This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File:                     b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier:          zf5XG1s9LtdRCDQVnh7Kj5ei6cuf9X3J6bf8cpz/3Sk=
Subject key identifier:   BE:BE:9C:F9:4C:62:84:68:F5:01:B0:4E:C9:23:51:9D:FB:05:3F:30
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer:       /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial:       019BF8E3EB5CFA1F9D3B4C24B51AC827CF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number:          16B9
Signing time:             Mon 26 Jan 2026 06:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 06:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 06:00:45 +0000
Files and hashes:         1: NES_Di85pZi5ENKpgDz8EQo01i8.roa (hash: ohM4Ey0EufRoQF8r1FlwKpwiQqOYJ9oFC/DI4pckWkI=)
                          2: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: q+4zoI72pb0V8fSU9TlL+FwGKHGQgn2I7ZePpruYRgM=)
                          3: g2H9xWj1H5AbwMNqiP9AW55oss8.roa (hash: 9T0jOBQOH9REt/W/f2e2pn8D6B5ZPkyd1uv8j2XXDoI=)
                          4: kQAqQkYprXGntUoiW7qN1WFeM6c.roa (hash: FS+U3EYjUSEwiuzNKrPworcyNLMeX4zA9XKfDuWL9sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e3:eb:5c:fa:1f:9d:3b:4c:24:b5:1a:c8:27:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
        Validity
            Not Before: Jan 26 06:00:45 2026 GMT
            Not After : Jan 27 06:00:45 2026 GMT
        Subject: CN=bebe9cf94c628468f501b04ec923519dfb053f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:bf:57:a2:61:f2:0e:01:aa:8f:cf:36:11:
                    af:74:ca:7b:9b:4d:44:68:fb:da:a3:13:96:0a:2d:
                    70:a0:c4:5d:6f:2f:39:15:82:76:89:bb:6c:9a:77:
                    e5:b4:e3:6d:a6:48:f3:a7:2e:23:5e:b1:89:c5:d0:
                    c9:b3:45:54:7d:1a:6a:11:8e:8d:e2:15:a9:10:5f:
                    a2:36:28:69:ad:9a:8a:15:d3:54:6e:f4:cb:24:b1:
                    4d:26:a3:9b:3e:ca:0d:b2:6a:b9:bc:91:ba:09:5f:
                    af:4b:d3:6a:f8:69:31:a4:56:65:79:43:0e:29:07:
                    16:41:57:30:aa:17:92:70:6d:36:3e:4d:13:36:9f:
                    98:59:2c:17:24:d4:2b:c3:e1:27:da:dd:08:95:8c:
                    ed:d4:75:c4:6b:8c:6b:18:ee:d6:0b:22:81:cb:1a:
                    21:8b:e0:f5:9b:8c:35:eb:77:c6:47:18:e2:7e:d7:
                    e2:6a:b0:79:9e:65:c3:0b:fb:49:af:47:33:0e:59:
                    64:41:ab:94:e5:1c:9a:81:37:fc:f9:aa:64:80:5b:
                    09:8d:47:83:a1:71:5e:26:95:7d:0a:d9:92:16:a8:
                    01:d8:9d:ed:df:a3:7f:d3:58:a8:1e:cb:93:17:c9:
                    4e:14:06:1f:01:b5:ab:4d:3a:45:6c:2e:61:cf:cb:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:9C:F9:4C:62:84:68:F5:01:B0:4E:C9:23:51:9D:FB:05:3F:30
            X509v3 Authority Key Identifier:
                keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:3d:4f:fb:9e:ca:e6:5e:54:f5:02:82:0f:e3:db:13:db:
         ce:f1:b5:83:f3:12:65:6c:3e:0e:19:a4:d1:16:26:d6:3d:f8:
         7c:d2:c3:17:94:b0:8b:20:02:ee:f2:ff:d5:41:f1:f2:47:cb:
         74:1e:be:80:f5:58:e2:e0:45:c0:99:1f:07:dd:f5:ae:dc:a5:
         fd:62:29:de:e6:ad:f5:5c:43:80:df:44:6a:d7:1a:ce:1e:4c:
         17:69:f3:52:59:bc:36:ba:95:76:45:fe:61:38:f8:06:96:ac:
         6f:49:db:7b:4b:d3:ec:92:98:c6:cd:ef:ac:7f:e9:92:3e:3f:
         9e:46:be:be:34:27:82:59:7b:f3:81:d4:09:6e:a2:b7:f0:94:
         5a:5f:3e:28:91:c8:b0:83:15:aa:c2:b4:8b:3a:2a:f9:32:a0:
         b4:e9:6c:89:a7:64:cc:87:21:f1:36:25:af:1a:f7:07:5b:20:
         03:80:05:df:e6:d9:df:c7:58:bc:64:13:22:6c:b7:db:92:f4:
         e0:9d:f4:0e:ea:db:e1:71:24:05:e3:51:db:f1:d3:68:ee:67:
         eb:aa:41:dc:85:c5:4c:54:ff:5b:fd:22:92:31:66:09:9e:92:
         d6:c1:4d:66:84:9c:2e:2b:74:da:54:69:bf:e7:a1:b1:65:e6:
         9d:1f:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:09:42 2026 by rpki-client