This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File:                     v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier:          lMcLmDyoAq0vxob41BMwwRv952MSB1J4NVtEn5qGly4=
Subject key identifier:   26:1F:4B:DE:5D:00:78:8D:58:D5:68:F2:68:C7:4B:84:ED:D6:76:CF
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer:       /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial:       019BF463029A7FACE0A80E6AACE647F33340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number:          16C1
Signing time:             Sun 25 Jan 2026 09:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:27 +0000
Files and hashes:         1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
                          2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
                          3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: NiiFzQsdmhIxS8d3NNy2tXz9WgFSbtlijvRTGRTr9UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:02:9a:7f:ac:e0:a8:0e:6a:ac:e6:47:f3:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
        Validity
            Not Before: Jan 25 09:01:27 2026 GMT
            Not After : Jan 26 09:01:27 2026 GMT
        Subject: CN=261f4bde5d00788d58d568f268c74b84edd676cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:e8:df:cc:a7:c6:d5:ab:a7:48:73:80:22:
                    65:3e:68:fb:0e:ff:75:ba:ec:c4:01:33:0c:90:ef:
                    01:9d:72:cc:54:ed:13:aa:8b:f7:3b:ee:c3:4c:94:
                    5c:c5:cf:01:d1:9d:e9:c0:77:98:9f:90:46:51:db:
                    e5:f0:4e:a3:54:5b:fc:eb:09:41:5b:ac:8d:69:06:
                    d8:9a:74:1c:7e:93:1a:14:e9:a8:3f:0c:87:d8:bc:
                    88:83:6b:31:24:53:cb:09:e8:a7:3f:05:e4:90:52:
                    a5:97:ac:41:e0:5a:63:a8:e5:09:52:ec:8e:dd:eb:
                    37:b2:78:b2:b2:74:93:a9:c7:a3:35:b0:6e:ee:f9:
                    c2:b7:07:4f:e8:7d:22:94:68:58:2a:83:cc:52:f1:
                    4e:1c:37:e7:77:de:1b:27:40:64:a3:c2:44:16:91:
                    ef:cc:9f:9a:25:0f:ad:5d:a1:30:48:67:09:51:d7:
                    45:9b:e7:fc:97:e4:1c:8c:b2:25:86:52:ee:a6:2b:
                    28:76:cd:1e:53:0e:5d:47:0b:92:5f:e6:c2:93:c9:
                    04:03:a3:b4:2e:89:da:a4:45:c0:16:c7:3a:cf:c3:
                    51:1d:c5:74:dc:11:32:94:0c:bf:2d:c8:b5:ab:45:
                    4b:6c:24:0c:62:90:25:c5:05:67:aa:cc:e6:51:dd:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:4B:DE:5D:00:78:8D:58:D5:68:F2:68:C7:4B:84:ED:D6:76:CF
            X509v3 Authority Key Identifier:
                keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:9b:2e:b9:4f:a6:26:4d:d4:e9:ff:30:98:36:6a:01:6d:
         25:c5:16:15:f2:bc:3f:04:e2:8f:91:3c:f7:74:6b:65:03:df:
         70:cb:66:34:56:97:82:ab:e8:ce:b3:34:44:83:2a:ac:b8:32:
         38:d6:da:7e:ec:e8:b1:6b:f2:97:0a:94:8c:67:e7:46:b0:a0:
         97:72:7a:d7:94:58:9b:1d:35:1d:db:08:41:08:7b:f5:81:0b:
         ad:5d:da:56:e5:31:7b:9a:32:dc:0c:d4:c8:0c:8b:ae:ef:3d:
         5b:26:c2:df:0b:e7:bc:b8:fe:39:4d:d7:e8:bf:8a:a0:9b:06:
         e1:eb:7f:07:2d:9b:a0:ae:30:b3:d2:a7:cc:c0:5e:b6:a1:0e:
         5c:43:52:fe:99:a6:43:86:fb:1e:e1:9b:20:41:1d:91:7e:b4:
         a2:71:ce:0d:f3:a4:ef:d5:e8:b1:34:13:9b:26:87:3c:1c:26:
         67:ef:78:1f:cc:7c:85:c6:cc:53:67:1e:24:42:22:1c:6f:40:
         2f:c3:ea:2b:17:e1:d6:ad:61:21:66:73:37:3d:85:42:76:03:
         73:d4:be:95:2a:f6:ae:04:f2:8c:b6:7f:c3:db:15:37:3b:06:
         cb:19:b2:81:17:28:43:19:83:58:18:4a:63:ec:a0:12:f0:20:
         5f:ae:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:46:43 2026 by rpki-client