This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          xDXJK53pjipV29ukkS1QjzvnDrWoQgTuLFKam0WBK1s=
Subject key identifier:   5D:F2:8A:30:FA:B4:50:B2:1A:AC:EA:D7:4C:02:FB:8D:3A:EF:C6:47
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019BF6877AB50DE5A678E68E68A9A1F92947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1421
Signing time:             Sun 25 Jan 2026 19:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:32 +0000
Files and hashes:         1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: cHHCY5LT9rRMp8+nTEBbwchYQUl6aCRlQTKQsCH5fBc=)
                          2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
                          3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
                          4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:7a:b5:0d:e5:a6:78:e6:8e:68:a9:a1:f9:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Jan 25 19:00:32 2026 GMT
            Not After : Jan 26 19:00:32 2026 GMT
        Subject: CN=5df28a30fab450b21aacead74c02fb8d3aefc647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:8f:6e:e0:5b:85:bf:87:b6:aa:10:9b:fd:
                    51:da:89:84:7e:ec:0a:50:e0:4b:28:a7:82:58:d2:
                    3a:45:99:1a:76:f9:0a:33:eb:76:7a:1b:bb:12:85:
                    f5:77:a5:81:35:84:46:91:63:c5:f8:8f:08:0c:d5:
                    62:07:db:55:b3:25:07:64:51:00:55:ba:83:a9:27:
                    5d:33:52:d3:88:6f:af:31:18:e4:11:fa:1b:a7:cc:
                    15:b5:9d:e6:e5:0f:13:1b:b6:c5:6c:ca:10:33:a7:
                    f6:30:b0:2c:a2:a9:3e:53:13:47:e2:e5:06:d3:3a:
                    a1:4a:46:6d:01:8e:1e:b2:e7:cf:9d:5b:a3:71:cf:
                    92:e4:74:42:ed:22:25:e8:fb:fd:b6:85:5f:63:cd:
                    b9:93:f6:ff:f1:58:74:c7:0f:18:69:92:5b:7d:79:
                    e9:9e:37:f3:0c:9f:31:a9:be:83:83:3f:7b:a3:65:
                    3d:b6:7c:cd:ab:6e:d4:40:cf:08:8c:3b:50:ce:24:
                    f0:bf:6c:ab:3a:3d:21:ca:a3:0a:68:44:a4:f3:83:
                    64:a8:90:db:39:ed:dc:50:74:ee:be:e9:a7:b6:ff:
                    a1:92:6d:10:52:2a:45:fe:44:58:6b:89:5a:2c:f5:
                    79:1d:b0:65:a2:e1:95:f6:ec:8c:17:89:8d:4c:f0:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:8A:30:FA:B4:50:B2:1A:AC:EA:D7:4C:02:FB:8D:3A:EF:C6:47
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3c:e8:3b:08:9c:a6:9a:68:44:c5:3d:23:b7:46:af:7c:2c:
         5b:e6:1b:3e:7f:86:c7:3c:d2:1c:22:eb:63:f9:95:d9:11:a7:
         ae:04:31:34:3a:58:ad:ad:f1:01:38:30:13:3d:54:82:ec:9e:
         5f:a4:72:de:1a:b4:cf:e8:fe:b0:83:f9:70:23:47:0b:eb:f3:
         81:74:3f:b4:7c:e4:e0:41:d0:e1:c6:05:e2:a6:5f:42:14:d5:
         d7:13:31:89:1d:21:44:ef:c0:1b:05:6f:33:f3:7d:ac:b1:27:
         c7:83:5a:8a:ac:42:30:64:15:67:5e:26:d3:d3:4e:6a:48:6b:
         97:99:45:3b:e4:31:7b:5c:cb:3a:ff:8d:0e:2a:32:ea:97:5f:
         79:71:22:29:f5:cd:b3:e2:9a:2d:c3:09:d8:48:c0:17:43:a0:
         e3:07:cf:8c:c2:01:2d:6c:43:5f:d7:45:44:a0:a4:da:c0:ef:
         d2:76:7d:72:00:db:18:b0:2b:cd:05:60:f2:0c:3f:ae:61:63:
         f1:1d:ce:df:99:83:cc:fc:ac:b2:97:60:93:4d:c7:d6:1e:57:
         5d:32:4d:55:a5:51:f5:d9:11:0c:47:d9:d7:40:52:59:f0:26:
         4d:cb:ad:e4:c3:7f:91:c4:2e:aa:1c:df:19:d8:c6:b8:97:b3:
         e8:9a:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:50 2026 by rpki-client