This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File:                     v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier:          z36iPVkiuaS1oPResr5UEHjMI6439Bk/t+3bY8/5oIA=
Subject key identifier:   01:C7:B0:4B:FD:4A:0C:0E:F2:64:BD:35:63:ED:BB:A2:6E:65:82:BC
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer:       /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial:       019BF46302289FAAC2003E447B32C696D446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number:          17E6
Signing time:             Sun 25 Jan 2026 09:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:27 +0000
Files and hashes:         1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
                          2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
                          3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
                          4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
                          5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: xVGmkAnpAVdl9DGBQhpM7VpFa0C8eEQl6vxYj8/Rv7Y=)
                          6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:02:28:9f:aa:c2:00:3e:44:7b:32:c6:96:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
        Validity
            Not Before: Jan 25 09:01:27 2026 GMT
            Not After : Jan 26 09:01:27 2026 GMT
        Subject: CN=01c7b04bfd4a0c0ef264bd3563edbba26e6582bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:b0:37:c2:a5:74:5a:2d:8a:fc:6f:c2:57:
                    44:09:ff:9d:95:86:24:5e:12:fa:cd:f9:42:98:c8:
                    c5:b9:be:c4:e1:cf:d2:08:66:f3:39:50:46:76:da:
                    89:48:42:b6:51:54:f9:36:ff:50:cc:d5:4c:19:4a:
                    92:24:9f:51:64:1d:db:fa:f6:6e:04:09:df:23:cf:
                    6a:53:1f:9b:67:4a:f6:d0:a7:37:35:dd:52:3f:f0:
                    a7:93:df:dd:af:55:1d:5b:c7:26:4b:91:c4:8f:ee:
                    9a:37:ff:16:0f:e1:36:3c:96:c9:50:0b:4c:57:e7:
                    51:84:c7:2b:53:23:42:20:3f:b6:08:8c:ed:54:15:
                    37:78:85:c8:13:05:5a:80:98:f7:9c:2f:57:69:28:
                    31:f5:94:b6:29:c2:f5:14:21:fb:76:25:08:e5:71:
                    01:da:6c:c7:9f:dc:94:43:17:78:3c:99:5e:27:b8:
                    a9:2f:bc:58:be:59:b7:02:16:5d:ad:15:c1:84:5d:
                    04:44:4b:8b:0e:6c:f1:1b:51:1f:ae:73:bf:a7:6c:
                    e4:23:cc:9a:b1:00:c8:fc:52:d9:b9:c3:42:74:e5:
                    5e:4b:6b:8f:3d:4c:7b:04:cc:f2:12:d3:29:27:11:
                    0a:e0:37:99:54:1b:ea:86:c7:16:74:3d:95:1f:ed:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:B0:4B:FD:4A:0C:0E:F2:64:BD:35:63:ED:BB:A2:6E:65:82:BC
            X509v3 Authority Key Identifier:
                keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:91:7a:31:55:67:44:07:65:84:8e:6e:96:32:0f:19:06:a0:
         bd:9b:67:cc:45:0f:51:8b:5f:51:60:2f:be:b3:1c:9f:88:70:
         cf:4b:d5:95:f9:b3:8a:98:40:0d:96:59:68:71:84:78:87:33:
         9d:a6:e5:a4:66:5a:29:bc:ce:f5:87:14:5a:66:48:e2:4f:93:
         92:50:25:6f:86:66:f5:fe:cd:6e:f5:eb:42:0e:50:5c:c9:15:
         3c:92:1f:5c:bc:cf:d3:92:18:33:ce:80:e8:04:8f:19:16:69:
         57:3f:f5:68:1c:5a:39:14:3d:db:51:b0:77:ec:d7:c8:ca:f7:
         fc:47:52:2e:46:1a:47:ea:0d:bd:8d:d8:05:33:84:60:42:bc:
         68:dc:8a:b8:42:db:3d:e1:1d:01:f5:09:e4:ed:02:5f:14:13:
         81:ee:ec:6b:a9:69:88:1a:be:09:37:c0:fc:2d:fd:fe:4f:ce:
         e8:9c:5b:37:93:d4:f5:88:8c:a3:69:8d:29:80:cd:d0:73:d8:
         39:89:22:6c:b1:22:5f:e3:35:56:d8:5c:76:76:a9:fc:1b:af:
         8c:65:e7:27:33:a4:46:7d:f6:e6:ce:76:e3:5f:51:d8:5b:40:
         ca:f0:88:2d:67:f2:b1:25:49:e8:22:39:cd:ec:d2:ed:2d:d4:
         d2:d3:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:30 2026 by rpki-client