This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          P8luvtYhP/2gf9gKBxAX8oYzhfx41K1Eb3RUJUg0nRE=
Subject key identifier:   9D:5C:CF:F0:9E:74:8F:34:64:96:2A:7C:E1:0E:1B:73:40:08:A0:97
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       019BF5752786332617E7DE8342D3C42E1577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          17AB
Signing time:             Sun 25 Jan 2026 14:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:54 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: /gqLxaDwVr0l2y/XewW7X4Gk4VcKNPKPYWYrocZ17sY=)
                          2: AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa (hash: 9TWTjByJcZOyWpXeC0+/dCxoa8gWYVHVu+bJhn9WUwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:27:86:33:26:17:e7:de:83:42:d3:c4:2e:15:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Jan 25 14:00:54 2026 GMT
            Not After : Jan 26 14:00:54 2026 GMT
        Subject: CN=9d5ccff09e748f3464962a7ce10e1b734008a097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:fb:e2:c7:ff:c5:bb:b9:b0:71:5f:13:33:
                    01:9c:60:e9:8f:18:29:25:24:49:b9:94:6f:7b:10:
                    45:c1:d6:ff:81:76:e1:00:d4:83:e4:5c:02:69:c0:
                    84:cc:3f:99:b7:24:39:ae:e4:8e:7d:ad:6d:12:c7:
                    09:4d:91:bc:62:62:1c:6d:c3:41:c1:90:c9:62:85:
                    bf:20:ad:72:c0:92:2b:4e:0c:e7:cf:43:8e:15:89:
                    85:12:4d:64:c2:8d:cf:08:54:6f:93:68:20:13:44:
                    a3:3d:6c:1c:4a:3e:ce:4e:35:a7:ee:f1:4c:58:80:
                    25:00:4b:0a:93:7f:fa:b9:40:dc:29:53:45:a7:f7:
                    31:1b:bb:ae:57:90:e3:ed:76:2b:94:28:b6:93:8e:
                    d2:95:0e:39:32:a6:5f:3e:be:5b:57:94:93:2b:0d:
                    f3:4d:d5:ff:29:a0:be:0d:96:76:cc:c4:20:9d:de:
                    4a:be:9c:18:f3:b9:2d:60:97:93:73:47:46:f0:d3:
                    f3:b1:ae:25:9d:a0:fe:40:bb:5f:c8:27:7e:5d:c2:
                    6b:61:37:a3:17:90:a8:a3:04:1c:7e:be:35:27:dc:
                    98:66:a1:4c:c2:ad:84:13:ff:6d:2a:32:fe:f3:a0:
                    0d:24:ac:f1:e0:74:4c:6d:39:a0:dc:99:ad:1f:4c:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:CF:F0:9E:74:8F:34:64:96:2A:7C:E1:0E:1B:73:40:08:A0:97
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:66:8c:19:66:b5:1d:05:c6:2b:51:65:11:93:21:95:fa:8a:
         1c:dd:2b:01:e1:b9:c9:af:2f:1d:28:2e:40:99:53:26:89:20:
         4d:06:95:ec:b5:9e:44:24:75:8f:39:0e:90:a1:17:80:fa:94:
         4e:9c:4b:f7:be:d3:27:16:f9:83:6a:0e:a8:2c:28:ee:32:1e:
         07:e1:aa:b2:9a:cc:e0:32:28:cc:6b:6b:0f:8d:8b:88:fa:60:
         b4:14:71:4d:a6:58:f4:a3:0b:07:20:2f:6e:b9:bd:14:b3:e9:
         cc:b3:6b:98:14:b1:76:31:fe:ab:fe:ba:0c:15:d1:0b:50:11:
         23:34:ef:99:0a:41:f5:73:51:5d:59:7a:cb:19:70:db:9f:6e:
         10:a4:38:b6:5c:ba:a6:01:ae:11:e1:44:15:31:ca:01:bc:8b:
         c8:e6:ec:3e:76:a2:04:22:47:33:82:ff:b9:df:d4:d6:08:cc:
         90:94:57:65:a7:15:de:bd:e4:77:61:8b:3f:2d:9b:a7:56:2b:
         97:05:22:a5:04:51:52:b2:e8:d6:29:36:1d:11:af:58:c2:f5:
         be:3a:c3:ca:41:bf:19:bf:7f:de:7a:a0:f0:7a:bc:7d:b0:45:
         48:86:67:b0:75:c3:32:6a:55:6a:a6:48:cf:ae:3f:37:cb:58:
         24:f6:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:03:07 2026 by rpki-client