This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          HXK1WeLrh4+g/zbDGfxWhE9cj1pMDv9LZDPvugkN9t4=
Subject key identifier:   D8:06:2B:72:7F:CC:4B:FD:F9:C9:1B:4A:A7:67:13:33:95:C1:87:1E
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019BF5ABCCE47CDACB4EE0F3D8EA03FB5D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 15:00:35 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:35 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:35 +0000
Files and hashes:         1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
                          2: 6FH6tzQ-OGL1olRZmGsLavyetEI.roa (hash: t7CC5E4Cq4qAeFI/xEX8HmFf3pMyY/Orv1k1m68NVmM=)
                          3: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: 7sn8ya2OCRf3X+/RlQ5NLButo73IZcsp/jzrUZmXtYw=)
                          4: zt1e9hXqnKC7GTDcsl5TmahbR14.roa (hash: cMjId05GIC2DoYaxGvqZ9tQQexKxYbYtbXXHMb77nW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:cc:e4:7c:da:cb:4e:e0:f3:d8:ea:03:fb:5d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jan 25 15:00:35 2026 GMT
            Not After : Jan 26 15:00:35 2026 GMT
        Subject: CN=d8062b727fcc4bfdf9c91b4aa767133395c1871e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:2c:6b:ac:40:12:b2:08:b3:de:4a:56:0d:
                    b6:9f:e1:6e:d3:c0:15:cb:a8:5a:9e:43:25:31:33:
                    8e:93:99:f6:41:8f:ab:51:57:e7:11:ac:7f:ed:ee:
                    a7:26:be:94:d5:18:82:5d:4d:dd:e3:5f:de:68:2e:
                    9d:d7:a6:c4:2a:02:1d:05:13:80:8b:03:7f:90:07:
                    49:00:d9:bb:78:01:83:80:bc:ca:13:7f:bf:c2:20:
                    d7:1f:43:45:fc:c3:65:2e:ed:bb:64:11:b3:12:2c:
                    ec:9c:b2:62:b8:04:3e:c3:ec:ce:51:7e:6a:28:ab:
                    2e:17:98:5e:11:62:17:90:7f:30:dc:46:2c:0f:92:
                    43:a5:35:5d:cd:ae:74:90:f9:9f:be:77:d8:89:4f:
                    77:f4:be:85:d7:a9:eb:07:f9:82:03:3f:46:bb:d1:
                    b5:65:3e:45:97:99:03:63:28:35:e0:74:11:f6:6f:
                    66:44:6d:27:b7:45:05:7d:02:e9:40:c5:0c:d9:c9:
                    7d:d7:23:8a:d0:7d:8f:19:d8:15:2f:1e:be:f5:61:
                    96:21:41:48:27:ce:70:75:86:cd:bf:12:04:7b:5d:
                    b7:29:96:d8:5e:cf:bc:9d:f0:5f:2e:43:fb:94:c5:
                    90:8c:ef:38:9d:dd:61:63:b7:93:5f:5e:6e:ed:02:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:2B:72:7F:CC:4B:FD:F9:C9:1B:4A:A7:67:13:33:95:C1:87:1E
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:b2:72:01:40:83:df:4d:82:b0:cc:73:bf:c8:28:6b:68:
         86:90:4c:88:b2:7a:bc:24:95:d4:13:92:04:57:1a:b7:6f:ed:
         f8:78:82:7a:1b:8b:3b:18:7a:b0:a2:27:09:6a:da:32:cc:83:
         78:d7:c3:ed:9b:52:08:23:7d:90:5e:87:4e:05:91:46:10:83:
         0d:79:0f:de:79:ba:25:81:f2:7d:65:68:4d:e0:92:9e:26:59:
         6b:a6:90:b6:89:08:41:d8:c8:d3:82:7b:75:6b:2b:39:4c:d6:
         7a:8a:cd:e0:d5:c4:d5:f4:9c:4f:8c:a4:a0:d6:d6:e8:f3:df:
         8f:21:0d:e6:ae:c2:2b:ce:4e:7a:26:3a:98:2a:4e:57:9a:24:
         47:14:7f:42:d4:a6:62:43:e7:f5:0f:f6:de:16:84:f2:cb:eb:
         3a:1a:2d:1e:bd:48:f7:3d:14:44:5f:b8:c7:7b:a8:50:4d:13:
         47:7b:be:a2:56:ca:e8:80:08:54:1a:b0:f1:29:53:8d:bc:c1:
         46:e0:ba:c1:92:85:c2:c6:09:27:bb:e8:01:60:ee:0a:f4:f3:
         83:8f:c7:fe:01:12:74:dc:f7:d6:02:a9:e8:13:f4:9e:49:a2:
         2c:c8:9d:7c:b4:9d:c4:c4:df:4c:79:f2:54:13:29:87:83:e4:
         bf:6a:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:15:04 2026 by rpki-client