This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File:                     b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier:          n6gBcJOkKFZRsHqlmm3hv7yncXCanAh2KEZ1EV4cfKI=
Subject key identifier:   76:F7:6E:B9:EE:55:0A:41:AC:EE:89:B0:62:BC:5C:1B:5A:FE:5B:44
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer:       /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial:       019BF4D10A7BBBF29C2F1C49483A9E64FCB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 11:01:38 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:38 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:38 +0000
Files and hashes:         1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: uiJ+hsU+NNr4v2WSUnzwfOTKnoJ69bDhutPnGn1Ruy8=)
                          2: nUklbYnm5WDJLFc3elZ-RvwQ_tU.roa (hash: 7qt1S1ac2mzquZqXIpN+D95+VEOfMXy8eLXHEbsWSgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d1:0a:7b:bb:f2:9c:2f:1c:49:48:3a:9e:64:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
        Validity
            Not Before: Jan 25 11:01:38 2026 GMT
            Not After : Jan 26 11:01:38 2026 GMT
        Subject: CN=76f76eb9ee550a41acee89b062bc5c1b5afe5b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:ed:4a:9d:8f:b4:12:46:23:88:66:a5:88:
                    c0:cc:03:3b:55:22:51:e3:6b:25:62:42:ab:27:52:
                    12:76:07:91:a8:14:30:9a:6b:d9:61:65:18:cc:81:
                    76:c8:15:b1:37:87:85:39:7d:82:9a:39:69:93:2d:
                    4b:1c:75:9d:e3:db:2e:c3:91:7f:45:bf:81:40:a7:
                    0e:9a:1f:1a:34:0c:6e:12:17:75:10:ed:53:cd:ba:
                    bd:23:7b:6d:e5:ba:3c:03:02:b3:70:37:4d:b1:a2:
                    4f:42:28:4f:a0:45:1b:d1:cf:83:64:63:78:82:66:
                    1b:15:f9:e1:5f:87:65:49:a6:b0:1a:1e:3f:f3:fd:
                    de:15:71:3b:23:dc:6d:02:59:0c:aa:4d:53:c2:9a:
                    82:6e:35:32:83:96:a5:42:08:0a:b1:2d:5e:ca:70:
                    98:15:ba:b6:80:f7:23:da:9e:27:10:18:d8:6c:10:
                    88:78:0a:9a:06:c5:cf:ec:7f:dc:cd:b7:2f:d3:32:
                    ca:36:75:24:d1:b2:04:62:5f:25:69:e4:75:e2:77:
                    4f:b9:96:ad:6b:80:e0:26:4b:47:5f:04:31:c3:f8:
                    e3:da:9f:58:63:19:5d:e9:18:a8:fe:68:8b:ef:60:
                    31:e8:d2:54:eb:36:f6:b4:25:9b:3a:c1:86:a2:81:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F7:6E:B9:EE:55:0A:41:AC:EE:89:B0:62:BC:5C:1B:5A:FE:5B:44
            X509v3 Authority Key Identifier:
                keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:03:41:ee:ca:00:db:1e:16:b1:4f:e0:9c:a5:f8:a8:b5:
         84:a8:da:3f:83:73:8c:b6:03:90:fc:22:93:42:bb:6a:44:74:
         31:9a:86:15:9c:b3:46:a6:2c:8a:48:0c:fe:14:a7:a2:2f:fc:
         bd:67:6d:0e:6c:5e:a8:82:d0:a2:cc:c8:f6:5d:67:b3:69:9d:
         6f:94:e3:fc:fa:12:e9:c2:e8:0a:26:21:b5:a7:79:2e:17:51:
         b5:a6:38:50:bb:0f:66:c6:17:80:0c:81:5f:e5:15:a3:0f:f1:
         5d:fb:21:8c:b8:a9:02:49:b6:3e:41:02:54:ab:44:13:1c:9e:
         5c:74:23:b2:bf:09:b2:e9:ed:46:1b:87:7b:c7:ff:5f:76:df:
         05:05:e4:20:f5:76:2a:82:93:5d:45:7e:b8:f5:89:7a:a2:55:
         b9:15:e8:ed:4f:14:0f:82:33:cb:00:9c:ee:f6:b4:25:a9:69:
         93:61:6a:2b:5f:9a:5b:2c:93:74:9a:b1:85:9a:f0:a1:16:e7:
         2a:f1:74:7c:38:ca:78:0e:bf:6a:f0:bd:19:5b:fd:1c:81:00:
         32:6c:1b:19:c3:de:f6:b6:c5:7f:0b:3c:58:b1:f6:96:98:26:
         56:58:f6:b1:de:87:1b:2d:2f:4a:b4:56:1f:7d:3a:61:19:82:
         10:da:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:51 2026 by rpki-client