This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          7oxa2psTLraqRaEPqEURC5X6n/EC8vahe4Q4mnRYS7M=
Subject key identifier:   6C:FB:A1:D3:F0:43:90:03:1A:95:CF:4C:05:B9:F0:BB:02:1B:1F:C3
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       019B8B079067793D4A9DAF1AE6D2965F53DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          1444
Signing time:             Sun 04 Jan 2026 22:01:27 +0000
Manifest this update:     Sun 04 Jan 2026 22:01:27 +0000
Manifest next update:     Mon 05 Jan 2026 22:01:27 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: BRj4fKoQQzGGlmdofkMRkZ5FykONvMZzRmtoSi9Xr9c=)
                          2: fzdQ-DiiI7ywifu_IGVttENLXng.roa (hash: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Jan 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8b:07:90:67:79:3d:4a:9d:af:1a:e6:d2:96:5f:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: Jan  4 22:01:27 2026 GMT
            Not After : Jan  5 22:01:27 2026 GMT
        Subject: CN=6cfba1d3f04390031a95cf4c05b9f0bb021b1fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:0b:0f:00:74:07:55:ef:f8:0f:75:3c:6c:
                    b0:ba:eb:90:9d:36:51:b9:c6:23:85:c2:97:ae:2f:
                    99:c7:cc:0b:34:36:db:bb:81:3a:fc:53:3a:54:87:
                    86:27:50:61:55:0c:6a:7d:3f:c2:9e:96:a9:a2:2b:
                    ca:39:5d:8b:49:0a:51:dd:1d:b2:bb:f5:a1:ca:b9:
                    01:85:af:53:ca:e4:83:e6:41:35:02:2b:c9:23:d4:
                    33:12:9a:3f:04:8d:f3:db:6d:e6:ab:ec:03:60:59:
                    b6:d1:99:78:3c:94:d0:bf:d2:a0:cc:37:1c:17:27:
                    98:d2:59:c7:5c:54:15:19:92:58:d9:81:0a:50:55:
                    02:bc:9c:9c:cd:e9:18:69:32:09:6d:62:15:09:86:
                    ee:c5:96:49:b4:21:ef:9e:8e:84:2a:ac:01:a3:28:
                    de:a0:dc:32:b1:df:69:1d:b4:7b:41:af:39:01:7f:
                    6c:56:9f:5f:7c:14:22:fe:1e:d1:f4:c6:f7:ff:3e:
                    9e:eb:19:46:9d:77:8a:65:7a:f5:e0:13:ed:bb:37:
                    61:29:99:5d:1d:e8:cc:32:a4:4e:1d:1b:04:dc:ea:
                    c9:35:22:1b:ff:d6:fa:33:9a:56:ba:00:d0:2a:1d:
                    da:2b:da:92:9b:19:4d:93:d1:a9:e5:13:e1:78:9c:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:A1:D3:F0:43:90:03:1A:95:CF:4C:05:B9:F0:BB:02:1B:1F:C3
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:5c:41:28:14:aa:a7:41:65:15:2e:b5:96:07:19:0c:e9:
         15:da:71:78:f9:34:32:10:a3:9c:b2:e7:19:5c:3d:d1:1c:4d:
         48:17:b3:5e:8e:35:54:62:43:c3:42:66:82:2f:fd:d2:44:de:
         09:14:93:8b:42:6d:68:70:a3:63:55:a0:29:85:17:b6:96:63:
         33:cb:a9:d5:0b:72:99:a1:d1:52:b8:ad:7a:4d:56:53:66:7d:
         56:e9:af:98:7c:91:cd:4a:9e:78:82:14:b6:22:45:49:26:be:
         89:eb:b3:65:fa:53:bc:83:f9:49:e5:65:36:55:ce:d8:87:a4:
         d9:f8:41:8f:b2:79:dc:39:16:78:15:8c:6e:3d:c9:7f:13:7a:
         bd:7f:7c:e6:14:56:61:44:55:03:c0:0e:11:83:41:4b:a1:11:
         f5:c3:b4:a3:e5:7c:67:5f:a1:8c:66:60:4f:17:b6:63:3c:a2:
         4f:b2:1f:a1:65:12:f3:d0:e7:fb:74:75:35:0f:9f:28:19:db:
         1d:77:af:99:67:92:bf:f0:28:6a:04:01:49:a1:8f:e5:ef:f8:
         6d:83:60:4f:9f:d7:cb:aa:3e:7a:37:a5:88:14:18:1d:54:10:
         e7:99:bb:cd:f6:ce:41:2f:08:66:1b:2d:82:76:bb:f9:97:bd:
         97:52:ce:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZuLB5BneT1Kna8a5tKWX1PdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTAwNTNiNjhhNDM5OGZkNTJmMDdhZmRkNmFkMzEwOWZk
ZWQ0YjQwHhcNMjYwMTA0MjIwMTI3WhcNMjYwMTA1MjIwMTI3WjAzMTEwLwYDVQQD
Eyg2Y2ZiYTFkM2YwNDM5MDAzMWE5NWNmNGMwNWI5ZjBiYjAyMWIxZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTELDwB0B1Xv+A91PGywuuuQnTZR
ucYjhcKXri+Zx8wLNDbbu4E6/FM6VIeGJ1BhVQxqfT/CnpapoivKOV2LSQpR3R2y
u/WhyrkBha9TyuSD5kE1AivJI9QzEpo/BI3z223mq+wDYFm20Zl4PJTQv9KgzDcc
FyeY0lnHXFQVGZJY2YEKUFUCvJyczekYaTIJbWIVCYbuxZZJtCHvno6EKqwBoyje
oNwysd9pHbR7Qa85AX9sVp9ffBQi/h7R9Mb3/z6e6xlGnXeKZXr14BPtuzdhKZld
HejMMqROHRsE3OrJNSIb/9b6M5pWugDQKh3aK9qSmxlNk9Gp5RPheJyQjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGz7odPwQ5ADGpXPTAW58LsCGx/DMB8GA1UdIwQY
MBaAFPugBTtopDmP1S8Hr91q0xCf3tS0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02QUZPMmlrT1lfVkx3ZXYzV3JURUpfZTFMUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDEx
LTk4MDU4MTAwYTY0OC8xLzEtNkFGTzJpa09ZX1ZMd2V2M1dyVEVKX2UxTFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UxLzczMzE3NC1lZGQ2LTRiNDItYjAxMS05ODA1ODEwMGE2
NDgvMS8xLTZBRk8yaWtPWV9WTHdldjNXclRFSl9lMUxRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn5c
QSgUqqdBZRUutZYHGQzpFdpxePk0MhCjnLLnGVw90RxNSBezXo41VGJDw0Jmgi/9
0kTeCRSTi0JtaHCjY1WgKYUXtpZjM8up1QtymaHRUritek1WU2Z9VumvmHyRzUqe
eIIUtiJFSSa+ieuzZfpTvIP5SeVlNlXO2Iek2fhBj7J53DkWeBWMbj3JfxN6vX98
5hRWYURVA8AOEYNBS6ER9cO0o+V8Z1+hjGZgTxe2YzyiT7IfoWUS89Dn+3R1NQ+f
KBnbHXevmWeSv/AoagQBSaGP5e/4bYNgT5/Xy6o+ejeliBQYHVQQ55m7zfbOQS8I
Zhstgna7+Ze9l1LOZA==
-----END CERTIFICATE-----
Generated at Mon Jan 5 03:04:17 2026 by rpki-client