This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File:                     6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier:          i251q9uoOfKP2T/KunKDOYtdQ1qC5kX0xbGUxGZtVz0=
Subject key identifier:   E8:49:EA:A3:32:CA:6E:D8:E3:92:C7:E8:DE:EA:08:45:DA:1E:FA:53
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer:       /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial:       019BFB77406A7CAC050A3023B566ECAAAF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 18:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 18:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 18:00:55 +0000
Files and hashes:         1: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: XRw0zj3efBSBUtWqBCtZWwZVFz0hNAdUb2c5MaHtNN8=)
                          2: CDDBIhPlFZ0la4xFUCyUslJRm_w.roa (hash: APBpif6BQi/aq1agj/dNgGEFPrydGKCzR1HfGBm5Jbw=)
                          3: VEYj2LHmN-togd_mlPbNrhUEwf4.roa (hash: 9Rwuw5dPRTSkAe/qbyFWR8ARVN2r+Tl0lHJCSvWgs68=)
                          4: dnwGTH0FieAd94oqN2OTApOST_Q.roa (hash: aIR54WoUK0WT8TJ7U0JAbOT4DOCp5Eb6XBrXkWKbnto=)
                          5: istOwulN0TBtCeTz_FD-nhvpIck.roa (hash: IbiJxrUh2vHPG6p5xcqxXoKoxW9imoB9piUbP1LLjPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:40:6a:7c:ac:05:0a:30:23:b5:66:ec:aa:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
        Validity
            Not Before: Jan 26 18:00:55 2026 GMT
            Not After : Jan 27 18:00:55 2026 GMT
        Subject: CN=e849eaa332ca6ed8e392c7e8deea0845da1efa53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:c9:c9:74:5a:2a:8c:91:b3:6a:7d:d6:d6:
                    01:8d:93:fd:a2:01:37:d5:a1:93:26:de:4b:86:0c:
                    a1:a9:83:a2:7f:e3:e1:8c:e9:8c:5c:ce:c7:61:7b:
                    c8:3a:0d:7f:76:e9:b7:cf:46:af:3c:9a:2c:ff:b1:
                    f3:1c:4a:50:05:b2:7f:56:42:74:09:3f:2f:94:cc:
                    c6:cf:12:75:28:8e:4f:f2:66:7c:fe:ad:6e:de:e0:
                    c2:1f:9c:ba:ef:06:48:4c:15:3f:5f:72:c0:fb:1d:
                    f6:6d:e4:c6:a1:27:02:15:1e:db:92:f4:92:f9:14:
                    cd:81:b2:57:e4:89:f1:eb:7a:76:d8:78:a6:83:64:
                    32:49:7e:fe:c8:4c:55:f7:49:a2:5d:29:49:9e:81:
                    13:ce:5d:97:4b:ac:8b:40:68:66:ef:05:7f:5b:63:
                    ea:71:be:f2:46:24:0c:c5:99:96:bc:6f:97:64:5b:
                    a0:1b:ce:f4:46:84:e6:6b:14:e6:9a:db:59:1a:85:
                    ac:b9:3e:90:c6:86:2b:b0:09:a0:7c:8e:6c:80:14:
                    90:59:7d:bb:8f:b9:f4:b5:31:9c:f6:35:97:fd:d9:
                    cd:e7:f4:d7:e0:8b:8d:1f:8e:17:4a:1c:77:99:d7:
                    31:b7:78:8f:85:b8:39:60:8c:f1:d9:6b:aa:07:2a:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:EA:A3:32:CA:6E:D8:E3:92:C7:E8:DE:EA:08:45:DA:1E:FA:53
            X509v3 Authority Key Identifier:
                keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:e6:a8:ff:ef:14:cc:63:a6:ec:2f:2a:8a:4e:b7:47:8c:
         62:6b:76:4a:d1:50:2f:2e:96:b4:a1:c3:36:47:5a:34:83:ec:
         b7:8b:d9:41:3f:f5:03:4c:27:80:ac:1e:4d:73:8e:48:ef:7d:
         15:a9:cb:8f:47:83:64:62:0a:65:91:4e:66:ad:d4:13:8f:bf:
         3d:ae:cb:bb:71:0f:f9:c4:f5:15:de:ab:b3:62:fc:55:3c:6b:
         b2:0d:92:e9:fb:ae:ba:12:a4:4e:62:cb:91:f3:1f:f1:d8:46:
         8a:11:de:42:a2:26:d1:bb:44:fb:8b:2e:69:91:30:80:80:b0:
         57:1a:a3:d1:85:3a:c7:c5:cd:c8:b5:e5:9a:82:1d:4e:d7:3c:
         14:7d:47:85:75:4b:3f:ec:9a:3e:98:3c:04:29:68:a9:18:37:
         b9:ad:17:e8:e6:4e:d0:4a:a3:01:29:51:d4:63:d9:4f:e3:bd:
         31:d5:58:42:d4:d4:b0:4d:41:32:07:5d:56:14:84:ea:15:d8:
         ae:f7:1c:31:69:ad:55:23:20:df:fe:c3:5c:08:86:1f:b3:fc:
         ce:44:d9:52:52:5c:58:ea:08:cd:41:f8:a2:07:3c:5d:3d:79:
         cd:19:59:1e:08:10:e4:0b:37:a3:f8:be:67:6e:d8:7e:4a:74:
         5e:5e:cb:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7d0BqfKwFCjAjtWbsqq+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZmFiZmE2MjgwNjNmNmI4ZTk4ODg1NjZmNWYzZmNmYTc5
OGM2MjEwHhcNMjYwMTI2MTgwMDU1WhcNMjYwMTI3MTgwMDU1WjAzMTEwLwYDVQQD
EyhlODQ5ZWFhMzMyY2E2ZWQ4ZTM5MmM3ZThkZWVhMDg0NWRhMWVmYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHvJyXRaKoyRs2p91tYBjZP9ogE3
1aGTJt5LhgyhqYOif+PhjOmMXM7HYXvIOg1/dum3z0avPJos/7HzHEpQBbJ/VkJ0
CT8vlMzGzxJ1KI5P8mZ8/q1u3uDCH5y67wZITBU/X3LA+x32beTGoScCFR7bkvSS
+RTNgbJX5Inx63p22Himg2QySX7+yExV90miXSlJnoETzl2XS6yLQGhm7wV/W2Pq
cb7yRiQMxZmWvG+XZFugG870RoTmaxTmmttZGoWsuT6QxoYrsAmgfI5sgBSQWX27
j7n0tTGc9jWX/dnN5/TX4IuNH44XShx3mdcxt3iPhbg5YIzx2WuqBypyWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhJ6qMyym7Y45LH6N7qCEXaHvpTMB8GA1UdIwQY
MBaAFOv6v6YoBj9rjpiIVm9fP8+nmMYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hM2EzMTEtMzc4NC00ODE4LWFiZjkt
ZTVmZDZlOTg0MmFiLzEvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hM2EzMTEtMzc4NC00ODE4LWFiZjktZTVmZDZlOTg0MmFi
LzEvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsP3mqP/v
FMxjpuwvKopOt0eMYmt2StFQLy6WtKHDNkdaNIPst4vZQT/1A0wngKweTXOOSO99
FanLj0eDZGIKZZFOZq3UE4+/Pa7Lu3EP+cT1Fd6rs2L8VTxrsg2S6fuuuhKkTmLL
kfMf8dhGihHeQqIm0btE+4suaZEwgICwVxqj0YU6x8XNyLXlmoIdTtc8FH1HhXVL
P+yaPpg8BCloqRg3ua0X6OZO0EqjASlR1GPZT+O9MdVYQtTUsE1BMgddVhSE6hXY
rvccMWmtVSMg3/7DXAiGH7P8zkTZUlJcWOoIzUH4ogc8XT15zRlZHggQ5As3o/i+
Z27Yfkp0Xl7L6g==
-----END CERTIFICATE-----
Generated at Tue Jan 27 00:30:10 2026 by rpki-client