This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File:                     agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier:          QNbIEks1z9M0geV9P64HpBikZCj4FQIAj3P7D8zfN1I=
Subject key identifier:   19:AA:10:89:68:F5:21:87:6D:A2:48:D8:8A:33:E5:6D:31:54:5E:2B
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer:       /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial:       019BF3500E4D4BA40F2D578B8EF506B82E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number:          0F9E
Signing time:             Sun 25 Jan 2026 04:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:08 +0000
Files and hashes:         1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
                          2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: NYBMA8a+m4aDEuA854oGsaM8kZrQzceVYwWVAdunskE=)
                          3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:0e:4d:4b:a4:0f:2d:57:8b:8e:f5:06:b8:2e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
        Validity
            Not Before: Jan 25 04:01:08 2026 GMT
            Not After : Jan 26 04:01:08 2026 GMT
        Subject: CN=19aa108968f521876da248d88a33e56d31545e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:1e:e5:94:c9:6f:cb:6e:74:12:e8:70:ae:
                    54:92:17:cb:0c:be:3f:d7:99:87:18:fa:4f:1f:85:
                    1b:dd:e7:a2:66:62:f0:90:74:b4:9f:74:d6:31:13:
                    98:13:11:0f:50:12:10:7c:48:cf:93:04:1a:0b:34:
                    3b:31:9b:a9:f3:41:27:e4:63:b3:6e:b2:1a:34:71:
                    b0:d3:89:cc:28:7a:a7:2a:f8:4b:06:de:b7:71:6b:
                    03:40:f2:79:2b:af:b3:59:6b:85:c0:6e:f3:77:a1:
                    ee:27:42:76:38:48:cc:c8:75:60:2c:e3:b6:52:3e:
                    9d:f6:b8:d1:e8:0d:95:01:e1:3a:f2:8c:10:64:bf:
                    a6:0f:0f:df:ea:c3:d0:aa:f8:bf:ac:a0:28:06:20:
                    9c:b4:16:9d:85:ee:26:2c:43:da:25:86:9f:f8:7c:
                    b1:8a:5e:20:14:e5:d5:ba:19:64:09:c2:4d:27:2d:
                    94:a1:e8:0d:9c:d9:c6:ad:6f:37:07:41:4d:a4:62:
                    1d:f0:70:85:6d:83:19:77:df:0d:99:e9:dd:cc:c6:
                    a6:db:30:f0:0f:1f:0e:20:6b:cb:05:17:1d:48:4a:
                    68:b7:6c:f8:1c:01:8a:0b:d5:29:9d:0e:92:eb:88:
                    ab:2d:59:9a:48:84:40:72:48:88:91:f2:d4:46:c1:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AA:10:89:68:F5:21:87:6D:A2:48:D8:8A:33:E5:6D:31:54:5E:2B
            X509v3 Authority Key Identifier:
                keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:4a:c4:0c:ad:61:74:1d:f5:d7:ce:78:17:71:a3:12:a8:42:
         e4:60:3e:9c:e2:e7:4d:21:ea:d7:94:43:ea:7c:e1:17:6e:3e:
         fb:c6:8c:75:b3:e4:d1:b8:c3:e0:a1:17:a7:37:1b:74:09:b1:
         3f:c2:4c:c9:5b:16:29:93:43:66:4c:82:1f:80:c6:f5:ea:28:
         b1:46:8b:37:c5:52:3a:cd:1c:86:79:98:71:8c:28:83:49:be:
         35:90:45:d9:3b:15:d4:17:3e:4b:a5:b2:a6:a4:1f:49:51:ce:
         09:a1:3d:55:53:eb:66:5b:e0:5b:83:1b:3e:da:e5:d3:43:94:
         d6:92:96:7f:6e:c4:0f:4a:37:15:57:14:e2:5f:5c:fd:24:9e:
         b1:9d:62:9c:11:ba:bd:ae:0a:50:89:91:40:ac:e7:3e:ec:58:
         22:5b:0a:87:9b:54:2d:52:b9:5b:23:f3:6d:d0:92:4e:e1:8a:
         a5:95:2c:a2:06:8a:bd:78:91:94:db:6b:70:4f:ec:7d:a5:42:
         74:36:a6:a5:12:47:d4:4b:25:12:b3:cb:e8:02:69:5b:22:61:
         54:8e:e2:d5:b8:4d:6c:e8:0f:07:b2:ad:f6:81:01:52:28:89:
         7d:5b:47:a8:a2:66:19:09:9d:26:bf:5f:cb:9c:06:6e:f0:34:
         41:33:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:40:54 2026 by rpki-client