This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File:                     BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier:          BXvMDzxYHy+vl74F5zGfqQdsNMwujwBBiCY6fZDKU5Q=
Subject key identifier:   90:87:68:E5:A6:EC:22:7D:61:0F:A6:CC:52:F2:91:A9:7C:F2:46:76
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019BF3BDD3AA9C1AFB886D74787282F32870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number:          1636
Signing time:             Sun 25 Jan 2026 06:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:02 +0000
Files and hashes:         1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
                          2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
                          3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
                          4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
                          5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=)
                          6: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
                          7: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
                          8: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: Xkd6XKnm5WUEpDu3sh0BPjZ2qYW8G81GD8RRrXHSiu0=)
                          9: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
                          10: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
                          11: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
                          12: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=)
                          13: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
                          14: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
                          15: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
                          16: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
                          17: YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa (hash: 8Vy5h9LCNlGMuWAukt3eAgST/HOlYo6a2vD/jiISkbs=)
                          18: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=)
                          19: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=)
                          20: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
                          21: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
                          22: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
                          23: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
                          24: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
                          25: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
                          26: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
                          27: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
                          28: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=)
                          29: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
                          30: vPIPys_ck72jylL-AUvqLHtAd44.roa (hash: EaJRNirRwPO81qiwnsAEnRZoQLT1oD2oeGnXmmJGVRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:d3:aa:9c:1a:fb:88:6d:74:78:72:82:f3:28:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jan 25 06:01:02 2026 GMT
            Not After : Jan 26 06:01:02 2026 GMT
        Subject: CN=908768e5a6ec227d610fa6cc52f291a97cf24676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:35:e1:8e:be:8f:a4:1b:d8:7d:0d:7f:81:
                    e8:29:36:4a:27:48:7d:09:4f:de:3c:af:11:76:ed:
                    89:b0:75:51:b9:d4:1c:15:35:b4:0b:2f:ef:c5:f6:
                    8f:0a:44:1d:82:28:3c:b1:1f:b1:5f:0a:f2:65:17:
                    23:ce:56:2e:9b:59:1b:f2:42:92:de:b0:ef:61:90:
                    2a:62:54:e1:b0:d2:76:ab:b5:e5:d8:af:a0:23:6c:
                    42:a1:73:64:d3:cb:33:5f:c7:93:f1:d1:ab:ba:a7:
                    d0:80:e0:67:e1:43:c4:93:57:11:cd:d2:a0:cf:fa:
                    0f:0b:96:1e:ea:e6:81:9e:aa:16:dd:ec:08:5a:6e:
                    a7:3a:92:9f:e2:fe:ed:df:b5:ff:89:ad:f0:05:7d:
                    d4:26:b7:3c:a2:03:60:9e:dd:fe:cf:e1:a6:bc:34:
                    38:89:15:1a:d7:22:c9:83:c3:2e:58:51:72:ad:91:
                    32:73:93:dc:a8:78:16:15:7c:f6:57:08:d2:3e:4c:
                    b6:2e:a4:7d:70:2d:46:db:6c:55:67:be:2a:e5:52:
                    50:d5:91:2b:9a:42:8b:a2:85:88:18:b1:60:14:95:
                    0e:d8:ba:fd:8f:4d:1b:f7:99:f0:04:21:59:56:06:
                    11:10:1c:66:3a:a0:14:0a:1d:99:7d:f5:fe:d0:fa:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:87:68:E5:A6:EC:22:7D:61:0F:A6:CC:52:F2:91:A9:7C:F2:46:76
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:28:d7:13:84:29:1e:0e:6d:3e:bb:df:d2:b9:35:91:80:77:
         1f:f7:36:ed:d9:96:34:8f:f7:ef:7f:35:79:6c:68:33:ce:dd:
         f9:dd:1c:bf:bf:45:fe:7f:31:1c:1d:a9:93:6c:16:0b:b3:24:
         91:8e:cf:ab:1f:be:e2:10:37:5c:29:78:2f:aa:7c:d9:dc:1d:
         8a:78:9a:8c:05:78:50:3e:29:1a:e1:02:4e:c7:f7:f7:6d:38:
         db:eb:a3:7b:20:6e:f2:99:9c:67:b7:91:73:4b:91:b2:57:c7:
         5d:30:a5:c7:42:ce:71:8f:76:af:78:2c:94:00:6e:2c:9e:f1:
         bd:50:30:31:23:c0:c6:0e:37:45:f2:6a:1b:3f:0a:13:54:e6:
         e1:15:31:07:87:3e:10:d2:8a:a6:bd:64:9a:c4:41:1e:6f:82:
         a3:86:fa:e8:16:07:c4:c0:73:01:bb:32:26:b2:46:53:fe:ae:
         14:a2:a7:af:b5:9f:e1:d6:ee:98:8b:7f:47:b6:71:27:11:a6:
         93:4b:93:87:f2:cd:72:b5:d0:de:0a:bb:b6:ed:1d:28:de:a4:
         5f:8c:5f:8e:08:ba:ec:c6:a6:62:a3:b5:a9:03:3b:7b:ac:47:
         fe:9e:0a:c4:e4:27:8c:20:87:e3:8b:d0:33:5d:19:5f:44:74:
         20:76:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:00 2026 by rpki-client