This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File:                     a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier:          j4nAZuRCuy0VXcI3JvzHkA97uv86459C7cr9AkdA4Mw=
Subject key identifier:   2F:A9:53:14:42:1B:D3:97:C0:1C:7C:39:C6:6E:09:32:66:E1:AE:7F
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer:       /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial:       019BAD9387E952B89339605FC8A7E68F8A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number:          17C0
Signing time:             Sun 11 Jan 2026 15:01:25 +0000
Manifest this update:     Sun 11 Jan 2026 15:01:25 +0000
Manifest next update:     Mon 12 Jan 2026 15:01:25 +0000
Files and hashes:         1: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
                          2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: 9SYnh3w3YZ8qdQY2mgdwlENXrQXeebqoaRXCl9nCJVk=)
                          3: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ad:93:87:e9:52:b8:93:39:60:5f:c8:a7:e6:8f:8a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
        Validity
            Not Before: Jan 11 15:01:25 2026 GMT
            Not After : Jan 12 15:01:25 2026 GMT
        Subject: CN=2fa95314421bd397c01c7c39c66e093266e1ae7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:ec:70:59:48:dc:f4:15:f1:96:92:1c:aa:
                    ac:0f:73:8a:bd:4b:73:c9:8b:7c:34:cb:75:11:55:
                    8e:67:1b:62:b3:fe:92:5f:47:fc:0a:d9:7e:0b:c0:
                    bb:a9:c9:b2:29:42:ef:e1:1d:c9:31:b9:39:52:b8:
                    48:c2:92:c9:b8:50:96:bb:aa:a8:b5:12:65:52:0a:
                    8b:24:ce:d5:ff:87:f9:17:a5:23:ba:f4:18:75:f0:
                    b9:cb:70:32:df:b3:ff:ee:81:1c:a7:3b:7e:d3:ca:
                    df:8c:44:09:49:85:84:ea:5f:e8:6d:49:78:0c:83:
                    5c:34:56:ff:f0:63:9d:4b:7e:bb:82:03:1a:5f:2b:
                    1d:a7:c9:0d:7d:55:d1:82:41:67:fa:b4:8d:07:d2:
                    c5:4a:ca:7d:79:f9:49:90:bd:19:a3:14:46:26:2d:
                    c1:28:9f:ea:36:17:38:9f:1d:fc:bc:93:58:88:5d:
                    a0:38:22:64:b6:0e:23:ad:31:f8:af:c8:0d:53:74:
                    38:eb:aa:74:d5:0c:62:9d:c8:ab:db:83:10:24:e5:
                    16:79:10:05:a7:e4:72:1c:dd:2a:c8:71:49:a3:df:
                    f9:a2:c3:af:24:5c:3b:7c:9d:04:9d:0f:04:0d:8a:
                    6c:b1:e8:89:4e:68:ab:7e:e7:8a:a1:de:6e:db:03:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A9:53:14:42:1B:D3:97:C0:1C:7C:39:C6:6E:09:32:66:E1:AE:7F
            X509v3 Authority Key Identifier:
                keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:87:b6:68:00:85:42:1b:29:4c:80:91:4c:c3:78:b8:90:a7:
         ac:c3:32:18:9f:28:87:39:95:c1:e7:68:d3:f9:a6:bf:94:89:
         a8:73:59:0e:a4:ca:08:4e:ee:65:76:b3:60:1f:0b:09:36:f7:
         ec:07:74:66:29:d0:66:73:04:1e:33:11:37:c2:18:46:20:11:
         a7:a0:39:f4:7f:7f:c1:d8:f4:2b:39:ad:c9:25:c3:09:c4:23:
         89:bd:f5:80:48:33:a5:c2:24:95:e6:f0:8b:51:c0:c8:6e:ff:
         6a:ac:db:e2:65:18:58:db:7b:1f:65:29:87:8b:c6:8c:ad:2c:
         52:d3:2e:6b:39:a2:7f:33:a7:e1:3d:27:12:65:b5:88:e7:2a:
         fa:8d:d1:55:57:e6:9e:ff:2b:3f:ac:4f:22:74:58:17:4e:64:
         b2:7a:08:47:ae:58:c5:8c:2b:4e:fe:70:25:81:f0:d6:ef:c5:
         2d:24:6c:23:5a:a2:09:f9:0c:96:9f:44:7e:3e:a0:28:61:91:
         79:da:6d:c7:71:d4:1b:5e:dc:91:a5:ff:7c:78:b6:b1:93:14:
         27:55:c0:f2:3d:90:c8:5e:82:94:fc:51:e7:36:10:e0:4a:4d:
         17:53:c3:a1:48:4d:78:0a:aa:7f:b0:11:cf:e2:38:51:86:50:
         b0:92:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:02:45 2026 by rpki-client