This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          vyN+qnb0gy1i00GHG/2v0LQxF46vAjuMexPKzp6rwNo=
Subject key identifier:   1B:5A:A3:63:83:5F:DC:00:31:9A:D6:09:1D:73:85:38:9E:72:D4:06
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       019BF4993D4798548BE44D2751CF470D58CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          03E6
Signing time:             Sun 25 Jan 2026 10:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:41 +0000
Files and hashes:         1: 47hJsASozRDqhuCU5AfmHwpSaeM.roa (hash: 3xuZAzw3KETa+bwqpnJGB1vDRHOPpTU+lO61TYMy18I=)
                          2: 7xOGvUid5wgR_viXaJCs-_E41Dc.roa (hash: scuGxNCLA5L3YCe/NBi2qwEMiltJqBLZuIhGsoKzXm4=)
                          3: CkraNljOqkeSekJdoAbtNjJUZxU.roa (hash: o4lFQ2jvZtAY9Qkbgut69KisZCd4iL38+vgSPqcwEK8=)
                          4: DPfNU5hIo1-ciAEj9brIauBQL7Q.roa (hash: AtV2QPSAYmwpuehaFYlZOIVnxkZ4cKgkcGd5G/ierKU=)
                          5: R6XMwFpcp2UJ16Ql8QFVP6Rp9ec.roa (hash: 0t3mzIeTNynKr8VMHod3xlGeVo/HmsNEjXTbtx+kp8Q=)
                          6: S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa (hash: JK/8ld2vkFnKBCJeP74SV+/N5f0fLHlt3L2e82GsaP4=)
                          7: YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa (hash: Qq6ogFgDN4EOjnq+f9NCyesKbJbW/svA1UdP0OEqezc=)
                          8: aNNxwXM4RLWcgiojbyE7ayki1ds.roa (hash: aXD5NXX15GN3LeS7Ev04287erJQ10IqS/qwsHUN++xk=)
                          9: ig_VBpviDFPO2k9TLvdj_dWYYIw.roa (hash: WqPhG6OmFgIAQlSVATvrRDw6cG27/lSxwjfUp8XUsZY=)
                          10: jNIo4jwvqz1IelLRu8GvtQg4OJM.roa (hash: NZFhvQtEgj4btkeWoTCHHe2LlPOEV+ZMhUCQO45Afok=)
                          11: mGXcdc3NkS89VR-ehnhFaQ3OaKc.roa (hash: c2VXcpUEdl/AX8z8uYRh5IzdPmWTuNl2Mu8B+2l4c3E=)
                          12: o98NfeDK9CRHez9q6wLGlITiQ6w.roa (hash: knhKVoHKZ9gBPHJ7HZTVX8GdKMHhMGkjA+da43LunF0=)
                          13: oua9eFE_AJcMStF2oFe8vadhouw.roa (hash: ert4Il7JZA5XFW1lG5qvKbrDDFIMP2FcrLckySpeZUQ=)
                          14: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: Kqc+pI1hNTJc60Lm0ypmkQ5D7duD76NgfVxrS2VAObQ=)
                          15: s4doa2uCWT8wlElRSQYnyEhb-io.roa (hash: q2luMe75BiPCJy4TtTk1lDnNUZzVDgGLlpHp90uHA98=)
                          16: sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa (hash: W/MQGBKbXxcpb0fgJqS7ufdVgzl0yD0EsDfR255WBk0=)
                          17: vp5TOmg5PSChbTXqEn839qbGjU4.roa (hash: 3ggocbcMjs8++XIEOhfa6mmEv0tRoM8xV2RU3tGAIwU=)
                          18: wZnB7Qjfda0ITgQ2HWutXpolCjU.roa (hash: MXsdTNO05d6fpADf9FEXYgiPgEmRVXldtdKNkmYeKJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:3d:47:98:54:8b:e4:4d:27:51:cf:47:0d:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Jan 25 10:00:41 2026 GMT
            Not After : Jan 26 10:00:41 2026 GMT
        Subject: CN=1b5aa363835fdc00319ad6091d7385389e72d406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:e9:4e:8a:65:b8:46:34:8b:1e:0c:a2:85:
                    a9:a0:46:3c:26:b8:cb:f5:31:e7:ee:4c:e4:52:3d:
                    fa:ff:03:ec:20:0f:03:b6:b3:a5:43:22:c7:d4:39:
                    3b:b0:b4:3f:36:9d:5e:8c:96:7e:4e:d1:9b:d2:a8:
                    ce:63:89:15:ad:9c:a6:72:15:02:c4:c8:ad:7e:93:
                    a3:52:28:1d:42:f0:da:4b:cd:0f:b9:7a:b1:70:27:
                    95:65:f0:8e:09:fe:d0:08:ce:e2:55:59:e7:28:a1:
                    a9:24:a8:28:73:e5:d3:b7:af:0d:c8:bd:77:d4:99:
                    ad:7d:53:a5:2b:03:ef:e7:97:af:0b:7f:98:0f:be:
                    c7:85:47:1a:64:1a:0c:dc:da:ee:8e:2d:5f:cc:2b:
                    7e:af:70:90:bf:d7:57:7f:b9:9f:94:ac:55:b1:7f:
                    62:79:13:d5:9b:43:a0:68:8e:65:cc:b6:cd:b7:9e:
                    4f:6a:28:13:95:70:7c:09:7b:89:5b:2b:5e:b0:79:
                    88:47:ed:9c:65:00:ae:b6:da:bf:c4:23:b6:da:e1:
                    81:d9:dd:b8:1f:7a:f1:25:43:79:fb:c9:48:92:74:
                    26:47:f4:ec:48:54:53:58:9c:b6:40:b0:55:0e:25:
                    30:bf:ed:f6:56:4b:45:12:f3:5f:7c:6f:81:ce:4d:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5A:A3:63:83:5F:DC:00:31:9A:D6:09:1D:73:85:38:9E:72:D4:06
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:72:ba:51:72:26:bd:c5:24:56:ee:56:dd:51:11:81:74:
         0a:1f:82:68:0e:ce:99:60:1c:4e:2d:b2:39:5e:66:5a:f2:bf:
         e3:fe:48:e5:2c:a0:87:85:4a:24:1c:19:14:c1:b4:d6:7a:ef:
         2f:9b:8c:b1:c8:7c:35:44:a4:03:99:32:0f:ee:b9:8d:94:3b:
         23:93:c5:31:86:07:92:7d:84:e6:5d:6f:0c:10:15:54:9c:84:
         5e:1c:0a:ac:64:2e:9f:bd:55:2c:61:e5:28:2d:62:77:76:30:
         4a:7b:e9:87:dc:0c:ba:97:76:11:e6:c0:5a:04:0b:f6:c2:ae:
         d1:ec:14:56:e9:d0:77:cc:ed:eb:39:8a:57:99:16:bf:4f:f0:
         44:34:d2:36:94:72:00:00:d0:19:fc:43:cc:be:16:5e:ab:0c:
         01:86:83:75:95:6c:7d:61:8d:5d:73:75:2e:8c:bf:d1:78:bd:
         e4:93:40:f3:5c:dd:f7:5d:cf:84:94:95:68:eb:bd:4b:8d:00:
         f6:62:60:0b:5b:3c:a3:60:86:6a:74:a9:25:84:0f:ba:e7:23:
         f6:52:16:27:21:e9:6f:72:1a:88:b9:ae:04:5c:1b:1d:2b:9c:
         bd:3d:5d:37:32:c5:38:c2:46:e9:b5:c1:df:1c:8d:c0:b8:2d:
         03:06:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:19 2026 by rpki-client