This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File:                     6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier:          oCaqkC7HTUAD5P0+7qbyztOSi479xvgsv0pC1ksqn3c=
Subject key identifier:   3B:49:30:7B:A1:30:7F:EB:DB:49:32:EA:DA:13:0D:B5:B2:FD:22:5E
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer:       /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial:       019B804C6C8E0AA6D51AC90C4CAC5F89CD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number:          0891
Signing time:             Fri 02 Jan 2026 20:00:50 +0000
Manifest this update:     Fri 02 Jan 2026 20:00:50 +0000
Manifest next update:     Sat 03 Jan 2026 20:00:50 +0000
Files and hashes:         1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: xqlJiN3q4K7IyM5CQMW936i5cfpUvlk7DEm2UQq6HGM=)
                          2: NhT4hC_Kop9-UElgOeKDWNxMT4w.roa (hash: Hh1bKiy5nqyZE4loxZYD93YfRpjyquMG28IeFVWqVbU=)
                          3: bfs8YI0YH3Io6ovI3fBPTv4Cxb0.roa (hash: rLPR7B5UIsCaVqkuX9IH0l6nJOJ5SAkKr0FgBYIBZvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:80:4c:6c:8e:0a:a6:d5:1a:c9:0c:4c:ac:5f:89:cd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
        Validity
            Not Before: Jan  2 20:00:50 2026 GMT
            Not After : Jan  3 20:00:50 2026 GMT
        Subject: CN=3b49307ba1307febdb4932eada130db5b2fd225e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:b6:34:93:a0:be:d6:80:a5:a8:cb:f1:cd:
                    34:08:fa:42:2c:e9:ef:8a:21:19:56:fe:c6:62:c6:
                    88:a5:cc:85:d1:9d:37:e9:0f:36:f0:63:61:57:86:
                    1a:b1:53:28:2a:a4:62:c6:59:c4:be:51:b8:4e:64:
                    8c:e6:50:97:0b:15:b2:a5:9e:f3:34:71:80:07:2a:
                    ba:49:48:87:55:f6:36:1c:f9:a2:c6:6a:6d:2c:c2:
                    a0:ae:34:8c:2d:89:80:90:d1:89:b5:0f:fb:f5:4c:
                    51:6d:20:c9:cd:87:7d:e2:df:6a:e1:3d:44:2f:70:
                    f2:39:da:d7:79:3a:b2:4c:b3:39:e9:35:9c:16:8b:
                    d6:6d:5d:a4:ae:cf:82:ed:7b:39:31:18:d1:38:bc:
                    16:60:5f:50:eb:96:f7:62:c4:53:b2:46:75:cf:5f:
                    5d:36:54:be:44:c3:8c:9d:e2:39:3b:0e:aa:01:7e:
                    d3:f0:18:ce:b3:a7:91:08:6a:d6:23:7d:a5:d0:77:
                    7f:8f:f9:c3:52:a8:4a:66:94:24:ab:d9:88:3b:fd:
                    be:87:6c:ad:70:a6:20:ef:71:83:25:e8:9b:d3:46:
                    9f:14:be:ef:67:44:ed:25:98:70:e5:8d:c3:06:5d:
                    75:a1:1f:4c:a8:f6:60:d1:eb:19:ab:89:ee:49:0c:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:49:30:7B:A1:30:7F:EB:DB:49:32:EA:DA:13:0D:B5:B2:FD:22:5E
            X509v3 Authority Key Identifier:
                keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f3:a9:ca:c7:66:1d:08:14:5b:5e:f2:7d:ff:9f:78:f6:e8:
         83:34:75:42:41:41:ed:cd:1d:1e:4d:97:c5:bc:0b:38:10:89:
         0f:ad:ff:ad:3f:e5:37:78:72:d7:9a:16:ed:5d:94:02:18:57:
         e7:6a:fe:f2:27:f6:19:9b:1a:70:5d:5b:ab:a1:12:7f:71:2f:
         50:3d:34:2f:89:d7:95:2d:4a:18:4a:27:4f:df:28:33:51:97:
         66:cd:ab:a1:d6:d4:e1:ef:fb:88:88:fb:fd:be:0c:f2:06:dd:
         0e:6d:27:38:72:af:e7:86:26:05:4d:b0:ef:c4:95:20:f8:df:
         f4:6b:be:b6:4e:c3:fe:ab:cd:2c:27:10:19:d0:15:03:09:22:
         b7:f6:68:25:fd:42:52:bd:92:d5:c1:00:bd:ab:60:d5:f5:2f:
         e9:cf:31:03:26:80:f9:52:c6:1c:ff:a2:c9:ed:58:7e:71:d8:
         e0:a3:a8:0f:aa:d1:1b:84:83:09:9d:93:4f:0a:a3:87:41:b5:
         c6:15:40:89:64:d7:51:22:cf:4e:fc:42:4a:1b:1f:40:6d:f9:
         66:cf:ff:8f:2c:d3:83:88:c6:15:75:d8:3f:0b:58:e2:db:00:
         33:e4:9b:27:04:e2:09:50:47:06:64:b1:b1:90:fe:1d:0e:5f:
         38:d2:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:28 2026 by rpki-client