This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          7qZHrUMTQB68LeQvsSJoJ8kJL59cQxMw7zD0mYml33k=
Subject key identifier:   68:7C:E4:B2:EF:C8:F3:D0:55:FE:53:10:4B:A2:24:26:FB:A4:16:65
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       019BF5E3FB1C033A830C36748E6F5BCB468D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          0337
Signing time:             Sun 25 Jan 2026 16:01:57 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:57 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:57 +0000
Files and hashes:         1: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: PNgp/07hINmVdGu7cxs42UtzpQm8nW02viYTUHEEQY0=)
                          2: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
                          3: xbQqBkC_yIbHrEJGcdsWm38w6AQ.roa (hash: mnlFvqvGOBeR1NpxE1zJLjk/fIHtse1E8f1C2W5NVg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:fb:1c:03:3a:83:0c:36:74:8e:6f:5b:cb:46:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Jan 25 16:01:57 2026 GMT
            Not After : Jan 26 16:01:57 2026 GMT
        Subject: CN=687ce4b2efc8f3d055fe53104ba22426fba41665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:88:3d:b0:14:02:fc:65:74:12:b8:a7:d2:
                    ad:6c:9b:00:12:fa:26:2c:7d:9e:82:96:5b:9d:91:
                    8b:33:3d:b8:2e:77:93:50:5e:28:a0:71:99:75:20:
                    d1:18:d4:16:c8:31:52:9b:6f:d0:f8:ab:76:8a:09:
                    c3:df:28:2b:2f:e6:70:3f:94:3a:73:1a:06:6b:bc:
                    05:1d:a0:ac:86:ba:aa:e0:e4:ea:b0:c7:3b:3a:43:
                    91:07:b2:9e:04:a7:9d:6a:63:0f:bd:ed:f7:3c:be:
                    76:f5:9f:7e:14:5b:61:38:75:d3:36:79:18:e4:bd:
                    3a:bc:88:8c:2b:87:f9:16:85:d2:46:f5:e9:6e:45:
                    b6:36:3a:6f:8e:34:6e:bf:3c:67:84:11:69:d0:f7:
                    1b:f9:f2:6b:b0:28:93:86:c1:6e:16:4a:a8:0e:81:
                    8a:b0:53:96:73:4a:b6:f7:a7:ce:f5:9c:d8:2e:00:
                    55:80:68:06:c0:6e:07:36:99:1a:46:d6:89:c8:e8:
                    ab:ce:b8:d4:0a:b5:03:76:49:1b:67:f1:96:ef:58:
                    a7:81:0a:23:d8:e8:74:c1:7c:d3:1e:81:0e:86:7d:
                    29:b6:0a:dc:16:ea:fb:42:e5:24:a1:c8:95:0c:4f:
                    0a:38:a9:27:95:94:f9:6e:aa:04:28:6e:66:78:30:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7C:E4:B2:EF:C8:F3:D0:55:FE:53:10:4B:A2:24:26:FB:A4:16:65
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:f8:bb:be:db:36:44:bf:0a:08:b6:b5:54:ba:1c:db:94:
         cf:7d:3c:cc:3f:b0:00:f1:46:5c:c4:68:87:19:5c:79:4a:b2:
         04:7d:f7:92:8d:28:4b:79:10:71:f0:61:63:e5:b7:31:5e:c4:
         18:fe:72:be:e4:51:60:13:eb:95:59:95:c6:ad:c5:96:52:a5:
         a7:50:6d:42:5c:29:b5:e1:de:d0:73:18:07:2c:6a:26:28:4a:
         60:90:fc:fa:85:5c:c6:94:7e:4a:3e:04:2f:4f:72:dc:d2:9c:
         e6:fa:07:c1:7a:f6:f1:f9:85:f6:b8:dc:7d:27:49:ee:56:0f:
         1c:df:c0:01:c8:a8:94:ef:90:bb:c1:7d:13:3a:39:31:70:8b:
         4a:9b:cd:71:9f:80:1d:08:07:df:cd:72:73:d6:81:f4:30:ce:
         1c:ed:72:5c:c6:25:20:e3:6e:68:6a:29:5f:73:b9:5d:27:9a:
         fd:30:ae:c2:a1:7c:80:70:47:fa:dc:02:f2:09:2a:26:8c:61:
         d6:e3:92:5a:e5:04:34:b0:33:fc:95:03:28:df:0f:1f:1e:94:
         e3:e3:84:ef:57:0f:b7:a1:c0:1e:73:9a:f4:95:db:a7:83:99:
         27:67:d6:96:18:a7:01:52:dc:c5:56:c4:7c:ff:bd:eb:cf:fa:
         93:6f:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:20 2026 by rpki-client