This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          IaoW/PK+18yzpKoX6k1EYO28cFGOcZmWH4RBBtxOGlA=
Subject key identifier:   B7:31:98:DC:7A:70:7E:64:83:EE:76:1A:B0:FB:08:B4:DD:89:F0:1E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019BAB6EFACF434AA284B42EA7A1B370A9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          15B6
Signing time:             Sun 11 Jan 2026 05:02:15 +0000
Manifest this update:     Sun 11 Jan 2026 05:02:15 +0000
Manifest next update:     Mon 12 Jan 2026 05:02:15 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: RgC8EBTPhTMb6+pT5K7K0KB49Iec7Dp1P2HiGXrJbNE=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ab:6e:fa:cf:43:4a:a2:84:b4:2e:a7:a1:b3:70:a9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 11 05:02:15 2026 GMT
            Not After : Jan 12 05:02:15 2026 GMT
        Subject: CN=b73198dc7a707e6483ee761ab0fb08b4dd89f01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:cd:55:91:0e:53:ec:0b:3b:a2:87:81:c5:
                    7d:80:70:d8:72:76:0f:04:5e:20:a6:87:c7:28:27:
                    6d:8c:c4:15:d4:af:cf:a5:28:21:a8:61:80:23:a4:
                    f9:c5:85:2e:ef:d0:10:8c:09:44:99:5f:1b:47:34:
                    43:2e:1b:1a:fd:9b:cb:18:13:90:d3:76:3f:90:f2:
                    42:47:f8:fb:be:da:5b:06:51:9a:aa:44:a6:c9:41:
                    e8:27:5c:06:36:c4:da:da:2e:b5:7c:10:4a:5e:4e:
                    0a:16:ad:55:36:08:ca:8e:23:65:ca:d3:8d:e5:4b:
                    e2:89:4d:9f:c8:50:24:d8:b2:2c:cf:a9:fc:40:40:
                    ee:dd:7b:dc:8a:cf:8a:82:b9:a3:2b:38:a2:27:78:
                    12:63:9a:2b:75:54:bc:d1:9c:99:e3:64:f2:24:8f:
                    92:04:56:fd:c8:6d:8e:14:ef:7f:45:94:52:33:aa:
                    37:6c:95:4c:53:2c:f0:f1:a8:53:3e:1e:1a:0e:16:
                    08:8d:13:85:47:17:02:4e:bb:01:fb:0c:0d:92:64:
                    97:8a:ea:a8:80:88:a1:10:85:0f:e7:f8:3e:82:90:
                    05:c2:6b:72:ba:7f:bd:be:8b:a9:87:e6:8a:15:97:
                    ec:51:c2:53:57:79:0a:d7:23:72:05:03:53:80:d6:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:31:98:DC:7A:70:7E:64:83:EE:76:1A:B0:FB:08:B4:DD:89:F0:1E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:a8:15:46:23:a0:40:b2:b3:27:30:b5:37:6d:48:68:07:
         17:7c:a2:df:65:21:d3:f5:ff:54:25:ae:69:7b:e7:70:b0:d2:
         5a:75:4e:56:86:c9:89:ed:b9:a7:a1:6f:8b:e3:77:02:d4:a2:
         a2:d4:fe:c5:d0:ea:83:1a:82:65:43:8f:5f:ba:3b:3e:5b:93:
         c4:c1:ef:8c:8b:64:29:fe:4a:0f:a3:77:0c:c3:e4:e4:68:cb:
         4c:4b:88:05:d9:34:24:ad:e8:42:e5:60:52:e5:20:5f:59:d1:
         7d:65:a8:14:b2:8c:49:a1:e7:d8:a9:de:20:92:f7:c5:e4:86:
         03:b6:2f:a8:e4:a0:27:28:40:79:cd:67:00:fa:d3:08:4c:09:
         b8:f4:72:ac:ae:16:0b:9e:90:ff:45:7c:de:77:78:d1:e8:c7:
         35:47:ed:17:d7:b5:ca:59:43:56:89:3d:10:51:bd:94:fe:de:
         5a:e7:71:87:41:5d:a2:77:34:88:d2:51:46:d2:be:9c:53:d2:
         d8:f4:e3:45:41:b3:b4:c5:8b:d1:2e:a6:6c:45:a6:91:68:4b:
         15:3a:da:78:ac:53:11:f2:ff:d8:98:76:56:78:d0:9c:e6:9d:
         d9:18:61:f6:49:42:e1:3f:c9:1e:55:3c:9a:49:d1:50:f3:52:
         ae:aa:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 08:07:01 2026 by rpki-client