This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          OEvonRLHnofl8bAHDhNgDD+UwKAHy4mCRqhGAEyzu3E=
Subject key identifier:   C2:8C:6C:31:B7:94:E6:39:19:5B:0A:5E:52:FD:A0:F0:11:81:FA:1E
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       019BF507000C1B8C1E04D1AC0B088019CD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          0B41
Signing time:             Sun 25 Jan 2026 12:00:35 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:35 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:35 +0000
Files and hashes:         1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
                          2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
                          3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
                          4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
                          5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
                          6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
                          7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
                          8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
                          9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
                          10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
                          11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
                          12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
                          13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
                          14: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (hash: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=)
                          15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: 4Q53KTo+Ody0qDbf26kbKkrvs97am3pYWnSV5Mn0qrw=)
                          16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
                          17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
                          18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
                          19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
                          20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
                          21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:00:0c:1b:8c:1e:04:d1:ac:0b:08:80:19:cd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Jan 25 12:00:35 2026 GMT
            Not After : Jan 26 12:00:35 2026 GMT
        Subject: CN=c28c6c31b794e639195b0a5e52fda0f01181fa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:38:7f:39:f2:9e:b4:a8:92:18:f6:e1:b2:7f:
                    e1:c3:f1:8a:72:d0:0f:61:4a:f8:49:41:9f:e9:f7:
                    c8:d9:f8:90:a3:fa:a1:f1:02:80:6b:bd:f6:41:1e:
                    77:d1:38:62:ea:cf:ce:ea:6f:b8:18:8a:9a:7a:85:
                    1a:14:ec:d1:7d:fc:49:67:59:b7:6c:14:24:6c:79:
                    60:c9:a5:42:c2:c2:32:1f:c3:be:ac:66:e2:ad:90:
                    92:5b:1c:1b:3d:04:f1:bb:15:cc:af:62:cb:28:32:
                    c9:90:2a:87:d3:90:4d:4d:ea:ac:fa:fa:d4:33:ae:
                    18:72:9b:51:c2:36:be:5e:ed:32:38:d8:6f:21:07:
                    f0:1d:26:04:bb:95:f0:88:2d:29:5c:35:21:23:2c:
                    ff:81:c0:f2:07:ff:bf:a8:0b:9d:bd:f4:a2:ad:e8:
                    17:a4:cc:63:2b:5b:61:7c:9d:1d:a6:b6:d6:c4:c3:
                    1e:0d:eb:48:32:90:52:25:7f:44:f0:01:e6:9f:88:
                    8d:2b:16:87:dd:2b:54:c4:7a:54:f5:aa:d7:bd:27:
                    10:15:04:22:cd:eb:9d:64:82:b5:30:d4:d4:7f:fa:
                    c2:c9:59:a4:ac:7e:2d:6c:c9:49:ae:3d:bd:d2:e0:
                    ec:7d:74:54:69:84:35:eb:9d:e4:45:f5:08:4b:81:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:6C:31:B7:94:E6:39:19:5B:0A:5E:52:FD:A0:F0:11:81:FA:1E
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:65:73:fd:a2:9a:23:17:25:d1:87:b0:c6:e6:b0:93:b5:62:
         1e:ee:50:fc:af:6a:cf:79:2b:19:bf:ad:f9:f0:9a:2b:7e:74:
         18:4c:56:49:dc:a1:1e:96:68:09:57:e9:4b:35:71:63:9e:0c:
         8f:0f:7f:24:dc:dd:81:84:a6:1e:b1:4d:88:d8:e2:d5:6c:cb:
         76:88:54:09:b3:1e:1f:56:73:7f:26:52:c3:e4:f5:ba:11:38:
         e6:e8:89:4c:3b:29:d2:7f:53:cc:b6:79:d5:35:70:f8:f6:3a:
         aa:e7:94:3b:24:6a:70:56:dd:01:35:9a:70:d9:78:0e:7b:e7:
         b6:bd:f7:a9:05:3e:7a:ce:a9:cd:0c:c0:3b:b5:ff:bb:02:79:
         c2:9b:46:6c:d0:40:12:c3:77:5b:d8:07:12:a4:39:77:63:a2:
         05:0f:b1:49:cf:de:7d:22:ef:67:b1:dc:f8:b0:32:d8:80:79:
         80:88:af:db:8e:ca:21:c5:90:54:12:af:f5:a1:57:97:32:40:
         52:cb:f0:55:c6:80:6a:df:7e:6c:46:73:b7:61:f9:57:4d:68:
         88:a8:d3:88:fe:5d:d6:34:ec:59:1c:a7:cf:9f:c9:39:24:83:
         fd:38:6b:f3:f2:80:f8:b0:60:37:4b:fd:1f:20:c2:4e:42:51:
         4d:77:fa:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1BwAMG4weBNGsCwiAGc0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjYwMTI1MTIwMDM1WhcNMjYwMTI2MTIwMDM1WjAzMTEwLwYDVQQD
EyhjMjhjNmMzMWI3OTRlNjM5MTk1YjBhNWU1MmZkYTBmMDExODFmYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zh/OfKetKiSGPbhsn/hw/GKctAP
YUr4SUGf6ffI2fiQo/qh8QKAa732QR530Thi6s/O6m+4GIqaeoUaFOzRffxJZ1m3
bBQkbHlgyaVCwsIyH8O+rGbirZCSWxwbPQTxuxXMr2LLKDLJkCqH05BNTeqs+vrU
M64YcptRwja+Xu0yONhvIQfwHSYEu5XwiC0pXDUhIyz/gcDyB/+/qAudvfSiregX
pMxjK1thfJ0dprbWxMMeDetIMpBSJX9E8AHmn4iNKxaH3StUxHpU9arXvScQFQQi
zeudZIK1MNTUf/rCyVmkrH4tbMlJrj290uDsfXRUaYQ1653kRfUIS4E7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKMbDG3lOY5GVsKXlL9oPARgfoeMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2Vz/aKa
Ixcl0Yewxuawk7ViHu5Q/K9qz3krGb+t+fCaK350GExWSdyhHpZoCVfpSzVxY54M
jw9/JNzdgYSmHrFNiNji1WzLdohUCbMeH1ZzfyZSw+T1uhE45uiJTDsp0n9TzLZ5
1TVw+PY6queUOyRqcFbdATWacNl4Dnvntr33qQU+es6pzQzAO7X/uwJ5wptGbNBA
EsN3W9gHEqQ5d2OiBQ+xSc/efSLvZ7Hc+LAy2IB5gIiv247KIcWQVBKv9aFXlzJA
UsvwVcaAat9+bEZzt2H5V01oiKjTiP5d1jTsWRynz5/JOSSD/Thr8/KA+LBgN0v9
HyDCTkJRTXf6xw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:30 2026 by rpki-client