This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File:                     6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier:          3KzzMabOlRl/LR0bWqKgUZUQqJWhU4ssdJxxJD+2wso=
Subject key identifier:   13:E1:BD:D5:C3:0B:C9:9E:77:9C:69:5E:79:88:BD:45:9A:94:5D:29
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer:       /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial:       019BF5AC95097131FD1FAE9F6199D93F0B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 15:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:26 +0000
Files and hashes:         1: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: wGAmuS0ER8aNQ/Brv0UmoMa7BXGG2O8M9BuVUnMnzEU=)
                          2: CDDBIhPlFZ0la4xFUCyUslJRm_w.roa (hash: APBpif6BQi/aq1agj/dNgGEFPrydGKCzR1HfGBm5Jbw=)
                          3: VEYj2LHmN-togd_mlPbNrhUEwf4.roa (hash: 9Rwuw5dPRTSkAe/qbyFWR8ARVN2r+Tl0lHJCSvWgs68=)
                          4: dnwGTH0FieAd94oqN2OTApOST_Q.roa (hash: aIR54WoUK0WT8TJ7U0JAbOT4DOCp5Eb6XBrXkWKbnto=)
                          5: istOwulN0TBtCeTz_FD-nhvpIck.roa (hash: IbiJxrUh2vHPG6p5xcqxXoKoxW9imoB9piUbP1LLjPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:95:09:71:31:fd:1f:ae:9f:61:99:d9:3f:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
        Validity
            Not Before: Jan 25 15:01:26 2026 GMT
            Not After : Jan 26 15:01:26 2026 GMT
        Subject: CN=13e1bdd5c30bc99e779c695e7988bd459a945d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:05:69:53:8e:f5:1d:64:10:9a:04:1d:7c:
                    50:83:90:59:2e:ff:e0:e3:3a:13:e2:5b:60:a9:9e:
                    83:1f:1d:88:27:e1:6d:5b:a9:b9:f8:c9:98:25:7d:
                    b0:21:06:09:a3:a5:3c:aa:fe:87:b8:74:35:c4:c5:
                    4c:62:29:1b:ef:11:73:61:5b:13:6a:33:1d:d9:47:
                    0c:05:aa:df:49:0e:3b:6d:de:53:1f:61:28:1c:ee:
                    4e:c3:88:0e:ce:80:c0:93:1b:b9:73:e0:c3:19:39:
                    25:15:b8:ce:73:7e:1d:7a:82:98:49:50:c8:3a:18:
                    74:87:db:b3:b0:1d:a7:02:91:1d:9c:23:2f:d4:23:
                    08:2e:7b:58:0a:28:99:20:16:bb:26:17:a6:f7:5f:
                    bf:10:27:64:ae:ee:a4:18:ef:21:4d:59:88:25:46:
                    74:58:19:30:12:d2:d9:da:0c:d2:a0:e8:1e:c1:7f:
                    0e:dc:61:69:79:f0:2c:8e:08:0c:da:67:ae:ba:53:
                    c4:cb:ab:f3:8d:03:9e:9f:9f:55:95:1c:48:e5:81:
                    5b:13:23:8e:5c:4c:09:94:89:13:e3:61:bb:d0:88:
                    de:99:bc:3a:96:10:fa:f0:da:4a:c1:f1:53:28:33:
                    cf:01:c0:a0:10:d1:a9:17:5f:b5:a7:2e:87:da:5d:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E1:BD:D5:C3:0B:C9:9E:77:9C:69:5E:79:88:BD:45:9A:94:5D:29
            X509v3 Authority Key Identifier:
                keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:09:f4:6a:ce:d4:8f:06:a5:8f:51:a5:ce:7e:b3:3e:77:
         0a:1d:13:02:a8:02:3c:cf:d3:6c:fc:3a:d1:fa:72:6e:d3:07:
         5c:4b:a6:cc:1b:47:cc:2b:33:ed:f8:58:75:e7:55:ee:06:04:
         49:e1:90:9f:8c:30:18:d7:c8:d2:10:c2:f9:5a:7b:ff:80:af:
         e9:e6:4f:57:3d:6a:04:45:b8:4d:aa:cf:35:f2:eb:b7:e1:20:
         c8:65:dc:fc:e9:5c:c9:74:a7:db:ab:98:a9:44:95:07:97:be:
         75:5e:78:9e:01:99:cb:13:c9:5a:6d:e3:93:20:b2:98:93:59:
         21:11:4f:24:99:46:51:3b:a3:89:0b:2b:e1:ff:33:13:45:d5:
         da:d6:c4:bc:a0:ed:71:69:58:e6:38:04:c9:28:8b:18:e3:a4:
         94:55:c9:ca:99:f6:48:87:d5:37:51:3a:ae:66:b0:5e:38:44:
         60:b3:27:da:d6:f6:c8:4a:68:c0:0e:d7:8d:0d:23:eb:b5:a3:
         af:c4:4b:03:17:a3:5e:98:03:75:ff:d3:72:b8:53:31:dc:8a:
         02:ae:05:5f:8d:ed:9d:48:51:62:7f:7b:13:2b:de:7b:c7:cc:
         51:3b:fd:b9:93:1d:7f:0a:26:cc:d6:93:2a:37:20:2a:39:9b:
         47:df:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:30 2026 by rpki-client