This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File:                     piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier:          Kio3qBfMfD7u91zjI06w1KxuVvDzIYHS9bhq81dcALk=
Subject key identifier:   E2:A2:78:CF:68:39:B8:67:66:90:F4:88:CC:1F:4B:2A:F0:A7:F0:65
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer:       /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial:       019BF3BDEE00A39AB58B5CAE057A063C9E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number:          06BC
Signing time:             Sun 25 Jan 2026 06:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:09 +0000
Files and hashes:         1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
                          2: hbdA2d-vBo-3SzfwxxldcwTdYxM.roa (hash: raXOO4Vzk3j1wiNPoTdhzreg0aYJjjmuG0/ZS3bT/qA=)
                          3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: vYTUMxcEs2br9fQ7JhukGgaifProB6dbofZrT96R9/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:ee:00:a3:9a:b5:8b:5c:ae:05:7a:06:3c:9e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
        Validity
            Not Before: Jan 25 06:01:09 2026 GMT
            Not After : Jan 26 06:01:09 2026 GMT
        Subject: CN=e2a278cf6839b8676690f488cc1f4b2af0a7f065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:8b:ca:05:a2:f0:ea:be:99:b1:c3:8d:8b:
                    33:6c:65:53:d4:bd:56:42:bd:8e:fb:27:c8:8c:93:
                    8e:48:83:ad:7f:47:79:ba:11:b5:70:17:0a:fe:fa:
                    23:e2:2e:34:5a:de:f5:a4:55:56:57:16:66:80:58:
                    dd:13:99:f8:e9:77:fc:03:af:7e:38:15:2d:c1:31:
                    17:36:a2:59:03:71:a7:64:28:3c:69:27:9b:92:62:
                    c4:fb:8a:a2:e7:53:42:a0:28:aa:e4:89:03:5e:25:
                    e0:c2:09:e6:1a:6a:de:4e:0a:5e:f9:13:58:f2:06:
                    91:dc:38:7c:43:7c:21:64:09:ea:8f:cb:8c:44:6f:
                    15:29:6e:d5:59:49:d7:08:95:d8:1b:66:96:5e:f8:
                    5d:a1:6d:04:f8:d6:68:0e:fc:a2:49:9f:c7:4c:99:
                    27:e2:c2:9d:a2:f6:cb:59:ed:93:09:19:15:c4:b6:
                    b2:3a:f7:27:76:f9:14:e8:42:60:97:2d:02:9a:bf:
                    28:c3:12:24:f8:af:ac:96:75:31:da:f0:90:45:47:
                    9e:24:82:66:d3:16:6f:91:03:7c:87:96:e6:55:1e:
                    92:f1:67:bb:52:17:b1:5a:30:de:3f:00:bd:e5:ee:
                    b2:ea:2c:26:64:cd:82:19:19:d6:61:5c:2c:d1:22:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:78:CF:68:39:B8:67:66:90:F4:88:CC:1F:4B:2A:F0:A7:F0:65
            X509v3 Authority Key Identifier:
                keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c2:d6:c7:c5:b4:03:2e:e5:0b:9c:ae:35:5a:21:e7:d8:a2:
         1b:9c:e4:4c:bf:7f:7e:c1:09:cc:65:c1:81:0a:3a:f7:eb:df:
         0f:f5:7f:00:8b:e2:61:9d:09:a9:66:04:24:36:37:52:6a:53:
         be:35:03:84:bf:bf:23:c7:61:d1:9d:9e:23:45:8d:29:b7:1b:
         aa:bb:99:63:e6:2f:99:4b:c0:21:18:f6:e0:b8:d1:89:7a:04:
         f5:dc:67:86:7a:15:d2:ab:1f:87:56:0e:30:3a:fe:90:7d:92:
         cc:7f:09:cc:96:cb:37:55:44:d5:13:7f:d6:e9:23:dc:8c:3c:
         44:59:de:d2:f5:60:43:b1:0c:e3:ac:a0:6a:20:f5:2b:29:82:
         df:a2:16:5b:e9:de:8d:b1:81:24:e2:92:08:41:42:83:32:f1:
         78:c7:31:a0:1c:64:7c:92:d8:92:33:a8:e4:0e:29:06:e3:ce:
         8c:7e:fd:63:4c:a4:f0:bc:0f:b8:f6:d9:df:e8:6d:18:0c:19:
         1c:5d:52:91:84:a2:77:d1:24:36:57:9f:a6:44:7d:12:b7:ed:
         88:0e:32:ae:b2:db:70:c8:a4:a4:4d:06:4d:53:e5:c6:6b:cc:
         6f:d6:be:d8:4d:0b:f0:4a:b0:04:56:25:3f:11:38:4b:ef:d2:
         74:9a:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:41:41 2026 by rpki-client