This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          nZ8G4TNh0RL3UK0RGvScWkEv9QY/MxZgeK/NEvYCcdQ=
Subject key identifier:   C4:3E:82:E6:A1:0E:CA:0B:A4:1F:00:80:C5:61:97:B4:DA:9C:27:52
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       019BF83FC09D8007E33E0CA911E7DDE6E4C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          02EF
Signing time:             Mon 26 Jan 2026 03:01:26 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:26 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:26 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: x8BmCc4nhZD6VKAHWei/iObqm8zEWYeb1ga2+Rca6m0=)
                          2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:c0:9d:80:07:e3:3e:0c:a9:11:e7:dd:e6:e4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Jan 26 03:01:26 2026 GMT
            Not After : Jan 27 03:01:26 2026 GMT
        Subject: CN=c43e82e6a10eca0ba41f0080c56197b4da9c2752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6f:9b:3b:aa:95:69:53:e3:fb:6a:35:8a:ef:
                    ff:8c:bd:6f:8e:e9:8d:12:fd:e0:b4:c4:04:f1:ae:
                    d0:03:94:3c:4a:28:50:ab:bc:f7:1b:09:7a:00:5d:
                    ad:0d:84:1e:af:8f:51:d7:f9:36:82:75:3a:db:28:
                    16:74:ab:04:5a:9d:9f:00:5c:e0:d0:3b:2c:79:a0:
                    0b:6e:38:96:1f:dc:26:8c:12:69:20:1d:85:da:74:
                    86:33:c3:44:ff:35:1b:28:79:c8:53:4b:99:50:05:
                    08:41:eb:e3:8d:f3:75:c0:b5:55:f6:79:3a:3c:90:
                    c1:dd:83:ac:cf:90:df:a7:05:2a:88:b2:6f:80:ac:
                    be:71:b3:a3:6b:f3:92:52:20:0d:a1:79:e7:2e:d9:
                    ec:a8:c3:7e:2f:10:52:ad:98:d1:60:d4:8d:20:24:
                    ce:f3:36:63:65:c7:4b:b7:8c:bb:cf:d8:67:f0:df:
                    49:4e:86:58:fe:94:2a:b1:39:84:2a:5b:5e:2f:8e:
                    21:0a:e4:26:40:2a:f6:7b:4e:8b:fb:60:a2:6b:87:
                    1a:99:67:8c:a7:8b:16:35:84:d9:15:d2:95:fd:77:
                    b8:12:fb:73:44:9a:4a:df:22:28:ed:65:2d:0e:df:
                    72:e9:45:6a:16:59:66:c5:f1:0a:5e:07:04:ad:66:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3E:82:E6:A1:0E:CA:0B:A4:1F:00:80:C5:61:97:B4:DA:9C:27:52
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:2c:d1:31:99:e1:9f:73:10:99:d7:9a:e2:32:8f:d0:ff:
         c5:89:5b:57:ec:b3:ac:8a:fd:98:ed:20:f8:b1:83:c4:50:9a:
         48:0c:02:a8:49:4f:39:bc:0a:eb:2f:7e:5a:3d:62:36:b6:e9:
         b1:1c:a5:b9:fc:8c:bf:c0:09:84:50:9f:7a:d4:92:40:e1:0e:
         c7:ce:5b:f2:0e:5d:6b:8a:73:31:1f:e3:06:18:dc:7d:d3:2b:
         e8:68:b7:6c:4a:d5:e9:d6:74:b6:21:65:cf:83:0c:0e:ed:31:
         79:14:bc:f5:a9:cf:8a:7e:98:00:f4:42:26:96:2a:d7:b7:2c:
         67:e3:c3:3f:cc:ab:38:00:3c:c9:96:30:51:07:21:6b:a6:2c:
         2c:e3:fa:b3:42:45:94:77:8b:25:86:7a:d5:8c:a8:71:f4:33:
         29:3e:d9:f8:e4:0d:01:69:48:61:e0:fd:8f:26:19:21:ff:01:
         e8:e8:ac:5c:f5:6c:8e:17:ac:9d:be:c1:99:3f:a0:ae:e9:06:
         3b:ed:f5:50:0d:55:90:a3:58:c4:be:aa:16:2d:62:b4:1a:e9:
         01:48:41:2e:b1:a4:4c:0f:5d:84:55:57:5c:fb:cb:67:3f:5b:
         e4:a3:e6:c7:7f:0c:07:d4:de:aa:7d:f9:26:67:1c:c0:b3:6a:
         1a:71:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:50 2026 by rpki-client