This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
File:                     6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft (raw, json)
Hash identifier:          gnNLRFX/x3Ubx4pKhfX8aZBoxfSHlOqmqO9Fa3cD3Iw=
Subject key identifier:   6D:2C:05:F5:D8:1A:34:BA:11:8B:A8:FB:A4:BD:0E:D8:7C:EF:5F:96
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Certificate issuer:       /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial:       019BFA9BB108C97FABC9DF13AA83A2A8430B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
Manifest number:          17F7
Signing time:             Mon 26 Jan 2026 14:01:05 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:05 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:05 +0000
Files and hashes:         1: 0OaaKkS63755SpYhx6kJMGc7jsk.roa (hash: yp83fzMHWtdzvYdJOYBhZdlBYbmjJSMrdOBnbSCBBV0=)
                          2: 0gfBZ2nkA_aLudP3O3P5s-KdgXU.roa (hash: gvj32J95khO6lKXoLY+MtPbkkgmfJusWvgloAUZdcEw=)
                          3: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl (hash: DbntfnWSwHq5VJAjLFV1JMzWJ/hx+0gD3ujHsYqAMvI=)
                          4: 861nedPN3phwQWTx-Y3YBAxRMVE.roa (hash: ERm1FnDrwh1xZ/A8rPaxVuHVGwJdfsBJ3Ujj0zNys+4=)
                          5: 96i-W8uHQfELumiyoD8KgUwjEqk.roa (hash: okWOkWFs1Dluipq3KfyuSGfnv1ZB6ULtQt87WU+u/6M=)
                          6: PEdeolhoIkzE4SikXyvr00NuL-M.roa (hash: xgoG+6pl+LCeGvwW7fq5QtfJTv5CaqjKKcOaYnCKPqA=)
                          7: T0iqjs9CkRPBgC6oTuTASwwLQBA.roa (hash: Q90Lq0syuhBK1/bm/BJJncCiwqmrsvZhqk9lxUir/3I=)
                          8: V_N2zZpFUh_jU5hVB-9KfNEepdA.roa (hash: F0gzOL4EyLJL5B+JsRxqs5zs7pl4bKpVfJSp9poZP8g=)
                          9: Z_CiSK55gizRlmUBAQqWDkAsjSA.roa (hash: ZtijwttgCm0QiPAlfL22m300Zqs50WEunsAW/5Jt8Fg=)
                          10: ZrDJgLArZHytatC5Ncvg5XZJ0L0.roa (hash: ulXA8t+3AsLSNeVGGGbJLh38H9YpiJMgj/n7hk5vfj0=)
                          11: _-6JSjmUimh08CjqKCxWw4-rHNE.roa (hash: +nCDi9UjpJd+hQvMDC1IUEgJRdQMfkefNt0DA5Y2kVs=)
                          12: aVOKvpwocFPOybKu2HArVNos6VE.roa (hash: 0a73eKWIb1Dki0lByBB+mR2gYiKoEVUop3iszyB1pNk=)
                          13: cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa (hash: C49PgeT/JLVMAXMoZTAwnDLdQC/24IQFKGkMPm9+JDM=)
                          14: qg0FwZYThoJPEEVuEPuXUoqRZhQ.roa (hash: vLVUscpAnWQjrZiBQs7cgVM6cDYZNsv2RGlwep1lIic=)
                          15: t5g9JJgTeTxlzlS2-l4KatgQqhI.roa (hash: i6WKydZbQwmwygFZkL0wGJ79C8EFlVc8aiS0Dhfq4Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9b:b1:08:c9:7f:ab:c9:df:13:aa:83:a2:a8:43:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
        Validity
            Not Before: Jan 26 14:01:05 2026 GMT
            Not After : Jan 27 14:01:05 2026 GMT
        Subject: CN=6d2c05f5d81a34ba118ba8fba4bd0ed87cef5f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:6e:33:c4:03:a0:ab:21:54:59:32:5d:1e:
                    6e:d7:c3:58:bc:72:9e:84:5c:55:24:46:e7:4e:c3:
                    9e:7d:65:95:a6:59:fa:c1:77:71:de:a2:29:ba:05:
                    fc:c6:a9:fb:de:db:76:fc:67:0c:54:ee:ac:18:59:
                    f7:6f:d5:dc:ad:30:a1:d9:11:52:e2:1a:2f:e2:44:
                    c9:4b:4e:24:20:b3:70:5b:3d:e2:8a:fa:ac:ec:86:
                    fa:0e:0a:c4:63:07:76:35:cf:86:0c:aa:7c:a0:68:
                    87:d9:4a:17:5c:26:49:94:88:dd:b3:5d:2c:82:2f:
                    c1:4c:9e:51:92:6b:82:56:74:df:9d:8c:1e:9a:f7:
                    57:01:28:cf:ac:59:f1:3c:c8:e0:90:45:8f:42:e5:
                    51:52:25:67:00:78:5b:19:bb:25:f6:4c:3f:06:27:
                    24:61:90:1b:04:88:c1:84:f2:e2:1e:72:8d:38:0a:
                    e0:7e:11:ed:8e:a1:ce:f4:7e:cc:d4:b4:0c:4e:76:
                    d5:e8:ad:41:19:d1:1d:0e:a3:f8:d6:09:ed:15:66:
                    7c:73:2b:20:5f:32:3c:64:08:da:d9:d6:9a:fd:45:
                    37:d9:be:0d:4e:91:65:ee:ab:02:ae:b1:dd:f4:a5:
                    22:41:6e:a4:dd:a7:e0:13:7c:e8:2b:e5:21:a4:bd:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:05:F5:D8:1A:34:BA:11:8B:A8:FB:A4:BD:0E:D8:7C:EF:5F:96
            X509v3 Authority Key Identifier:
                keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:d9:85:bd:11:40:a9:37:41:3f:8d:33:3a:23:74:86:80:
         bd:8a:94:7a:ff:c1:61:a3:6a:3a:26:f8:d0:6a:dc:01:a8:8d:
         a0:a2:12:2e:ea:4d:c1:ae:26:c2:a1:2c:55:48:ef:1c:f3:89:
         0d:a1:e8:1d:92:68:64:c9:34:6e:b2:3e:68:9f:fa:42:54:3a:
         23:a8:42:ce:48:f0:c8:b7:0c:75:41:86:1d:78:6b:cd:f3:77:
         f5:7f:44:57:42:69:70:61:90:f2:48:8f:ba:5e:c4:57:73:62:
         01:93:ca:2a:26:8a:b5:c1:3a:a3:36:b7:7d:e6:5f:4e:82:fd:
         e2:1c:d1:cb:1f:64:ec:16:df:b3:38:06:4e:83:a7:21:28:90:
         d8:4a:7c:c7:42:8f:9b:ae:7f:ca:7a:40:e2:0a:77:8a:cc:66:
         d0:5a:1e:9d:cf:73:38:a4:dc:31:58:b2:b6:af:7a:f6:96:3a:
         5c:b4:ab:d3:b8:54:19:f1:0f:8c:e3:f4:be:2d:9c:77:39:c1:
         60:54:14:63:eb:0f:2e:94:b6:03:93:05:1d:e4:75:7f:31:04:
         05:c7:11:52:4d:36:a9:71:15:4d:d2:c0:da:d2:70:c2:18:ab:
         e9:a1:7a:08:aa:96:ad:2c:03:79:64:fa:9d:6a:4c:03:5c:b6:
         15:17:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:10:51 2026 by rpki-client