This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft
File:                     6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft (raw, json)
Hash identifier:          +oiQ+CMu9maEOwRdSl5IjPKz8draGqLY4sab0msOg6g=
Subject key identifier:   BB:B2:E5:25:0D:F5:3D:D6:91:17:78:25:FE:FF:17:9F:39:7E:1C:15
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Certificate issuer:       /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial:       019C0A7CD7CF634A8907D480B04563DD8B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft
Manifest number:          17F3
Signing time:             Thu 29 Jan 2026 16:01:19 +0000
Manifest this update:     Thu 29 Jan 2026 16:01:19 +0000
Manifest next update:     Fri 30 Jan 2026 16:01:19 +0000
Files and hashes:         1: 06R-BzYdwtpMq0Nzt_E_4RGFplU.roa (hash: R4oAnKQW9O2/T9Rogp3UpebjYhFcACXlDxn09CocDOU=)
                          2: 6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl (hash: cGPnTLyEboq8y8WGkV+sWfPPR2QWLhnHXrlVZgWV5Qk=)
                          3: GQQpid8PzW5c7ifv9on16dJHCdo.roa (hash: pdLM6+e7jeHiLj+62VBioWU2xs4hQADyitCcsxdD5kg=)
                          4: HOthVU0bBaG1HkA9x72mAKGEW8E.roa (hash: E0FOy9oZK/JQ6wDHO/lruS7gk3pPcta7ZFOMC1YAmJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0a:7c:d7:cf:63:4a:89:07:d4:80:b0:45:63:dd:8b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
        Validity
            Not Before: Jan 29 16:01:19 2026 GMT
            Not After : Jan 30 16:01:19 2026 GMT
        Subject: CN=bbb2e5250df53dd691177825feff179f397e1c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:be:56:49:0c:e8:92:2e:15:e0:16:0d:31:
                    f9:79:cf:e5:59:72:81:5d:c7:99:7d:87:cd:74:93:
                    0b:44:99:b4:53:5c:e0:ae:c0:e3:d1:1d:2f:b4:4a:
                    ef:6d:6c:a2:03:7f:95:19:bb:d1:ab:ef:52:29:e0:
                    41:d2:1d:e6:c9:e8:bc:28:08:85:fa:91:1a:e8:be:
                    a9:1b:42:5f:48:77:cb:86:8c:a3:e6:59:f6:b7:1a:
                    48:b1:e2:14:fa:d4:21:11:88:5b:a0:20:ba:8f:b8:
                    8b:28:06:31:ad:e0:1e:e7:fc:65:f5:8d:bb:55:05:
                    6a:2f:8e:dc:02:9f:d4:1c:3c:c1:8d:62:65:24:22:
                    a8:89:d5:53:44:1b:e3:4d:0b:1f:bc:fd:dd:1d:c2:
                    6f:9b:3f:2e:d8:45:67:06:7b:98:48:3e:de:93:47:
                    f3:9d:03:48:9d:bf:4e:34:57:f8:94:45:e8:eb:bb:
                    5c:e0:8f:89:91:b5:f7:0b:b6:66:87:aa:99:f2:42:
                    e4:bb:b3:0b:56:d3:e4:a9:71:56:a3:f3:75:01:0f:
                    d4:13:19:55:26:e9:15:64:68:9c:32:7d:4f:8e:a4:
                    3c:e9:57:af:84:41:ae:c6:ad:23:98:75:20:14:13:
                    52:7f:20:57:b2:ed:df:93:e8:2d:67:72:24:2d:f5:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:E5:25:0D:F5:3D:D6:91:17:78:25:FE:FF:17:9F:39:7E:1C:15
            X509v3 Authority Key Identifier:
                keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:8f:27:93:2c:79:5e:5a:32:88:05:ef:50:e0:25:14:ec:
         2f:e9:6c:73:32:b7:14:5b:5e:8b:85:53:75:a5:6f:55:2e:1b:
         c8:cd:e0:ad:87:a0:52:07:22:64:b5:91:e8:59:58:4a:b9:8b:
         71:8c:6b:12:d4:c5:ff:98:54:08:96:05:8f:fc:4b:3c:f4:c6:
         c1:b4:c8:d5:66:84:c1:cb:68:b4:f3:a5:7b:4e:83:52:44:fb:
         8d:e0:87:c7:9d:a4:ee:bb:ce:0c:71:d4:f5:fb:15:82:aa:6e:
         99:26:84:cb:43:61:38:05:fb:90:4c:61:a3:a7:d1:e6:90:31:
         77:c8:22:59:25:64:f0:b0:1c:49:cc:ac:d1:0a:01:a5:cd:6f:
         34:95:fe:26:30:2a:97:81:a5:70:75:87:ad:ab:b9:7b:39:d2:
         c5:0f:56:b4:36:f4:a6:b4:a4:a9:14:9d:6e:31:a4:98:5f:92:
         fb:4c:f4:1f:d2:9e:62:55:fa:cb:49:16:c9:dd:fc:62:db:ad:
         0b:29:9d:f8:80:45:3a:5e:cf:53:ab:5b:d6:79:b2:f4:61:1a:
         01:c8:fd:a6:0c:3e:94:ee:c1:e0:be:2e:13:16:70:8e:86:df:
         5e:5e:be:cd:97:bb:f9:da:5d:02:f1:97:0a:84:e3:37:60:ac:
         f1:bb:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 20:56:06 2026 by rpki-client