This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          hgv3MwD/W4G4dK36TQDLAwiVQv3am+ftSlhvS8dNmec=
Subject key identifier:   84:37:B8:FE:C5:76:9F:AA:E2:16:23:33:40:EB:45:23:5D:48:66:2F
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       019BAD25F6B7601C79C7C77AACF9264F7727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          0723
Signing time:             Sun 11 Jan 2026 13:01:44 +0000
Manifest this update:     Sun 11 Jan 2026 13:01:44 +0000
Manifest next update:     Mon 12 Jan 2026 13:01:44 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: 6qOz9okBWe/vAY5QWNWgIlJ98zdcrLFG7CTsX5TpsTo=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ad:25:f6:b7:60:1c:79:c7:c7:7a:ac:f9:26:4f:77:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Jan 11 13:01:44 2026 GMT
            Not After : Jan 12 13:01:44 2026 GMT
        Subject: CN=8437b8fec5769faae216233340eb45235d48662f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:d4:b4:49:d7:93:f8:b6:59:43:2d:83:92:
                    8e:6b:a6:51:8f:03:79:61:30:f3:0a:cd:ce:06:09:
                    d8:44:65:13:16:69:48:5c:4a:82:c7:b7:72:9a:3e:
                    d3:31:7c:9d:79:04:e8:fb:55:53:de:6c:d0:6b:e3:
                    c4:15:75:d8:0e:f9:76:de:69:b3:9a:22:c4:a8:e9:
                    10:64:86:09:91:f6:97:8b:7a:fd:62:c4:57:06:bf:
                    4b:2c:30:0f:67:ab:65:c5:06:03:e8:c2:3a:09:5c:
                    b6:74:51:69:72:b3:88:e3:f6:13:7b:ef:b0:4f:6f:
                    64:39:64:57:73:d5:ec:23:37:b9:2a:7f:7c:87:2c:
                    e9:aa:14:b7:96:aa:f0:cb:bf:6d:17:8a:34:53:41:
                    ce:a6:36:ad:ee:d7:62:b2:e9:ba:21:d2:8b:cc:c1:
                    56:93:2d:c3:96:7b:31:25:5d:5d:3f:3b:c9:0f:01:
                    52:7e:c7:17:b6:6d:63:56:c8:cf:ad:d6:a6:6d:c4:
                    94:02:d0:e8:17:25:d0:08:8b:9a:d3:f4:d8:12:c9:
                    8b:e7:78:8e:79:f5:63:de:08:90:bf:f2:c5:d0:3d:
                    39:a7:a7:55:10:f9:67:04:d2:d6:2a:9b:6d:01:8b:
                    40:93:a5:41:78:5a:f6:8c:ac:5c:59:74:7a:e8:5e:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:B8:FE:C5:76:9F:AA:E2:16:23:33:40:EB:45:23:5D:48:66:2F
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:0f:3e:c3:50:5f:b3:43:87:91:04:ad:35:6a:4b:e1:de:
         7b:e8:3a:09:a9:16:6c:c9:0b:91:6e:57:19:cf:48:2b:7e:f9:
         ee:dd:cc:0a:b9:bb:db:3e:00:ae:d1:c3:a1:eb:c4:5c:52:99:
         ea:6e:7f:76:14:12:22:0e:87:90:5f:41:0a:82:cb:0f:89:26:
         25:84:41:93:ac:75:ef:91:2c:63:60:fe:5c:30:3d:c3:d5:da:
         c6:26:c1:e6:89:a1:c1:65:d2:d7:67:41:46:f3:f2:9f:c8:ae:
         e9:50:05:be:9c:a2:d2:eb:e2:f9:21:b9:35:c0:ae:5a:e7:2c:
         d8:a0:29:56:5f:0d:ba:24:31:a7:1c:a8:29:2f:ce:5f:af:48:
         0d:11:d2:4f:1b:79:73:fa:80:2e:7d:3a:f5:c5:fe:94:bf:f4:
         48:87:31:b1:b6:1b:35:d9:60:bd:de:92:b6:48:ad:16:65:32:
         1e:ee:dc:88:5f:b9:72:29:4b:28:8f:ac:49:77:34:da:a0:0d:
         6e:9e:ae:26:bd:e0:1f:e7:dd:91:93:41:27:ec:26:05:99:5a:
         6f:1a:dc:c4:76:22:b0:b3:26:46:82:1e:bb:c3:4a:87:99:a5:
         c6:67:08:16:fb:43:fd:91:38:73:88:f0:c0:5a:d2:4c:b0:02:
         4b:3b:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:54:34 2026 by rpki-client