This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          iE0wMxkgEuzC1zmugL058p7BevrRDgFrsfGCPL78rkM=
Subject key identifier:   62:3F:17:E8:A7:EF:21:FE:08:17:BA:59:E2:3E:44:EB:B7:A9:EA:95
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019BF6F5542D6F09A5AC23F56DA124F53EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          147C
Signing time:             Sun 25 Jan 2026 21:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:31 +0000
Files and hashes:         1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: WwPSGuleLJGp/S08FAXAIDXbUAs9775l9VAr/uBHiu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:54:2d:6f:09:a5:ac:23:f5:6d:a1:24:f5:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Jan 25 21:00:31 2026 GMT
            Not After : Jan 26 21:00:31 2026 GMT
        Subject: CN=623f17e8a7ef21fe0817ba59e23e44ebb7a9ea95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:84:20:42:34:05:8c:fb:95:0f:4a:32:75:
                    89:fd:49:f9:d1:40:80:2f:43:c2:4b:c7:8b:9f:30:
                    ea:0f:f4:8d:9b:bd:66:d7:88:18:f2:05:db:db:b9:
                    33:2e:91:03:a7:cd:86:b9:e8:f1:3a:7b:f2:47:3e:
                    ed:39:40:5a:c2:ee:b3:85:ab:75:25:f8:95:19:36:
                    ef:a1:40:e2:6b:2a:a3:8c:5f:9d:52:78:53:66:7a:
                    54:29:9d:b7:2d:4f:b9:e6:c5:22:c9:de:78:88:db:
                    c4:45:74:ed:b3:0e:3d:ae:57:ea:ef:87:25:22:17:
                    ae:0c:af:93:04:95:8d:a7:a7:90:7c:f5:42:40:6a:
                    2f:51:8f:e2:0c:38:b2:6e:66:4e:91:69:94:b4:18:
                    a4:0e:e8:c7:00:81:53:f8:c7:79:0e:04:7a:ec:bb:
                    df:d7:32:9a:17:1a:c2:b0:86:5e:e7:a2:0a:53:f9:
                    20:e8:01:76:f5:26:5f:c3:5a:ed:9e:d6:41:ca:ad:
                    34:c9:8c:e4:0c:32:b2:cd:1e:ad:5b:d0:13:bb:ce:
                    aa:9f:01:a8:c5:cb:69:d1:9d:c1:48:6a:cc:17:68:
                    7a:58:17:6a:8d:92:09:90:c0:a7:bd:8f:63:9d:88:
                    9a:3f:ce:32:65:31:46:32:07:ae:df:52:18:72:ce:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3F:17:E8:A7:EF:21:FE:08:17:BA:59:E2:3E:44:EB:B7:A9:EA:95
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:7b:bf:17:a7:06:cf:f3:61:14:71:85:90:91:82:d7:58:
         89:f3:2f:df:7f:0d:03:69:19:4e:a4:86:db:cb:c3:e4:e9:ab:
         be:d9:7a:54:2d:6e:d8:cb:1f:78:a3:0d:c5:30:82:ae:b9:61:
         0d:fb:85:cd:ab:f2:26:32:56:d6:0d:0e:7f:d0:af:5d:79:b0:
         c6:d1:fd:03:c5:3c:28:bd:92:d3:ab:66:cb:fc:33:86:c9:3e:
         a4:c9:68:86:70:ec:50:8b:e9:ce:75:e5:64:34:e8:dc:52:81:
         16:11:a1:1c:f2:78:c5:2a:ad:ba:de:bd:15:e5:54:c8:68:09:
         8b:ff:92:da:6e:76:a6:b4:7b:63:b1:57:b7:03:1d:92:48:93:
         e1:b9:ec:1d:64:1a:1f:e9:b1:d0:03:6a:0c:99:09:4e:6d:de:
         8f:fe:53:61:30:86:c6:1f:ab:5a:7d:8e:25:16:a2:be:8e:c0:
         dd:b7:fa:0e:53:d2:ae:e2:6b:b0:72:c4:6b:e3:55:a5:80:15:
         92:d0:3c:01:23:6d:ed:4f:4f:6d:e8:48:d8:30:2d:bc:c2:af:
         cb:cb:d4:85:66:5b:22:56:f1:9b:9d:f8:b5:cd:5b:d7:c1:e4:
         dd:1e:d5:31:8e:c5:d8:9f:2d:e7:58:d2:cb:7b:24:d2:a1:52:
         77:dd:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:18 2026 by rpki-client