This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
File:                     6--V-MTFVIJt6POK1rup-3SAKCQ.mft (raw, json)
Hash identifier:          8pJOgjs8gwWMPyK00RjsYkG2HhnBut0/VDlxvQJcMcI=
Subject key identifier:   28:C7:64:1F:87:E0:35:C8:9D:51:0A:C4:3F:8C:BE:C1:8B:B5:F4:0A
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Certificate issuer:       /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial:       019BF49990FD5B1B68B8D21233D17EEC3921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 10:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:03 +0000
Files and hashes:         1: 6--V-MTFVIJt6POK1rup-3SAKCQ.crl (hash: OnLvjHMwUP3GXgXVBYENZbxgzlX7g+yZa6ppgYN5lBk=)
                          2: GFPcs46v7GN03iwKVdrYMCWW6tM.roa (hash: 4hFJz20kSiTor8Q8tCOwfNWd4Q4Xcxej1cuUt/w4/cI=)
                          3: uT4y_V8winuaaXijcNOme3PTmDU.roa (hash: 7SHOwPXr5hyjGghaBLoLGSxSBuNfqpBCsKfMH3TroC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:90:fd:5b:1b:68:b8:d2:12:33:d1:7e:ec:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
        Validity
            Not Before: Jan 25 10:01:03 2026 GMT
            Not After : Jan 26 10:01:03 2026 GMT
        Subject: CN=28c7641f87e035c89d510ac43f8cbec18bb5f40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:e6:d1:4d:f4:dd:04:a4:97:c9:4b:e9:5d:
                    2e:29:48:44:5b:f6:4c:c1:d3:10:9f:f2:10:e9:4d:
                    20:b9:b8:3e:0d:87:87:86:e9:0d:a3:35:c8:e3:ad:
                    9c:84:5e:f5:9d:a6:8a:14:1d:0d:fd:e1:87:b5:ef:
                    0e:6f:39:45:21:43:d3:6e:6c:c6:3f:56:f9:8f:0a:
                    1b:1d:8c:f9:f6:90:f6:aa:80:29:bc:2b:a3:7e:5a:
                    74:a7:b7:84:a9:8d:22:34:7a:7f:91:e8:97:ab:d5:
                    ba:d5:57:21:58:6e:a4:d1:f6:31:3b:80:30:2a:9a:
                    f9:59:53:18:14:7d:8e:41:44:a1:07:48:71:be:62:
                    d9:e3:6c:22:36:23:c2:72:13:10:fc:69:52:23:90:
                    bf:47:a1:b9:51:78:62:db:5d:de:a1:49:6c:9b:86:
                    33:30:23:3d:61:67:ad:12:36:b3:fa:b0:e3:3d:83:
                    9e:20:b2:a2:21:27:af:ba:c3:49:37:da:8f:41:4c:
                    21:93:bd:00:b5:86:f4:21:71:52:df:25:28:b3:62:
                    3c:a0:2e:cd:89:ee:83:ce:42:3f:b5:05:d8:b0:5d:
                    24:fe:d0:2e:0a:3b:39:fa:27:ac:20:f6:4b:3b:8c:
                    08:e8:63:df:60:47:aa:ef:23:ae:e0:a3:2c:b4:b9:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:64:1F:87:E0:35:C8:9D:51:0A:C4:3F:8C:BE:C1:8B:B5:F4:0A
            X509v3 Authority Key Identifier:
                keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:6c:59:da:f2:30:42:24:8d:5b:0f:11:86:8b:17:25:11:
         c5:95:9a:ff:b4:27:4a:3a:e6:dd:56:17:bd:18:5e:e8:83:d6:
         98:13:67:08:e5:70:50:71:53:16:fe:b0:53:5b:5d:70:97:6d:
         97:f1:65:f9:1c:b7:5f:3b:46:a1:f2:fe:f1:15:13:4f:3e:92:
         e5:4a:d4:3a:e8:29:69:50:76:0f:74:ee:83:1c:35:86:a6:df:
         a3:b3:f1:56:8f:fb:2a:81:f6:3e:7f:bf:f5:dd:2f:c8:c0:89:
         de:b3:d6:2a:29:98:e8:e8:18:53:54:2b:2c:bb:86:d3:52:0f:
         fa:9b:64:cc:35:9b:d6:23:3c:f6:9a:4f:10:2c:ed:aa:0f:e8:
         8c:5a:a6:66:df:d2:e5:b9:33:aa:70:1c:79:b8:16:e3:64:e0:
         6c:1b:7f:94:25:93:3a:65:80:ee:71:3c:55:0f:e8:40:06:b7:
         74:df:04:58:56:54:6a:23:ca:9a:4f:cd:ad:47:42:f2:e9:97:
         36:15:82:e1:b8:36:14:41:79:ee:ec:cd:5b:c0:48:60:57:60:
         0a:1d:16:73:15:e8:15:92:2b:70:8f:7b:c2:43:a3:e6:c9:f5:
         d5:55:e7:5e:b1:47:0f:f6:b9:07:6f:78:54:3f:36:25:72:d7:
         11:bc:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:54 2026 by rpki-client