This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          Hk4i5yncOXIUPWTBSLbtLLIyA4QsWprP5t8uonAuC+g=
Subject key identifier:   15:3A:CB:D4:DD:42:53:4D:C7:CD:DB:8D:97:EB:5F:8F:B2:19:1E:91
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       019BF57576D38FEB464F5FDF97497FC37879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          1685
Signing time:             Sun 25 Jan 2026 14:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:14 +0000
Files and hashes:         1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
                          2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: gZf+SZKpp3ZSU7SWDVYly8C0nUX5YrHZB+zV2yoX2c8=)
                          3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:76:d3:8f:eb:46:4f:5f:df:97:49:7f:c3:78:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Jan 25 14:01:14 2026 GMT
            Not After : Jan 26 14:01:14 2026 GMT
        Subject: CN=153acbd4dd42534dc7cddb8d97eb5f8fb2191e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:f1:85:00:5b:38:b7:08:eb:c9:20:cc:85:
                    ea:52:44:52:19:b5:78:c2:5a:3f:d5:87:cf:81:92:
                    e1:9a:a2:8d:01:31:31:0f:34:08:7f:01:ee:6e:79:
                    35:6b:10:67:3b:34:0c:52:27:dc:75:2f:89:3f:64:
                    8a:a3:23:0c:ac:05:0d:89:9e:43:46:1b:4c:cc:d9:
                    6b:fb:b7:62:87:e3:c8:cf:d3:75:12:1f:7f:24:9e:
                    ea:50:54:aa:35:01:f1:e4:cf:e5:fb:b1:eb:30:dc:
                    28:11:59:f8:12:74:41:5c:54:b4:11:9d:af:75:0e:
                    b0:63:89:f7:dd:63:99:8b:5e:3e:1e:09:71:29:1f:
                    f6:82:f9:c8:12:8f:1a:30:1d:33:3d:52:b9:ac:ca:
                    25:bf:e0:cb:ca:70:74:c5:42:f2:b6:69:9a:fe:7e:
                    3b:6b:b5:f3:3a:3d:a2:d9:9c:87:ed:3e:2b:96:42:
                    47:11:cd:97:a3:38:80:2d:12:dc:f5:6f:a7:05:77:
                    16:b2:5a:cd:f9:68:df:2b:0c:19:7e:1a:1d:ba:0b:
                    2a:7c:3d:4a:2c:f1:a8:fd:9f:9d:3b:94:e6:2a:78:
                    70:b1:94:a2:ce:d6:d0:11:4f:0c:d5:8b:f8:b0:56:
                    a5:e0:1a:e4:5f:32:d0:fb:db:b2:70:6a:96:f6:b0:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3A:CB:D4:DD:42:53:4D:C7:CD:DB:8D:97:EB:5F:8F:B2:19:1E:91
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a8:47:1a:2c:6c:0e:0c:87:ec:04:c5:a2:92:84:a2:db:ca:
         54:69:fb:1b:43:df:b7:35:24:67:c2:f9:de:34:fc:4e:57:6a:
         c4:77:7e:ce:75:83:c1:e8:f9:34:9a:ee:a2:5f:5d:4a:0f:5e:
         c9:ed:0e:b3:82:1c:77:8a:07:64:de:cf:33:94:56:db:91:0d:
         7a:18:7c:ee:08:c7:12:25:86:e7:c0:16:ea:b8:1e:47:71:ea:
         1e:00:79:d3:5d:67:f1:7a:90:b3:8d:de:94:f0:48:18:b2:3b:
         6f:5a:02:dd:02:fe:cd:1c:42:27:62:42:22:38:9a:71:f4:ab:
         13:d3:53:4a:b8:ec:7b:e0:13:45:5d:ff:fc:c1:b3:43:73:a3:
         63:bb:4a:ad:fd:d4:93:f1:2b:c2:af:58:4d:33:1e:05:f4:aa:
         61:ba:fe:c0:c5:89:ce:b4:35:bc:43:9c:89:05:f5:7f:02:41:
         fc:4b:d1:29:c7:a4:7b:5d:e0:c3:a8:a6:fd:21:05:e4:5c:60:
         3e:6e:91:1d:be:8c:08:d2:50:08:92:59:17:a7:e5:0b:78:50:
         fe:d3:c8:81:67:80:1a:0f:9c:9f:dc:aa:2e:71:e4:05:f6:60:
         ba:07:ce:3a:1e:cc:94:04:0d:05:bb:04:cd:1d:54:fc:4f:1e:
         c5:d4:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:02 2026 by rpki-client