This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          i3zNGuXwCuU4SgAClzKyES1aOjDkXB9y4uAwZeZYms4=
Subject key identifier:   72:F8:52:D1:F0:3B:2B:7F:1A:0E:D7:D7:7A:72:B1:49:FD:BE:26:18
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019BFB7763BE228CFBBC2C76E30376BBACD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          1740
Signing time:             Mon 26 Jan 2026 18:01:04 +0000
Manifest this update:     Mon 26 Jan 2026 18:01:04 +0000
Manifest next update:     Tue 27 Jan 2026 18:01:04 +0000
Files and hashes:         1: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: bLBloEriinUq25CcWMG3ZWljz5G6Sk8wRStjv0ywz1M=)
                          2: YzrXnq3vRorLDkTNpUF7ED1XPXE.roa (hash: akkM/3QksJnCzoJ9FHhEn+9ohX+WOVP8QHjLBNNOvGc=)
                          3: aYEe0Wp6s-0vMrsmI0r1Am-aAmE.roa (hash: 0zIQeQUHMUd4XTm26NFK/GYzSa6prZHKRHgzCL5iipE=)
                          4: cV6HlXd9VLe--dSuiSOFXK3TxRM.roa (hash: cKnEl0wq7eLVeKPF83FlArGfxSvAPlhsKghSnnUyAeI=)
                          5: mIcG_kEYZC1jyRE_dH-HaI-yzCY.roa (hash: 7aEUk3f39asrdQDlVo3nL7Bci/VYA+D2BlsnqVXZqDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:63:be:22:8c:fb:bc:2c:76:e3:03:76:bb:ac:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Jan 26 18:01:04 2026 GMT
            Not After : Jan 27 18:01:04 2026 GMT
        Subject: CN=72f852d1f03b2b7f1a0ed7d77a72b149fdbe2618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:cc:7c:7f:16:80:44:ce:2e:36:95:15:db:
                    79:ba:66:0c:60:e4:45:37:2b:a9:47:54:4c:ed:39:
                    f0:b9:9e:3e:00:bd:f1:66:c3:b4:c1:95:be:cf:01:
                    51:50:4e:92:60:d3:b4:58:c3:71:7e:8a:cc:e6:38:
                    68:42:03:34:8a:17:7a:9c:22:c5:2d:f1:f8:e7:a8:
                    a4:27:c3:61:29:34:84:b1:6e:c4:00:36:f3:35:45:
                    18:5e:72:2c:04:48:58:5e:19:8b:49:b7:99:d8:7c:
                    37:14:5b:77:5e:5d:d3:c9:3e:1d:aa:a5:e2:b1:3f:
                    26:ff:13:bf:15:f9:23:90:cf:b4:05:59:29:3e:15:
                    ca:a1:2e:ef:ec:a8:26:2c:d7:55:a5:f5:3e:50:31:
                    f2:bc:2e:e7:4d:46:6b:c6:21:1d:41:b1:fe:0b:e6:
                    d9:d2:e4:b5:74:bb:4c:9e:61:f7:9f:e4:e1:8b:5e:
                    0e:ab:e5:4c:8f:6f:42:2c:df:5b:73:a1:33:0b:37:
                    76:25:c6:3c:3a:c5:99:03:19:5d:c1:be:5f:20:06:
                    84:fb:6f:c4:79:54:92:4b:07:f4:ce:0b:85:be:2d:
                    3a:70:9d:27:e3:2f:71:91:f4:6d:b8:16:e3:29:2a:
                    13:4e:51:26:18:89:15:90:1e:60:d1:db:63:84:cd:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F8:52:D1:F0:3B:2B:7F:1A:0E:D7:D7:7A:72:B1:49:FD:BE:26:18
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:77:a7:96:3a:f7:4c:a4:ed:19:cc:99:60:b0:cd:dc:10:
         74:13:74:59:90:f8:35:77:88:28:e7:0a:1e:69:d1:82:ce:0a:
         5c:ad:90:49:c8:66:af:ec:60:70:3f:ff:42:1b:4f:c4:54:d8:
         e0:50:80:48:94:6d:df:1a:98:9d:1d:1c:7b:9a:2b:49:11:f6:
         d7:0f:84:4d:17:75:26:fb:f1:b9:04:ae:83:c3:bd:c6:ef:da:
         a9:6a:8b:21:d5:55:1c:90:88:53:e1:cf:ee:d5:93:1d:7e:2a:
         cc:ed:4c:67:0d:cd:ac:52:40:20:9d:c7:6a:25:25:cd:9f:32:
         e8:af:03:0a:3b:e8:d3:d0:86:ba:e4:41:d4:11:17:05:40:97:
         b6:91:c9:16:58:1d:3d:71:9d:6f:77:8a:01:e9:fd:7b:79:84:
         52:c1:ce:bb:83:9b:4b:c7:17:02:96:66:4c:22:4a:e2:80:ed:
         91:32:f8:0e:85:81:b0:3a:f5:64:5a:b9:48:0e:64:7d:82:a6:
         81:9e:97:eb:e3:a2:dc:9b:a9:ad:62:14:c1:38:7f:02:99:81:
         4c:25:a4:26:2b:63:01:43:ed:d4:b4:27:29:5a:b9:1b:d8:6b:
         36:8b:b3:a0:28:8b:c2:9b:ba:ce:59:87:28:f3:7d:91:09:07:
         c8:8a:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:02:34 2026 by rpki-client