:3c:34:da:d7:fe:32:fd:
                    48:b4:59:26:39:37:ef:8e:35:28:5a:aa:ac:55:6f:
                    b6:96:c4:9b:40:d9:31:e2:05:0a:99:b5:5d:89:c3:
                    1d:10:9a:b9:37:8b:74:58:89:f4:28:5a:5f:6f:f5:
                    b6:11:ee:7d:42:95:67:f4:21:ae:65:e2:83:38:47:
                    8f:1b:1d:40:31:88:69:4b:0e:bf:2e:3e:06:04:d1:
                    f5:9a:47:f1:80:73:01:d6:90:ed:b7:0b:60:a4:87:
                    3a:33:26:56:ed:fb:63:17:1b:ed:78:8b:f4:14:a8:
                    ff:11:03:b4:e4:aa:e8:3a:00:9a:ae:4d:88:94:db:
                    55:47:b9:4a:0d:db:c3:c2:81:cf:37:92:29:26:03:
                    2d:69:95:45:ad:75:24:e6:c2:99:41:2d:40:45:c9:
                    6e:ff:aa:52:b1:7f:20:70:04:63:1a:34:3d:de:6f:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CF:DC:85:89:3C:2E:1D:27:07:AA:A1:28:AB:74:EE:99:B6:0E:DB
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:71:72:66:0b:c8:af:b9:fb:2e:f6:83:01:2d:3a:56:59:
         4c:37:d1:7d:a2:4c:44:28:3c:b6:c0:c4:d4:bf:a2:00:a3:d2:
         de:b3:1b:bd:46:a7:67:35:94:7c:3e:4d:5e:a2:8d:da:39:66:
         2c:a9:bb:60:49:fe:a1:d7:36:3a:29:ad:b3:1d:82:26:67:31:
         2f:72:e8:b9:5f:87:0f:b8:7e:6d:c7:7c:81:e6:1b:f7:09:e4:
         1b:00:4d:b9:c9:ae:13:e5:01:0e:1b:c5:16:d8:35:1e:cd:06:
         01:05:3d:43:1d:13:e3:de:49:f6:c7:71:69:5f:e6:80:f4:d5:
         18:4f:91:09:77:8c:5b:86:ae:fc:86:5d:d2:d9:58:c2:b5:98:
         2c:ba:54:86:d0:ab:16:cd:cb:75:45:03:c8:dd:2a:e2:11:1d:
         4f:5b:e2:f4:76:5e:5f:7d:ea:3b:b9:a5:64:e1:a9:ec:31:83:
         30:d9:7d:38:54:a2:b6:87:87:4d:ac:39:a7:cc:f8:86:fb:d1:
         d5:35:44:12:eb:ab:a0:c2:2d:bf:8f:da:04:54:c2:00:76:36:
         3c:70:18:24:37:5a:0c:29:42:49:49:92:9b:01:b8:82:91:0e:
         d4:60:80:06:8a:94:ee:69:75:21:08:95:50:e4:28:ef:55:77:
         03:0f:03:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9TyZ0cIAWaliVDusk8lgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjYwMTI1MDcwMTMzWhcNMjYwMTI2MDcwMTMzWjAzMTEwLwYDVQQD
EygxYmNmZGM4NTg5M2MyZTFkMjcwN2FhYTEyOGFiNzRlZTk5YjYwZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj8RtO8ODM3mKUa4wT9YAWsr9aeh
qOtByX2eXR9o7UUiT09/lmCz7OOjUjd2PAj2FjCdvsnOB6gH2TZLPJxU+B9fLUp3
lmXjRmgqGESNYrojHzw02tf+Mv1ItFkmOTfvjjUoWqqsVW+2lsSbQNkx4gUKmbVd
icMdEJq5N4t0WIn0KFpfb/W2Ee59QpVn9CGuZeKDOEePGx1AMYhpSw6/Lj4GBNH1
mkfxgHMB1pDttwtgpIc6MyZW7ftjFxvteIv0FKj/EQO05KroOgCark2IlNtVR7lK
DdvDwoHPN5IpJgMtaZVFrXUk5sKZQS1ARclu/6pSsX8gcARjGjQ93m+tYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvP3IWJPC4dJweqoSirdO6Ztg7bMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqhxcmYL
yK+5+y72gwEtOlZZTDfRfaJMRCg8tsDE1L+iAKPS3rMbvUanZzWUfD5NXqKN2jlm
LKm7YEn+odc2Oimtsx2CJmcxL3LouV+HD7h+bcd8geYb9wnkGwBNucmuE+UBDhvF
Ftg1Hs0GAQU9Qx0T495J9sdxaV/mgPTVGE+RCXeMW4au/IZd0tlYwrWYLLpUhtCr
Fs3LdUUDyN0q4hEdT1vi9HZeX33qO7mlZOGp7DGDMNl9OFSitoeHTaw5p8z4hvvR
1TVEEuuroMItv4/aBFTCAHY2PHAYJDdaDClCSUmSmwG4gpEO1GCABoqU7ml1IQiV
UOQo71V3Aw8Dqg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:48:19 2026 by rpki-client