This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File:                     bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier:          JNvdVMVvSsyIg5uSwNSl1u5x74YnUNikQgZ2LuOyiDI=
Subject key identifier:   7A:23:95:B7:D8:74:BB:FF:BB:D8:21:60:13:33:39:66:BA:AA:72:6A
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer:       /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial:       019BF8ACDA9676DF4FAA9A0273C84A64B8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number:          0255
Signing time:             Mon 26 Jan 2026 05:00:36 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:36 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:36 +0000
Files and hashes:         1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
                          2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: ZYAe9W4ladTLvM9qRXm/H6DQoQlqwqPlOmKPnsyLC3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ac:da:96:76:df:4f:aa:9a:02:73:c8:4a:64:b8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
        Validity
            Not Before: Jan 26 05:00:36 2026 GMT
            Not After : Jan 27 05:00:36 2026 GMT
        Subject: CN=7a2395b7d874bbffbbd8216013333966baaa726a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:91:2e:d7:b1:90:15:67:8a:22:ba:c0:cc:
                    e6:0a:e1:7a:33:45:e4:af:91:d8:ba:e7:d7:b6:f4:
                    a2:c9:c0:72:29:81:87:d4:73:49:2e:21:96:b4:f0:
                    52:66:d6:f8:cb:5a:a6:5d:be:56:22:6d:77:0c:23:
                    e4:6d:c5:34:cf:b8:0b:e5:fe:33:e2:d4:b3:c8:fa:
                    b6:75:37:df:1d:0d:f4:46:15:9d:bf:39:aa:22:3a:
                    dd:c7:b6:cc:f3:e8:18:0c:02:36:c6:ec:07:05:ff:
                    70:dc:92:65:79:16:14:16:a3:5e:0e:17:2a:12:66:
                    03:74:fa:b5:97:cb:75:ad:64:5c:d1:c7:5d:14:0c:
                    b0:ef:02:81:95:1a:f0:69:3e:95:37:71:cd:ed:9d:
                    a1:fc:ed:9f:6e:fd:09:f9:e9:29:e7:d3:c7:30:9a:
                    44:f4:6d:72:b1:d3:e6:41:41:1a:4f:59:af:e0:44:
                    a1:e4:88:9d:48:ce:5f:11:97:79:ed:12:de:bc:d6:
                    37:57:6a:87:d2:97:e0:fe:18:a1:5d:9d:58:53:dd:
                    40:f7:af:fa:b8:a8:97:dd:42:69:d4:06:63:0e:1f:
                    86:0d:8d:e8:2e:fa:d4:c3:4f:4c:ae:5b:71:d6:28:
                    b2:13:b8:f3:d8:ff:56:19:1e:25:be:08:62:d6:73:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:95:B7:D8:74:BB:FF:BB:D8:21:60:13:33:39:66:BA:AA:72:6A
            X509v3 Authority Key Identifier:
                keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fe:f9:3f:65:89:59:6c:c3:07:0b:f1:e2:8d:98:a4:fa:a8:
         c6:d4:33:37:c9:08:ae:f4:85:6f:2d:9c:87:cb:0f:7a:46:a2:
         bb:8f:ac:ff:fa:cd:9f:c6:eb:71:04:98:b8:29:93:a1:a5:42:
         17:2d:5d:07:bc:95:e3:37:a1:90:a5:7c:72:83:7e:22:4d:0a:
         c1:90:89:11:ca:8e:1d:b6:11:59:d2:e0:bc:1b:b5:56:2d:3d:
         ca:43:20:76:0e:3e:0e:d3:23:4c:72:1b:d5:34:09:07:62:45:
         38:ac:8d:39:63:42:94:9e:a7:83:75:ee:0f:46:8e:ab:e9:cb:
         6a:f1:ec:b7:59:92:6b:c2:3b:1f:c7:17:46:bf:e3:16:27:4f:
         e3:30:b7:52:4c:14:22:20:19:54:10:f4:3e:57:44:f7:3c:9a:
         81:c1:80:f6:aa:14:13:61:28:d6:87:e0:23:26:46:c3:bb:78:
         13:63:a1:f5:6b:d6:f4:6f:36:6d:bf:17:4d:81:c2:7a:9d:a8:
         c5:64:85:8b:40:ba:69:77:b7:6b:c3:56:38:f3:b2:07:6a:35:
         28:3d:5d:0b:61:25:3a:67:25:9f:d3:a2:8a:23:35:29:b3:23:
         7b:55:fc:00:7d:d4:fb:47:f2:94:ed:6b:e7:0b:91:3e:2f:af:
         ef:35:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:26:03 2026 by rpki-client