This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
File:                     6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json)
Hash identifier:          1hke+ow8b/dvHrmk8Zy2Gs/aF+xyQvN6jeBnTiH7G7s=
Subject key identifier:   B6:95:AA:A3:C5:38:F6:35:2B:0B:99:BA:BD:E8:3E:53:3A:41:98:49
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Certificate issuer:       /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial:       019BFC8A30920C93B1772D5FDEEF53016FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 23:01:13 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:13 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:13 +0000
Files and hashes:         1: 1RM4oPNA5zV8gpBFXwkv_ja9FiQ.roa (hash: CPN5leskj6WSt3dvfwwAxdnUjDWOGaEyTKMTxOxmgto=)
                          2: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: 6Z62wdxeCnbqTH5pfkxwUG5u5lVGjPNbATs5z08ZZo0=)
                          3: WtgMSRP5OEmkxWvX-DhuOQDwMBk.roa (hash: l1AreQt6W2uLe+jTGiT0wGfZWGbfEdoV2rC3OiVwsTw=)
                          4: kjq1O54rStRLxuBF-ybXt7bPUso.roa (hash: d7NKhTPVVN8Gxf/3FcrZ3uTAuZLWMskRPFJRqlThNnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:30:92:0c:93:b1:77:2d:5f:de:ef:53:01:6f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
        Validity
            Not Before: Jan 26 23:01:13 2026 GMT
            Not After : Jan 27 23:01:13 2026 GMT
        Subject: CN=b695aaa3c538f6352b0b99babde83e533a419849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:45:aa:7a:04:9f:4f:9b:73:49:6a:a9:c8:
                    12:5a:e6:8d:00:a1:b7:ed:61:c5:9a:be:e1:59:7a:
                    8b:c9:3a:e4:21:18:bf:4f:a9:70:f3:11:02:42:85:
                    3c:6e:c6:db:13:a0:bf:ee:40:a4:4c:9c:a1:87:6c:
                    82:f7:5d:6d:c8:1c:32:ae:da:90:29:f9:34:59:2f:
                    a8:6f:f9:08:61:8a:3d:36:60:69:e6:23:be:c7:f6:
                    2e:40:4d:dc:34:99:fb:71:fb:9e:45:cd:f2:33:d6:
                    68:ca:4c:17:27:b2:58:49:1d:8a:7f:99:cf:03:d4:
                    1e:b3:67:f6:6c:86:2e:e2:f8:b6:0a:b2:cf:b9:bb:
                    40:2b:72:58:c0:d7:ac:75:3d:c9:c8:56:f9:3b:f3:
                    8b:ad:50:94:7e:76:60:52:f5:49:9d:8a:3e:49:d0:
                    83:e9:58:25:18:84:d8:2d:0f:1c:c4:3d:a0:44:15:
                    71:dc:12:cf:db:45:50:b0:af:fa:b7:c3:98:19:35:
                    fe:b4:76:2d:0c:0b:5e:3d:00:ff:19:65:67:a4:3c:
                    0d:e9:d6:8f:4c:25:42:67:d9:6f:f4:d9:81:5a:16:
                    54:01:8c:7b:12:77:d3:da:ed:04:ce:80:68:d6:5c:
                    79:d9:d8:13:06:22:f9:8b:3d:ce:c1:1e:02:3c:4d:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:95:AA:A3:C5:38:F6:35:2B:0B:99:BA:BD:E8:3E:53:3A:41:98:49
            X509v3 Authority Key Identifier:
                keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fa:34:9f:b0:70:8c:b6:de:2a:c3:91:ca:d7:80:16:e1:a0:
         8c:0b:50:b2:05:b7:15:17:77:ad:b9:8f:3d:c9:9e:95:33:9a:
         29:18:3b:e0:5d:14:32:0f:1e:e0:dc:c5:2d:81:ee:a3:9e:51:
         8d:08:0b:5d:e3:cb:30:55:dc:c4:9e:42:ea:99:34:ac:30:4c:
         81:73:7a:2f:9c:b1:6f:6c:d6:8a:b3:2b:cc:05:23:88:f5:3f:
         66:12:0e:6c:f5:f5:62:9e:6f:8f:d0:6b:e4:a9:3d:ea:2b:af:
         9d:11:86:bd:43:89:66:e1:e1:08:76:ef:7e:ab:57:e2:14:74:
         fd:77:72:69:e9:5a:9e:bb:41:7a:99:49:1f:7b:17:65:b1:56:
         38:d5:b1:a7:b4:08:34:a9:b0:5f:a2:55:78:b5:b5:b0:8f:ff:
         9f:82:0e:01:ee:3d:f7:c9:92:a7:12:54:b9:c7:62:da:ea:ec:
         b4:c5:02:b9:52:1d:1f:2e:17:e5:87:e8:13:56:e5:6d:7e:48:
         81:27:50:ce:68:ed:dd:eb:01:fd:8c:21:cc:d1:ed:0b:a6:45:
         a7:ee:ad:a3:a7:0a:1c:b0:b0:54:11:40:39:93:e7:08:5b:96:
         ef:2a:a7:86:6c:93:3d:7d:fd:f5:c8:18:b2:42:af:66:9b:40:
         e0:51:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:47:58 2026 by rpki-client