This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          +f7I4mmduY/WmJh411a68K28EGq6SmzddOlwW6CoT9s=
Subject key identifier:   8F:22:DC:0C:B3:8F:97:AB:16:30:E2:20:FF:83:FE:13:7C:9F:E3:18
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       019BF53DF35D063BA9C11AB0E420BE163128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          1779
Signing time:             Sun 25 Jan 2026 13:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:36 +0000
Files and hashes:         1: 8BMsIpep3t4zLDNzNTQPbvhtEs4.roa (hash: Kc6FDAfUDHb/D1pz1W/TVvRE/xKyOIdC92JUUP2l6Co=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: 5hUpChtyXD2Oe0Qy8UsaMt2o+oGdMtwDwjMLPv75YXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3d:f3:5d:06:3b:a9:c1:1a:b0:e4:20:be:16:31:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: Jan 25 13:00:36 2026 GMT
            Not After : Jan 26 13:00:36 2026 GMT
        Subject: CN=8f22dc0cb38f97ab1630e220ff83fe137c9fe318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:2c:0d:d0:16:46:2b:c9:95:98:5c:c8:08:
                    83:f9:4b:cb:e9:8b:3c:78:91:de:9f:b7:bd:c5:86:
                    4f:a8:0b:b7:15:30:8a:28:3c:f8:3b:5b:3c:72:c5:
                    2c:9f:76:70:d1:6f:b2:1b:6b:09:cd:ea:d1:2c:72:
                    11:3e:c9:ad:95:89:dd:58:8f:3b:ba:1d:83:83:3d:
                    41:4d:16:31:42:dd:18:e4:45:a9:dc:fb:2a:ff:29:
                    55:5f:98:10:df:0c:0e:c2:74:1b:13:9c:0e:79:82:
                    3b:0b:f2:f5:f9:56:e6:f1:fb:c9:1d:2a:97:14:4f:
                    40:5a:b2:59:c9:fc:39:95:70:37:0b:32:a4:62:89:
                    da:cf:fc:b2:99:74:44:24:8f:f5:12:4c:fc:03:f0:
                    74:28:8c:4b:b8:c1:e0:0b:67:98:21:e8:33:a3:cb:
                    c8:d9:d7:b2:cb:b2:66:f1:7a:90:59:0c:5f:ea:7c:
                    2e:8a:86:96:d0:94:b5:97:7d:c3:ec:99:60:e6:b4:
                    c1:a8:7b:6e:e1:39:63:ea:43:fe:78:ab:0c:d1:b2:
                    5e:8f:7e:cb:0a:9d:59:1c:07:cc:c0:f3:92:7e:29:
                    8d:91:59:92:09:49:d0:2b:2f:56:7d:37:e4:a4:eb:
                    84:e6:26:2c:bf:f3:b8:21:aa:f1:6d:92:f9:e1:78:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:22:DC:0C:B3:8F:97:AB:16:30:E2:20:FF:83:FE:13:7C:9F:E3:18
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:d1:2f:7a:a7:94:da:3e:f1:d0:96:a7:c7:83:de:fb:6e:
         70:39:e7:df:fa:5c:f0:10:48:83:7b:bb:61:71:7f:d2:89:59:
         6e:9f:fc:e5:c2:3b:c6:58:40:3f:a8:64:4d:ba:89:a8:f0:b4:
         34:3d:79:af:9d:89:50:84:21:ae:75:7d:99:9b:0d:25:0e:09:
         b3:76:a6:66:c6:c9:55:a2:a6:57:d6:47:8d:65:e4:83:92:0a:
         3d:a8:14:03:65:70:b0:62:24:6c:e1:f2:1a:86:3e:e1:34:27:
         a8:46:aa:8e:10:b2:a2:5f:de:ce:b8:5e:ea:8e:a2:2b:7e:69:
         18:42:b8:de:cc:18:31:90:f9:dd:2d:1d:58:7e:d8:31:eb:7f:
         63:c2:10:3e:4d:2b:b0:6a:7f:f9:a3:e7:56:be:5c:b2:ca:4b:
         e7:9e:8c:b2:6b:4f:a5:00:ab:52:a0:59:d2:4a:c5:86:0f:42:
         93:44:1f:f6:e8:e3:fe:79:7a:24:9d:40:c5:f4:e7:ec:f0:00:
         4c:b2:5e:05:54:c8:49:99:88:07:56:7a:0e:ba:f1:8e:74:d4:
         7a:7c:bf:11:54:d1:a9:75:d1:c7:36:e2:12:b5:97:d0:08:0e:
         6c:5b:c1:01:46:db:56:31:d7:05:d0:d1:11:9b:fa:b5:9d:b0:
         72:17:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:23 2026 by rpki-client