This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          ktFKvsKWADsQl7DnXGIZyqwcv1+wE9kt4AN4DuFNwTE=
Subject key identifier:   2E:1C:9F:35:58:7A:FE:7D:04:72:0C:10:CC:9E:C8:F1:34:1D:86:CE
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019BF2E1FBCC74EF0C8E5F117BC2E42E7526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          08DB
Signing time:             Sun 25 Jan 2026 02:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:54 +0000
Files and hashes:         1: 1tT6-zSUf6pEClW_lKEL7VHiKiE.roa (hash: X43xYghLS0syhIw7JXoh8hzfwP6Xl71o8J3+Q4661gM=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: V2l7fTKzxvh+MtDCdApu//sFc7bp27J8CrTpOlOj+FY=)
                          3: DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa (hash: 6F6Qg6kxedLXKk4s17Vv0in/fOumsyERMHRreHir8U4=)
                          4: dIlVX31KigJ6uzmopk-08_s9BaI.roa (hash: qfVMhGQ1p1bTL3qJOPoO+zrwFToB6+GUrIK7ZBJ8Guo=)
                          5: pRYI-6UQ3yoFuethzPMKeOEwBNs.roa (hash: 9Jr2qQjo4i1NAgsOB4ab/Qa+eaYNGkm+we9jGg2Kgcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:fb:cc:74:ef:0c:8e:5f:11:7b:c2:e4:2e:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Jan 25 02:00:54 2026 GMT
            Not After : Jan 26 02:00:54 2026 GMT
        Subject: CN=2e1c9f35587afe7d04720c10cc9ec8f1341d86ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:6f:7e:6b:e7:d6:5f:1f:0d:32:da:b5:ff:
                    1b:a9:44:75:dc:6d:db:c4:a1:3f:24:de:46:a9:8a:
                    c4:ca:9a:7e:29:eb:70:3d:f5:9c:9e:9a:43:9d:ac:
                    a6:b1:f7:01:fb:ff:4c:a7:bc:cb:b1:e2:f9:2c:f9:
                    7d:b6:44:0d:e6:2f:cd:95:63:01:91:fc:19:a1:23:
                    28:48:48:bb:9f:05:8c:57:54:aa:c9:cf:a5:1a:d4:
                    a9:0b:11:d0:98:3e:a3:e4:56:86:12:c4:de:b3:48:
                    35:96:7d:5a:b7:5c:0e:d2:49:85:48:e0:bf:f3:c2:
                    ab:9a:cb:30:f4:c2:c4:c1:29:2d:31:95:5f:af:49:
                    2a:6e:a5:ed:46:95:c2:be:88:9a:cd:f1:1b:e3:d8:
                    ea:af:4c:b7:23:2e:f2:40:ba:c6:f3:6e:6f:54:dc:
                    a8:20:29:42:99:45:2f:75:71:6c:ff:6e:47:31:6f:
                    65:78:a7:67:dd:f5:71:4f:bc:b1:d7:a1:4d:8c:b9:
                    77:e3:69:fb:04:51:21:a9:6b:8d:52:6b:06:52:f9:
                    c4:da:89:6e:d8:01:9e:a7:6f:50:39:17:8d:6e:0f:
                    92:ab:37:a4:dc:ea:53:0c:83:8d:46:59:a3:2a:e9:
                    f5:bb:44:4e:3b:32:0e:41:e2:14:9f:f5:e9:5e:7a:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1C:9F:35:58:7A:FE:7D:04:72:0C:10:CC:9E:C8:F1:34:1D:86:CE
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:73:76:cd:e7:c7:6a:58:55:9a:cf:19:b0:f2:eb:5e:e7:
         82:4d:d2:6b:ba:51:91:2a:ba:36:a9:ff:d2:99:d6:d3:81:62:
         90:e9:e9:e1:d2:28:0a:7e:0a:8f:30:de:d0:c5:f9:f4:1b:d8:
         57:ea:ca:3a:93:d1:55:20:9a:07:24:62:89:9e:0b:db:1e:3c:
         00:68:73:46:5e:86:f1:6b:c1:9e:82:bb:9e:a9:4b:3e:e1:4d:
         d9:ab:eb:8a:41:20:c8:b7:60:53:d1:b5:73:4e:10:44:31:74:
         f5:43:26:69:73:e1:d8:25:89:dd:39:ff:34:29:81:6e:e6:cc:
         aa:ac:0c:b2:7d:c6:b3:33:4d:fa:51:ab:f8:9d:92:3e:bf:70:
         f7:60:1c:eb:07:73:30:c0:e2:f1:d2:ad:fd:dc:68:91:fd:b4:
         2a:55:74:7a:c9:82:37:53:76:e9:3f:95:d4:2f:ce:64:ae:07:
         7f:ec:0c:59:79:1d:71:4f:13:27:99:b2:bd:b8:35:ef:0c:d6:
         7c:60:7f:30:22:72:2f:4d:ad:3f:d9:0f:f4:4b:4c:6a:bc:95:
         ee:9e:51:e5:5d:98:c9:54:87:68:69:10:93:f0:fc:9d:a2:9c:
         6c:00:c2:69:f8:f6:3f:69:79:c9:a6:fc:ba:83:3b:06:e8:8d:
         16:94:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:54 2026 by rpki-client