This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File:                     7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier:          9FoJHLxMYyG6MLNmfJIoLiUjqOM2dsEuLFCSfPhv2lY=
Subject key identifier:   DA:AE:29:BF:13:D1:A1:2C:B5:96:1F:F9:6F:A6:7E:58:47:36:F5:23
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer:       /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial:       019BF91B6A22FCEEB72569963D06DA19B849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number:          15B4
Signing time:             Mon 26 Jan 2026 07:01:21 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:21 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:21 +0000
Files and hashes:         1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: koW+wuaol5zCJ8vTOgA7KjiWEH4/1Z9DbjSSbk8suFI=)
                          2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
                          3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:6a:22:fc:ee:b7:25:69:96:3d:06:da:19:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
        Validity
            Not Before: Jan 26 07:01:21 2026 GMT
            Not After : Jan 27 07:01:21 2026 GMT
        Subject: CN=daae29bf13d1a12cb5961ff96fa67e584736f523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:5a:26:7a:11:26:54:a2:86:8b:cf:0f:83:
                    28:a0:f8:e2:72:37:ee:0c:ff:6d:87:29:39:d6:bc:
                    45:c4:ad:48:e9:8d:c5:a7:8d:33:74:45:29:24:dc:
                    27:86:28:48:bd:77:37:d3:be:b5:ca:d4:6d:aa:bb:
                    f9:b1:55:db:65:f6:b2:ab:6b:67:60:4c:a0:02:ea:
                    dd:ba:25:f3:b1:48:1c:31:98:38:88:b3:94:ce:6b:
                    9a:f5:08:10:34:0a:40:db:1b:fb:a5:e5:5f:da:f4:
                    e5:aa:a2:1c:91:56:ca:ab:54:5d:db:bc:12:f3:49:
                    9a:c2:f1:82:7c:c5:d3:72:cd:b7:3d:64:9d:8a:ab:
                    84:3a:df:04:77:6c:7a:2a:55:43:16:a0:1f:73:bf:
                    4e:1d:b3:8c:18:52:5c:86:de:2e:0e:92:a4:22:f4:
                    26:2d:13:ce:04:90:ff:5c:50:f2:1a:c0:64:49:9a:
                    d4:40:cb:8c:04:c3:0b:f7:ed:ad:c8:ba:97:67:0f:
                    9c:1c:f4:65:5a:b0:9d:ac:bb:67:ab:da:54:89:24:
                    c1:89:c3:11:a7:c9:e2:9c:10:90:da:d7:96:ca:8a:
                    a1:6f:c1:e7:86:01:52:7d:b4:14:59:ef:72:0a:2a:
                    96:70:4d:5e:a0:69:c6:f2:ca:34:10:fe:76:3d:8c:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AE:29:BF:13:D1:A1:2C:B5:96:1F:F9:6F:A6:7E:58:47:36:F5:23
            X509v3 Authority Key Identifier:
                keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ce:5a:c7:e2:b3:73:55:01:d0:05:f3:58:db:91:70:f0:d2:
         aa:43:bb:51:34:a3:7e:4b:30:dc:29:7d:84:f3:71:04:cf:64:
         3b:9a:32:e0:ff:28:0a:f5:61:a2:b5:ed:86:28:63:e1:03:ee:
         d8:23:40:38:33:5c:b6:23:b3:3d:d0:31:b5:06:22:89:b2:ce:
         22:90:81:e9:1e:79:76:61:07:99:92:38:59:df:f2:4e:ce:49:
         24:c8:66:bc:9a:56:3f:fa:56:80:a8:e1:af:37:53:a5:8a:c4:
         50:c1:51:17:88:8a:35:42:80:3a:b1:ca:51:ee:67:49:3c:9c:
         a8:07:4d:98:70:37:24:41:32:8f:c3:01:34:fd:8c:eb:43:b0:
         fe:2d:84:0e:99:51:58:47:32:3b:93:eb:03:0b:fd:ba:f6:10:
         b5:7a:74:26:e2:16:37:68:7b:8b:41:b5:b6:7c:3e:7a:12:59:
         2e:70:a4:fb:de:56:a0:80:e6:95:ed:07:e3:e9:78:67:92:6b:
         4e:bc:4f:92:65:ec:0c:df:1f:93:c5:0c:29:f8:4a:e0:ca:87:
         0d:0f:01:4e:1b:cc:40:47:31:b6:e5:98:08:cd:7a:33:18:3c:
         cf:5f:3e:89:7e:63:ed:98:5a:4f:d2:46:e9:1a:67:10:9d:23:
         2d:6c:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:37 2026 by rpki-client