This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          mKLZqWI4jCYQMwDQKAVWcypp9Q53ixrD2qlZ7UZy+ow=
Subject key identifier:   CC:83:ED:EF:D9:DD:A2:2E:F5:EA:FA:6F:B6:DC:BC:87:51:5C:0C:3B
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019BF5ABC36EFCA5EA72AD9D75B8C3585EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 15:00:33 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:33 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:33 +0000
Files and hashes:         1: 6MLGeDuttKLHmwjE_YPGG7vZqNI.roa (hash: xpTof2JHX21v/k79XQ8lsV/BL0epT0Yvy5Nz69a9itI=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: aCZPvTgrqYCHNPjU5VzMK2ZpkY5qP4qRVs9nlXdeFgw=)
                          3: Z_L2k8DCyYPXTdYIoY3nfdijg64.roa (hash: ivL6lpqNY3Dw4m+rwt+54sqsIUCex6KJIoQEKHYKmZk=)
                          4: dToYhaIhncI2M7qUF8E5Z-MUY1M.roa (hash: i3+aszgM830eFR0OQiZivcXRqqvq84jEAI5IvwlypUE=)
                          5: mKqPJjGRZ0H6YrO1beoh-YgmSrw.roa (hash: b1Fd2JbvZA0tfjGHdD2N1uDoKNQWOj5U77gTuCVwBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:c3:6e:fc:a5:ea:72:ad:9d:75:b8:c3:58:5e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Jan 25 15:00:33 2026 GMT
            Not After : Jan 26 15:00:33 2026 GMT
        Subject: CN=cc83edefd9dda22ef5eafa6fb6dcbc87515c0c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:ac:68:53:08:d4:62:1e:ca:11:59:a8:b4:
                    f9:b3:6f:ed:04:9a:86:3c:73:f4:ab:e2:46:ff:8d:
                    f9:1c:f9:ea:38:ac:af:a9:64:f5:34:3a:e5:23:da:
                    01:38:07:54:d6:f1:17:af:79:59:22:22:66:eb:eb:
                    21:c1:b8:ad:b8:3f:f1:73:4e:bf:8c:cf:ff:62:a1:
                    4a:e3:b6:42:63:32:35:9f:fa:cc:74:ac:5f:03:ef:
                    ff:26:60:d4:b3:82:c9:96:d9:4d:9f:aa:c5:62:a1:
                    fe:f1:6c:14:fa:2c:79:21:9e:a3:82:4f:79:a9:9d:
                    d7:95:6b:3e:f3:77:3c:f4:33:95:61:43:9a:dc:04:
                    12:d4:d3:3b:08:a5:e9:cd:63:77:06:54:ec:62:53:
                    69:63:20:3f:64:13:42:61:ae:90:89:aa:38:88:15:
                    7c:ec:5b:e7:89:99:3d:8b:a5:ed:95:a0:be:81:79:
                    9b:9d:dc:c7:30:3c:f6:bd:7f:f6:1e:a3:ff:8a:61:
                    bc:f9:e4:56:cd:59:33:65:ec:78:38:a3:6a:d1:cb:
                    43:74:8b:80:0c:87:c1:6d:87:a7:6e:3b:7e:6f:9b:
                    8c:98:17:bb:95:c7:1a:c5:f0:36:20:10:2b:cf:86:
                    38:57:61:96:2c:78:7e:4f:df:37:4b:55:b2:4f:6c:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:83:ED:EF:D9:DD:A2:2E:F5:EA:FA:6F:B6:DC:BC:87:51:5C:0C:3B
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:27:0e:4c:a3:cd:1c:86:a8:8b:a8:9a:17:15:54:27:ca:
         0f:09:ca:7d:5d:7e:87:06:96:ae:5c:6f:5f:af:78:86:57:29:
         1e:37:06:c4:ed:e5:6c:a4:c0:68:40:52:47:c5:47:64:7f:fe:
         b8:03:b2:be:c8:34:b0:f3:98:c5:03:31:6e:18:6d:c8:6c:76:
         2d:8b:22:6f:31:e2:64:d0:42:38:99:34:42:14:c7:99:65:22:
         c6:4e:6c:e3:40:0e:f2:aa:3e:84:ea:0f:ae:a6:67:d7:0a:5e:
         87:c3:43:76:0e:32:b8:39:46:1a:f8:2d:40:52:de:06:86:8f:
         32:42:3c:c5:5e:26:c2:11:bd:fe:10:d1:fb:de:5c:7a:70:62:
         dc:42:8a:80:20:2f:8e:26:df:ad:56:f2:1f:32:47:1a:b1:5c:
         67:b4:3a:a2:46:dd:c3:c8:5f:20:d7:1a:3b:5d:d2:c6:8f:df:
         3c:f6:3a:95:94:ba:7b:7a:6c:34:bb:20:30:73:62:96:08:e0:
         8d:49:bd:7a:e6:10:ba:bb:5a:95:5e:c1:a7:b3:f8:a6:2b:7c:
         c0:b3:f1:81:3b:d2:9f:c6:d7:60:5e:41:08:db:b4:da:e9:04:
         09:72:8f:55:04:2f:35:31:31:6e:04:a0:55:d6:02:62:1b:82:
         a1:56:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:30 2026 by rpki-client