This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          y/Ydy1lfqzr+7owQzZOuRtqlorP6haOJ/ks29OpdO20=
Subject key identifier:   33:31:19:87:1E:3C:13:E3:D2:79:33:94:AD:B5:60:64:AA:FE:7F:39
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019BCA5438F416CA1C0478511ABAD886CB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          15C6
Signing time:             Sat 17 Jan 2026 05:01:15 +0000
Manifest this update:     Sat 17 Jan 2026 05:01:15 +0000
Manifest next update:     Sun 18 Jan 2026 05:01:15 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: kaa2rpiDCtf/OpWZ6uR3tlrvP2bRWOO6FToCzPvRWs8=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 02:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ca:54:38:f4:16:ca:1c:04:78:51:1a:ba:d8:86:cb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 17 05:01:15 2026 GMT
            Not After : Jan 18 05:01:15 2026 GMT
        Subject: CN=333119871e3c13e3d2793394adb56064aafe7f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:69:2a:70:d0:e7:52:a1:a9:43:c0:91:cd:
                    ed:98:d1:b2:c8:1a:5f:80:9b:cd:0e:f8:56:ef:33:
                    b3:e8:36:9f:46:20:64:d1:07:c9:1d:20:26:f2:8e:
                    a4:f6:11:fb:72:d4:6a:93:cc:a1:93:f6:b5:e6:40:
                    c6:23:53:19:66:75:e5:2d:a6:0e:64:e7:2d:08:ce:
                    cf:66:b0:d9:72:8c:df:4d:67:dd:6a:0a:ac:51:81:
                    03:a6:8a:2b:95:f9:53:be:88:59:f4:c7:a7:47:51:
                    44:86:79:99:78:f1:a9:93:e3:24:70:a9:f3:38:7e:
                    7a:98:98:e5:19:45:84:e2:11:1e:75:e3:28:42:c7:
                    ba:41:ee:72:2c:69:73:09:14:6f:ae:d0:b5:9a:e9:
                    60:ea:ce:6e:98:b4:10:10:11:3f:69:52:9d:44:bc:
                    66:91:c3:31:42:86:66:3d:15:3d:7f:03:8b:a7:17:
                    b0:be:3a:43:10:8d:19:e3:61:54:c0:76:d9:03:21:
                    d1:6a:ac:d6:75:84:65:94:72:ab:65:43:ef:22:7a:
                    8b:af:8d:22:fc:3b:4f:ac:2e:df:cd:f1:8c:32:9b:
                    85:c4:ee:56:01:fd:b6:e4:c3:89:a0:9a:9b:c6:75:
                    0d:c2:27:b8:b7:7d:8e:10:cc:8f:78:a8:bb:5d:b6:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:19:87:1E:3C:13:E3:D2:79:33:94:AD:B5:60:64:AA:FE:7F:39
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:73:81:04:26:79:39:f6:80:03:a5:19:cf:cb:0c:b3:ab:
         9c:98:5c:1c:cc:1b:02:6a:38:2f:38:9d:41:60:67:23:59:c5:
         12:19:3e:49:88:f2:4b:5e:03:79:5e:7f:c5:1a:38:3b:1a:92:
         dd:6d:ff:b8:bb:95:87:98:c1:b7:bf:43:5e:6b:fb:4b:16:d6:
         42:6c:95:a9:dc:5d:3c:77:33:80:bc:27:b3:e2:42:24:b9:0d:
         6e:83:05:e9:b9:f6:33:7a:e4:f5:58:92:81:51:24:64:04:47:
         79:f1:5a:65:d5:54:2a:60:93:2c:0a:16:8b:c0:1e:0b:cd:96:
         27:30:6e:f3:a2:d1:b7:0d:06:f3:a3:e8:50:c0:96:a5:73:c6:
         dd:de:fc:e5:d7:d1:28:f5:16:70:53:5e:25:6e:c1:cb:b3:ca:
         b5:38:86:b3:22:d5:95:0f:23:2c:a8:56:e4:50:d2:22:af:29:
         b2:a6:ea:c2:0d:9e:c9:26:ff:3a:ab:42:b1:56:ba:e4:53:e2:
         d3:23:d2:b0:a1:ae:12:d4:00:76:49:75:6b:0e:2c:85:b0:f5:
         a7:8d:af:fb:24:8d:65:75:e4:f6:20:c1:91:4d:ca:6e:f7:7b:
         05:33:e9:c4:fa:38:b8:ac:5c:70:f4:25:7f:2d:59:f6:ed:35:
         97:5e:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 07:23:25 2026 by rpki-client