This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          eoly77uribHh77W9nUOV1WfRJR5FMp0kzSdJkWMtwyw=
Subject key identifier:   D2:50:D5:17:75:08:55:BC:77:8C:20:04:1C:35:6A:FB:ED:89:0E:AA
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019BF9C0547AC57314559B7CAECC53B1A787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          17F8
Signing time:             Mon 26 Jan 2026 10:01:29 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:29 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:29 +0000
Files and hashes:         1: 1faD4ZFBclwFzb0_TlcJqclRz3s.asa (hash: y6k6blyX9AW8efyFUzs0HB1pisBHAVkRvkrWnYMgslk=)
                          2: 5xBml7U-4lugY_mFciACfFr11lA.roa (hash: hT0w3sNsbCx55sgMzKKPb+SHty16gYRniqe1E9kHT9k=)
                          3: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: 78L3ZH5EwhKNgNDEFAJH3iLfxr7iyL7r5N1uZVnA2p8=)
                          4: Eh8nnLZAiLZ58YhkCNvvP_JGhzU.roa (hash: sRohF3I3BrcI8tiCBb8cHcbGxNylJjfyMotjHjcTNBk=)
                          5: PpVR1H9Dr3vZRcc8033VYEw1iR8.roa (hash: HtJF9iQGIeR/alkm252L+bhPoI3G21HA8V6y+HAStow=)
                          6: ZgoGE8XJ6EQtlkajljqKjgC4h1s.roa (hash: jzjfkcV63XJ455+qf9Q8QIDQMhzX6UJFMcyNd5ZFd3U=)
                          7: j7OkdY2sGSM-sSkXikcRJgYHNOQ.roa (hash: nPzQITN1WUJedpqGtx/YyCLrwyo9hulFJnuk/YLkhpY=)
                          8: nO7tTpvdnuv_RiW2D0qie4z-wLk.roa (hash: vFl54J4nFHINYVebftYlSvYVnatB6wruXNKfs9nR74M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:54:7a:c5:73:14:55:9b:7c:ae:cc:53:b1:a7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Jan 26 10:01:29 2026 GMT
            Not After : Jan 27 10:01:29 2026 GMT
        Subject: CN=d250d517750855bc778c20041c356afbed890eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:64:76:bc:35:5b:0f:11:e2:8e:5f:a5:62:
                    cd:04:d7:4e:8b:8a:16:94:1c:81:d0:14:b2:24:6f:
                    44:93:31:fd:d0:1a:ee:71:40:cb:8f:da:f9:e1:9b:
                    92:67:14:1f:6f:fa:52:bb:72:a8:06:30:28:c5:fe:
                    6a:b4:c1:64:73:a2:30:f6:42:42:f0:3f:ee:ff:a3:
                    3c:bd:45:4b:56:c4:c1:4e:0a:cc:f2:04:52:65:96:
                    17:ac:69:cd:bf:1c:63:09:a0:a7:7c:d1:de:63:a2:
                    02:19:06:f9:ec:27:4e:b4:89:92:29:da:6b:09:8e:
                    3a:6c:4b:82:4b:2f:07:95:f5:b0:4a:a6:7e:01:a3:
                    35:4c:35:df:dc:ce:37:b8:c5:15:fc:15:3f:44:f5:
                    a8:05:71:82:1c:99:b5:2c:4e:6c:0c:3f:06:0a:3d:
                    66:80:8c:01:29:08:d6:45:da:56:78:16:cf:d3:e3:
                    cf:a5:b2:7f:cc:fe:17:db:0a:9f:34:c9:5e:55:f7:
                    26:b5:27:63:33:f3:54:73:f9:84:77:cb:4a:b7:6a:
                    47:68:95:20:9c:2b:dc:97:51:c5:83:24:22:d0:66:
                    75:dd:03:19:7d:38:e5:03:f3:10:d5:58:6b:68:45:
                    77:27:c8:cd:71:72:8e:3e:95:eb:3a:41:2a:b7:52:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:50:D5:17:75:08:55:BC:77:8C:20:04:1C:35:6A:FB:ED:89:0E:AA
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:98:ce:3c:da:95:38:df:9b:cd:c6:5a:18:36:1a:4a:19:11:
         f4:2f:bb:92:7c:40:58:01:9f:0b:3c:c7:d4:ef:28:6e:64:21:
         43:4b:7a:59:99:50:ef:80:67:ee:2f:70:ea:5e:ad:3d:de:bb:
         c0:c7:1c:ed:bc:ea:ca:df:63:fe:58:a2:5f:9b:bb:8e:11:c4:
         9e:e5:c1:22:e6:58:b4:ba:84:da:68:98:95:29:49:c4:03:67:
         7c:0b:e3:6d:d8:b7:db:33:9b:44:41:ce:43:cf:4e:62:5e:17:
         92:1c:96:d5:4f:22:2a:75:bc:d4:24:ce:12:88:49:68:74:fc:
         0d:df:cd:28:9b:9e:2b:ca:ef:eb:f2:92:2d:2d:fe:3b:6b:f3:
         96:4e:93:58:a8:1f:ae:42:d9:07:43:26:1e:20:77:a1:00:4b:
         b2:b0:9f:69:5f:b2:c3:4e:37:db:37:0b:fe:7f:68:18:4e:3b:
         c5:14:a7:c2:a3:ef:2e:59:8f:7f:87:8b:2b:46:8c:e0:cb:5b:
         81:6f:22:4f:24:4a:ab:e0:11:2f:f0:53:00:33:ad:ad:2c:e4:
         26:16:19:e3:c3:f2:d2:e6:5e:33:e8:4a:00:d8:8e:02:67:b1:
         74:9b:90:84:1c:f2:5e:ef:25:47:cd:22:48:6e:12:68:b4:6d:
         d8:20:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:01:38 2026 by rpki-client