This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File:                     BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier:          Z/yg4r67G5aBAG7IU6qXZAyRTJnhDVm7tUJB5CqnIQw=
Subject key identifier:   10:05:52:4A:3E:D3:76:A2:F6:FE:2C:6C:75:72:9F:69:56:E6:AF:6A
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer:       /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial:       019BF42B7F55014734162F02EB57E90BD5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number:          154C
Signing time:             Sun 25 Jan 2026 08:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:49 +0000
Files and hashes:         1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=)
                          2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=)
                          3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=)
                          4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=)
                          5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: 8DQ6s8wW+LUjBwgMvCGhe8kIQpiJSRgcwIjzMqL+HVw=)
                          6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=)
                          7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=)
                          8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=)
                          9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=)
                          10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=)
                          11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=)
                          12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=)
                          13: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=)
                          14: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=)
                          15: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=)
                          16: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=)
                          17: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=)
                          18: rlx2TFrnsWfNyt69GTJcopl2RRg.roa (hash: nBXOutrLGZzfmQxQk2a+ssP5ZodYo/5AbNM+eSuj5rA=)
                          19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=)
                          20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=)
                          21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:7f:55:01:47:34:16:2f:02:eb:57:e9:0b:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
        Validity
            Not Before: Jan 25 08:00:49 2026 GMT
            Not After : Jan 26 08:00:49 2026 GMT
        Subject: CN=1005524a3ed376a2f6fe2c6c75729f6956e6af6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:9e:a9:08:9b:4d:05:03:7d:a8:d5:6a:f5:
                    f5:4e:f2:83:82:5d:7b:a9:8e:30:ef:c1:5c:25:b0:
                    d4:a8:41:ef:f6:6e:cd:d5:3e:8c:c1:7c:ce:d5:52:
                    15:3a:12:59:a1:d6:55:78:49:cd:6b:09:b9:91:be:
                    82:7a:82:84:c2:ea:22:93:1c:d0:29:32:18:de:f9:
                    ad:66:83:f0:61:21:69:8f:b7:0d:78:db:cf:b3:7a:
                    84:26:5b:2d:a2:7e:15:c7:cf:90:01:c6:45:48:02:
                    93:27:8e:33:5e:6b:9b:db:25:14:8c:43:65:db:f1:
                    7e:11:d0:b7:01:84:88:50:98:54:09:88:c5:37:62:
                    e6:9b:96:85:e7:14:c5:75:8b:83:30:78:cb:39:ed:
                    91:aa:c7:2e:3c:e1:b2:54:c1:09:8b:82:67:6a:17:
                    e9:e8:5c:66:12:89:9f:27:37:3c:42:bc:f7:a9:73:
                    8b:c6:c7:b9:ff:76:29:7f:92:e0:a3:08:93:ef:d3:
                    cf:d7:18:fb:f2:78:cc:d4:9e:95:c3:ed:d8:e9:71:
                    fe:8a:08:e6:c1:08:0f:7e:ee:1b:88:69:cb:72:1a:
                    9a:60:07:10:e4:b2:84:0c:10:82:d8:9e:c5:5e:6b:
                    f5:a4:11:03:a4:d6:89:e5:4c:24:81:8e:32:25:71:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:05:52:4A:3E:D3:76:A2:F6:FE:2C:6C:75:72:9F:69:56:E6:AF:6A
            X509v3 Authority Key Identifier:
                keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:58:d7:c9:c7:ea:d4:ae:cc:0d:24:9e:68:9f:83:84:43:57:
         7c:32:92:28:0e:04:ae:a9:ad:bf:27:ad:09:0e:88:92:11:b3:
         09:7f:ee:fd:99:a3:39:bf:ec:76:13:54:b5:4b:2e:a0:80:4b:
         5d:1b:f1:33:67:b1:18:ce:f1:5e:9b:48:a1:18:b7:82:35:63:
         90:ac:82:22:05:35:9e:bd:f1:fe:2b:9c:e6:2b:7c:04:11:d3:
         b3:e0:b9:fe:75:9e:55:b9:96:1b:ab:e3:ad:e5:9e:9b:ec:47:
         25:7c:5c:85:f1:72:89:71:17:69:cb:e4:a9:1f:1d:f6:18:04:
         3a:b8:c7:0e:3d:ca:e3:c9:be:e9:df:76:c4:96:37:11:78:69:
         cc:5e:fd:6b:09:cb:05:60:44:4d:aa:bb:38:a3:0f:64:05:e2:
         af:43:7f:94:7e:04:0e:9e:23:d4:07:94:84:34:f3:ce:68:9b:
         7b:dc:46:db:3e:53:6d:41:69:39:d1:4b:06:75:f8:2f:5c:be:
         12:ed:2e:6c:85:7b:18:e0:99:cd:ea:0e:74:c0:f2:7f:c3:dd:
         68:d9:b9:d0:ad:09:6b:48:b9:26:a9:2b:77:b4:c2:6b:be:cc:
         5b:3b:98:c8:c0:be:25:d6:37:c5:c1:a2:51:60:0b:f5:56:ba:
         26:57:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:37 2026 by rpki-client