This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          cJX5kKTDwUh24d2avDJRwrBb20UHTRG4PmqLQ2GhigU=
Subject key identifier:   7E:DF:AE:7A:4A:7A:06:02:6F:69:2D:A6:70:86:84:98:66:5E:FD:0D
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       019BFC52C3B446E73F9C99169B7732D3CEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          03EA
Signing time:             Mon 26 Jan 2026 22:00:40 +0000
Manifest this update:     Mon 26 Jan 2026 22:00:40 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:40 +0000
Files and hashes:         1: 47hJsASozRDqhuCU5AfmHwpSaeM.roa (hash: 3xuZAzw3KETa+bwqpnJGB1vDRHOPpTU+lO61TYMy18I=)
                          2: 7xOGvUid5wgR_viXaJCs-_E41Dc.roa (hash: scuGxNCLA5L3YCe/NBi2qwEMiltJqBLZuIhGsoKzXm4=)
                          3: CkraNljOqkeSekJdoAbtNjJUZxU.roa (hash: o4lFQ2jvZtAY9Qkbgut69KisZCd4iL38+vgSPqcwEK8=)
                          4: DPfNU5hIo1-ciAEj9brIauBQL7Q.roa (hash: AtV2QPSAYmwpuehaFYlZOIVnxkZ4cKgkcGd5G/ierKU=)
                          5: R6XMwFpcp2UJ16Ql8QFVP6Rp9ec.roa (hash: 0t3mzIeTNynKr8VMHod3xlGeVo/HmsNEjXTbtx+kp8Q=)
                          6: S7bN1rPJ7_VOzM2q1Gxs1x4AAsA.roa (hash: JK/8ld2vkFnKBCJeP74SV+/N5f0fLHlt3L2e82GsaP4=)
                          7: YxAyMLVZBrOwdzf8vDa5AtXQfYM.roa (hash: Qq6ogFgDN4EOjnq+f9NCyesKbJbW/svA1UdP0OEqezc=)
                          8: aNNxwXM4RLWcgiojbyE7ayki1ds.roa (hash: aXD5NXX15GN3LeS7Ev04287erJQ10IqS/qwsHUN++xk=)
                          9: ig_VBpviDFPO2k9TLvdj_dWYYIw.roa (hash: WqPhG6OmFgIAQlSVATvrRDw6cG27/lSxwjfUp8XUsZY=)
                          10: jNIo4jwvqz1IelLRu8GvtQg4OJM.roa (hash: NZFhvQtEgj4btkeWoTCHHe2LlPOEV+ZMhUCQO45Afok=)
                          11: mGXcdc3NkS89VR-ehnhFaQ3OaKc.roa (hash: c2VXcpUEdl/AX8z8uYRh5IzdPmWTuNl2Mu8B+2l4c3E=)
                          12: o98NfeDK9CRHez9q6wLGlITiQ6w.roa (hash: knhKVoHKZ9gBPHJ7HZTVX8GdKMHhMGkjA+da43LunF0=)
                          13: oua9eFE_AJcMStF2oFe8vadhouw.roa (hash: ert4Il7JZA5XFW1lG5qvKbrDDFIMP2FcrLckySpeZUQ=)
                          14: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: S1CaYCnflAbOjCigUnouvzLAPj6mP1SlsfdGWhtajcY=)
                          15: s4doa2uCWT8wlElRSQYnyEhb-io.roa (hash: q2luMe75BiPCJy4TtTk1lDnNUZzVDgGLlpHp90uHA98=)
                          16: sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa (hash: W/MQGBKbXxcpb0fgJqS7ufdVgzl0yD0EsDfR255WBk0=)
                          17: vp5TOmg5PSChbTXqEn839qbGjU4.roa (hash: 3ggocbcMjs8++XIEOhfa6mmEv0tRoM8xV2RU3tGAIwU=)
                          18: wZnB7Qjfda0ITgQ2HWutXpolCjU.roa (hash: MXsdTNO05d6fpADf9FEXYgiPgEmRVXldtdKNkmYeKJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:52:c3:b4:46:e7:3f:9c:99:16:9b:77:32:d3:ce:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Jan 26 22:00:40 2026 GMT
            Not After : Jan 27 22:00:40 2026 GMT
        Subject: CN=7edfae7a4a7a06026f692da670868498665efd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:71:f3:14:f7:21:eb:b9:73:c1:a3:b0:62:
                    65:4c:70:71:70:a7:43:bd:af:e2:1b:67:e3:66:67:
                    81:3e:b4:4e:a2:64:04:af:1e:72:d6:70:5e:56:aa:
                    f5:b9:51:23:72:db:64:85:27:7d:74:d5:23:7a:54:
                    c6:3c:76:b0:f8:75:60:a1:a0:81:c3:cb:34:da:eb:
                    ba:9f:1f:77:4c:94:40:b2:f0:c7:77:ac:04:da:81:
                    11:fb:41:ab:26:be:58:c5:65:89:9b:dd:94:a5:32:
                    62:3d:87:d3:57:86:d8:2f:96:7c:f6:c4:9d:57:35:
                    5a:88:08:e4:2f:09:83:07:d4:d2:c1:64:92:b9:3e:
                    35:a3:d6:df:30:0f:51:0a:3c:db:35:fc:9e:07:0e:
                    91:d3:23:0f:70:56:44:47:5b:b9:39:f4:61:ed:9f:
                    a7:4b:e5:21:9d:03:f9:a1:4a:99:9e:bd:d0:62:c7:
                    c5:cf:2c:a7:97:c6:c1:bd:26:74:6c:44:b1:d7:b4:
                    ee:70:88:5c:81:14:91:98:83:58:54:d9:d7:d1:29:
                    10:b1:46:19:5f:1d:13:00:0e:82:d1:8f:eb:a8:ed:
                    85:76:d6:7e:7f:0e:f2:0e:84:24:52:7b:c6:ec:b0:
                    62:b0:b6:1c:f1:a3:1a:77:af:a4:c0:b8:6f:7c:4a:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:AE:7A:4A:7A:06:02:6F:69:2D:A6:70:86:84:98:66:5E:FD:0D
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:22:6d:75:c5:ad:a8:33:09:03:ba:4e:21:49:37:35:87:6b:
         3a:ed:b8:76:4f:1e:77:a3:37:75:25:5c:4d:b5:fc:01:fe:8b:
         c6:83:e5:de:ba:93:94:8d:e9:12:80:36:b2:93:8b:fe:af:cf:
         c0:c8:82:b5:13:94:ea:7e:f4:69:3d:76:87:f2:23:e4:ce:72:
         63:c7:03:ec:e4:a4:69:b8:97:b0:f9:91:59:6a:cb:ae:66:9b:
         ff:41:a1:84:d8:d9:b8:29:e3:95:a9:98:05:84:46:b0:02:9e:
         3a:14:48:36:e0:26:d7:e3:9b:83:3a:2f:40:14:1b:47:dd:ec:
         b9:6a:84:e3:69:10:c4:61:e0:08:f3:09:e7:15:a2:29:a9:24:
         c4:15:24:dc:56:5b:1e:59:70:fa:70:84:f1:63:3c:64:16:8a:
         23:25:94:dd:8f:de:f9:93:4c:26:fe:d2:cc:74:ec:ec:9c:c3:
         c5:6f:b4:95:7c:42:f5:d4:e2:22:b0:1f:93:39:ea:bd:d9:74:
         ca:c7:cd:41:18:b3:df:44:20:0c:a3:10:bf:88:90:36:89:16:
         f6:c2:0f:fb:03:43:26:70:85:53:67:15:a3:c6:8e:df:c0:98:
         2d:4b:95:8e:84:51:4f:81:4d:13:7f:0a:6c:31:49:35:4b:e2:
         c9:bb:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:26:22 2026 by rpki-client