This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          431fZMQoYFCSsOYRHEiBABFYejnqKUiIs7NLNXljfKA=
Subject key identifier:   81:DD:04:BB:D4:63:70:FE:D6:1D:74:F3:DB:FA:46:5F:77:8B:BE:77
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       019BA4903E8B275B710B129612F0DE5196BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          08FB
Signing time:             Fri 09 Jan 2026 21:01:15 +0000
Manifest this update:     Fri 09 Jan 2026 21:01:15 +0000
Manifest next update:     Sat 10 Jan 2026 21:01:15 +0000
Files and hashes:         1: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (hash: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY=)
                          2: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (hash: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A=)
                          3: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (hash: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk=)
                          4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: n4UGX5O9XBprTkRiG+Vl8T6mcg1BPg1XL7StKZgn3Gw=)
                          5: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
                          6: kIDgGMW1uXNaj9KusJXcTTlIh7c.roa (hash: PwAEtgyKC+fUUIGh92oSv3jyXm09MobuWsRtDnHhYsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a4:90:3e:8b:27:5b:71:0b:12:96:12:f0:de:51:96:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Jan  9 21:01:15 2026 GMT
            Not After : Jan 10 21:01:15 2026 GMT
        Subject: CN=81dd04bbd46370fed61d74f3dbfa465f778bbe77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:4f:0d:ba:9a:31:65:98:b1:32:d2:59:d5:
                    77:b9:3e:f1:3a:19:00:f1:60:c5:dd:90:23:20:9d:
                    93:86:b8:ab:1d:35:82:ba:05:6a:fe:6d:dc:5b:fb:
                    f1:6b:b2:03:a3:bd:20:e7:36:fe:b9:7f:d6:42:e5:
                    c2:a3:33:36:1c:a9:5d:e9:6d:4c:64:d1:b2:e6:b2:
                    14:c1:50:2c:4b:04:56:ee:7c:2a:1d:3b:0a:69:1f:
                    3f:1c:6b:5b:a4:d0:6e:bf:73:da:70:53:56:4c:5f:
                    8e:4e:74:bc:37:36:a7:f0:7c:03:27:68:fd:09:4f:
                    f1:92:f3:ff:39:07:61:6f:96:ec:f5:e0:a1:3d:53:
                    7b:ee:73:6c:ec:be:58:03:67:88:af:f3:7b:ab:e9:
                    b3:45:9d:28:75:56:17:a1:61:83:78:ec:97:c1:bd:
                    4a:9d:15:ca:84:6e:93:21:3b:f5:41:91:6f:19:75:
                    c9:5b:81:6a:e6:69:02:42:70:0f:10:2d:dc:ae:1f:
                    8e:63:36:c0:59:f4:30:ba:49:2c:ba:a2:a2:62:42:
                    b7:cf:6f:23:ff:5a:17:36:c1:ba:9b:0c:24:a2:3f:
                    96:f8:79:70:e0:b6:3e:54:81:fe:71:58:b2:69:43:
                    4f:bd:5d:da:ee:54:e4:54:c0:16:8f:fd:14:a6:07:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DD:04:BB:D4:63:70:FE:D6:1D:74:F3:DB:FA:46:5F:77:8B:BE:77
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:53:63:23:96:05:31:02:4b:ff:df:45:e6:a9:bb:00:ec:
         0d:a2:11:ef:1e:98:5f:84:8c:51:61:01:05:e2:e4:32:cb:68:
         48:ef:6f:0d:a0:b0:01:19:13:14:74:cd:24:fb:1e:4a:71:99:
         e1:c8:c0:08:32:fb:0e:12:60:68:91:4b:2a:34:90:7d:55:60:
         cd:28:04:a2:33:73:08:4a:e5:31:8f:af:ba:60:31:9b:50:06:
         74:0f:e2:fb:6e:67:c1:71:49:5f:e8:63:73:f5:ba:10:5b:fd:
         45:ac:4e:0b:0a:14:f7:2c:93:95:67:6e:ef:90:70:7e:3e:d9:
         a6:a0:7c:77:75:28:f3:d9:c0:d2:2e:41:b3:91:c7:d2:d1:4f:
         56:2d:e9:9d:7e:d9:db:ec:e8:8b:0c:7e:10:18:9a:cb:7a:9c:
         e1:2a:30:5a:56:d8:40:85:26:b9:34:be:56:c8:94:44:a3:60:
         50:bb:be:a4:23:17:b1:c9:8a:9c:99:51:7b:24:26:7e:cb:51:
         d5:f4:98:7d:f5:65:6d:f9:92:35:5b:79:03:29:30:ba:e7:df:
         c5:64:d3:6f:25:b5:30:7d:af:dc:16:fe:e2:f4:8a:1f:45:c5:
         6a:5c:ba:cf:06:a4:b5:74:09:d6:20:64:3a:31:0d:f5:31:82:
         87:0e:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 07:03:13 2026 by rpki-client