This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          RtMK5m7nW+I5sEV0oslJTMCzQQZc3NKBSNd4xgnpEW0=
Subject key identifier:   DF:E3:FF:FB:F3:DF:AC:30:7D:F7:44:18:9B:43:C8:54:6B:E9:EE:64
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       019BF83F277D2322C7CD523911EB215CB8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          0E3C
Signing time:             Mon 26 Jan 2026 03:00:46 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:46 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:46 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: nU2ICIYYA+6GrDgdpfBb8LYVMXne3KcVCqfsAhVquhA=)
                          2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:27:7d:23:22:c7:cd:52:39:11:eb:21:5c:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Jan 26 03:00:46 2026 GMT
            Not After : Jan 27 03:00:46 2026 GMT
        Subject: CN=dfe3fffbf3dfac307df744189b43c8546be9ee64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:49:c5:92:91:90:1c:ba:84:a9:33:de:31:
                    6e:d7:09:19:d4:89:83:53:31:b9:de:7e:be:87:0e:
                    1e:86:f9:c3:0b:9a:bf:57:b5:57:5e:fb:10:b7:d3:
                    ab:c7:0b:00:85:18:c4:41:db:b6:fa:d8:71:2e:ab:
                    43:24:e5:d0:80:e5:5f:37:dd:31:d9:ae:34:8c:10:
                    43:dc:89:42:15:ca:8c:58:ec:3c:2e:0b:47:8e:58:
                    d9:db:a3:99:26:68:31:bd:cd:87:56:00:33:af:24:
                    37:11:73:88:c0:93:4f:67:5a:d8:11:8d:d3:a3:05:
                    4c:0a:c6:1d:60:af:65:3d:6e:63:35:f7:22:0b:eb:
                    f3:57:01:07:a2:27:74:19:72:3e:b8:6d:80:1a:98:
                    d6:a1:38:a1:84:50:d5:f9:a5:06:08:7c:ed:d6:9e:
                    17:b3:d6:48:f0:fe:6a:fe:47:ca:b7:ed:e3:23:26:
                    77:07:4e:19:67:a2:56:b9:02:20:7c:31:87:ab:97:
                    cf:41:4c:8e:b9:f9:60:d5:03:d5:c0:09:56:dc:b6:
                    f9:a7:36:cf:44:64:1d:7c:bb:bd:1e:9b:aa:a5:99:
                    6e:cc:10:b0:61:8b:4d:69:1c:94:86:d3:74:1c:8a:
                    33:41:27:dc:5a:17:0c:63:cb:0a:11:62:e5:97:b4:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E3:FF:FB:F3:DF:AC:30:7D:F7:44:18:9B:43:C8:54:6B:E9:EE:64
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:85:fa:94:2d:5c:6e:17:87:f8:2f:e3:9e:b5:8e:12:d0:0e:
         85:80:2a:71:7a:da:97:e7:3a:54:3a:b2:f5:95:f9:02:40:c9:
         f6:bd:c1:0d:12:d8:d3:b7:e2:12:32:0c:37:e6:4c:f0:09:11:
         0e:68:09:72:6e:cc:f4:13:f6:04:3c:2b:f3:2d:ad:6f:8f:47:
         46:45:e7:a3:11:9a:25:d2:62:14:81:36:3b:64:1c:0f:01:96:
         75:bc:ee:be:92:c0:fe:28:43:59:c7:8a:66:1a:fe:56:00:ab:
         0d:c7:f6:1c:53:3a:35:67:c9:70:4a:fa:b5:80:af:af:ac:9c:
         d3:f6:e1:2f:f6:af:83:70:63:7e:de:33:d0:18:af:b7:26:c6:
         ae:54:2f:27:04:43:98:8f:0b:92:03:4b:2e:6f:cc:21:77:92:
         d5:c3:a8:dd:0c:a3:c8:a4:9f:2b:3e:66:f8:ca:7a:df:fe:a9:
         f2:aa:8d:21:6b:6c:63:23:df:fc:bf:f3:ac:42:fe:52:05:e8:
         f3:1a:a8:8e:5b:bd:c2:fa:57:f6:e7:ee:80:9d:8f:cc:9c:e9:
         48:d2:c4:f5:4b:a4:de:c0:03:e2:8f:0f:0c:d7:df:de:d4:90:
         0a:ba:e8:6c:bc:9a:75:6e:7d:1b:48:aa:a7:9a:9c:8a:33:f9:
         ca:7a:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:17:28 2026 by rpki-client