This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          ws7PoliD5uZ1Dk8hU4zjzxAlTzlyYLW8NbcrXr8Eln4=
Subject key identifier:   99:88:DE:D2:9C:C0:F1:0D:B2:73:25:74:6A:36:63:C4:A7:ED:9D:54
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       019BF4D05600D961096B018CC3A3E7A20080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          181E
Signing time:             Sun 25 Jan 2026 11:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:52 +0000
Files and hashes:         1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
                          2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
                          3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
                          4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: L7lwcOnMEV5UWNRkh0zoSw5k/H69gyL5J1AFqNu0BAA=)
                          5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
                          6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
                          7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
                          8: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
                          9: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
                          10: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
                          11: aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa (hash: 8UFm1q7FERl7hmEhN4RSU3M8aef8QuPV/UHa7FsVID0=)
                          12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
                          13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
                          14: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
                          15: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
                          16: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:56:00:d9:61:09:6b:01:8c:c3:a3:e7:a2:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jan 25 11:00:52 2026 GMT
            Not After : Jan 26 11:00:52 2026 GMT
        Subject: CN=9988ded29cc0f10db27325746a3663c4a7ed9d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:be:f3:20:d5:b1:45:84:ee:5d:66:00:75:
                    ad:b0:54:d6:9a:fd:ee:05:18:fc:94:4c:01:0b:34:
                    30:1c:6d:35:14:e9:aa:84:82:73:7b:ac:37:37:f8:
                    58:07:59:bb:80:88:1c:90:06:22:60:67:3f:09:e4:
                    9b:7a:a4:58:b3:59:fd:df:43:46:23:38:3e:1b:9c:
                    28:48:87:20:6d:c7:6b:d4:aa:d2:dc:0a:54:b6:02:
                    0b:c4:18:08:3e:f2:84:c0:87:9c:86:36:01:2d:dd:
                    85:e4:b1:cf:d1:37:0c:ab:5e:1a:b6:47:46:e2:96:
                    e0:8f:be:f5:84:fd:2c:63:29:13:9b:e0:13:98:91:
                    7d:a9:cf:38:b8:f3:d4:7c:ef:a4:a1:69:63:fb:5b:
                    4b:35:4e:37:b1:5e:ec:58:0d:49:0c:8a:18:2e:4b:
                    8a:92:7b:3d:00:86:c6:83:ee:d5:b1:cb:6b:44:6b:
                    59:e6:43:7b:31:78:a6:1a:e8:af:81:5a:3c:af:9e:
                    32:93:cb:65:09:66:02:51:9b:e2:c0:bc:5a:f4:1d:
                    5f:6b:40:bd:48:a8:80:ef:86:d6:0a:8b:79:f8:26:
                    3e:44:5b:b5:92:f0:72:a2:ed:ab:a8:c0:9c:18:09:
                    d5:ee:a8:ae:f9:94:2a:14:02:ea:a5:8d:13:bf:e9:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:88:DE:D2:9C:C0:F1:0D:B2:73:25:74:6A:36:63:C4:A7:ED:9D:54
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:3d:65:ea:01:ea:c0:d0:a0:5e:bb:f7:f2:ec:c6:4e:68:
         6a:ac:7c:f4:35:32:72:3f:ed:7e:3d:16:01:d6:39:88:2c:a1:
         d1:46:47:0c:b1:36:c1:08:c7:89:fb:50:2d:0a:fd:70:c1:d1:
         93:65:2f:8a:25:dd:1e:7d:cd:77:3a:1a:92:f9:55:89:3a:21:
         93:30:a9:2a:5a:fc:9f:c7:f4:75:b0:fe:63:32:ff:02:57:22:
         95:6f:7e:e5:68:5d:94:6f:cd:50:a4:0d:57:de:b4:73:5a:36:
         e8:fd:cf:92:fb:8f:96:42:50:80:0e:ab:60:dd:5a:83:cf:89:
         b3:2a:56:93:2f:d3:d9:d2:6c:b7:b6:b4:41:25:dc:b2:fb:7e:
         ee:5e:72:ec:63:a3:b6:03:ac:fd:a0:10:0f:bc:ff:ea:9b:73:
         c3:b6:07:af:a2:18:75:f0:a0:fe:df:69:1c:88:d1:05:c7:b4:
         29:63:6b:c7:db:1b:07:30:2e:2d:f7:b5:67:f8:2c:12:13:00:
         ff:59:4a:cc:82:86:d2:a4:b9:92:c4:fc:8a:97:22:59:ed:ce:
         3b:6f:f8:8f:05:d5:55:43:54:dc:e4:b7:99:13:34:d6:14:37:
         bf:63:c6:a0:c6:dc:2e:39:d7:89:3d:c9:89:99:52:ee:b3:88:
         b3:59:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:46 2026 by rpki-client