This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
File:                     bwdNLvtfPh01wpH4oRwLwL5-wbg.mft (raw, json)
Hash identifier:          IqpJ7KemVN4JS2bRrICbaEr2FJvgqIUQp/28ACEB4FA=
Subject key identifier:   08:F5:39:CC:B8:E2:CA:7F:BD:3E:E6:34:C0:33:86:F3:91:15:9D:74
Authority key identifier: 6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
Certificate issuer:       /CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Certificate serial:       019BF72D93F3FDC88801DDBE67E47F1A7C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
Manifest number:          0D0B
Signing time:             Sun 25 Jan 2026 22:01:57 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:57 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:57 +0000
Files and hashes:         1: RGf0Ms3xteguSbs1alZIeocwSkI.roa (hash: WIrcxAiKgthQFJ+u9oe2Nfr1JrlJ+EAxtDFYXUIpEV4=)
                          2: ST3uG5_x_Xi7HFZdlAkfcX81mRI.roa (hash: ReEsi9I+1YpNYHpyu1ZDbwweylzt0AgbCV9BtlKZJTQ=)
                          3: bwdNLvtfPh01wpH4oRwLwL5-wbg.crl (hash: 5pdJCJfba8SYreM1YnCEzUMfz5a9B+qrR9AJQc7DSWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:93:f3:fd:c8:88:01:dd:be:67:e4:7f:1a:7c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
        Validity
            Not Before: Jan 25 22:01:57 2026 GMT
            Not After : Jan 26 22:01:57 2026 GMT
        Subject: CN=08f539ccb8e2ca7fbd3ee634c03386f391159d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:d8:c4:30:28:a0:6d:a3:f3:b8:b6:b5:f0:
                    b4:45:8c:c9:2d:7c:04:eb:44:80:77:44:6d:b7:c8:
                    b3:10:fa:73:93:3c:78:13:71:60:ef:00:08:34:d2:
                    e7:b5:27:c7:ec:86:38:08:06:d0:10:1d:7a:68:35:
                    ee:d3:a9:4d:7e:40:45:d6:f8:66:04:fd:d1:63:4e:
                    ae:9f:cb:87:75:c9:8e:03:cd:d0:66:7f:d9:5a:7e:
                    45:af:e9:2d:c5:dc:36:23:00:f9:43:d6:1c:98:06:
                    ca:7c:02:75:6e:27:26:b1:e3:ae:d4:9d:3d:a0:5e:
                    da:24:f2:c2:71:2a:09:3f:b0:34:a8:50:79:a5:38:
                    f6:8d:a9:d0:2d:1b:ea:05:7b:61:74:e2:5b:7a:71:
                    31:fd:f0:90:e3:e2:06:8f:2b:9c:96:20:95:6b:ca:
                    52:8c:0a:26:98:8d:1a:ce:7a:ab:9e:60:43:3e:74:
                    fe:97:dc:9b:da:0f:84:d8:70:1b:5a:1b:81:7e:7b:
                    30:6f:d3:77:08:a6:c1:fe:c4:1f:e4:bd:76:cc:48:
                    9c:32:37:24:73:c2:5c:78:9e:bf:3c:2b:d4:84:73:
                    d1:b8:69:61:c1:29:fd:9c:cf:82:bd:b9:7b:36:8c:
                    d2:80:6b:b1:93:98:02:38:83:67:a4:f1:a0:05:c1:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:39:CC:B8:E2:CA:7F:BD:3E:E6:34:C0:33:86:F3:91:15:9D:74
            X509v3 Authority Key Identifier:
                keyid:6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:a4:b3:88:dd:06:46:39:c9:d3:d3:bc:0e:76:8c:f0:08:
         b9:cd:4e:91:06:0d:dc:fb:bc:41:f5:bf:c5:f7:a0:26:20:df:
         5a:92:8a:5a:5b:bc:9e:a3:1f:b8:e6:09:81:b3:ca:3d:be:4e:
         bb:b8:df:f1:ad:e4:01:56:76:fe:1d:b9:bb:38:41:82:82:ab:
         c5:68:d9:c8:9c:90:aa:40:0c:70:3a:b7:61:2a:d6:3a:fa:43:
         bb:7e:2f:8f:61:a6:23:f8:79:97:be:54:f2:00:e6:5f:e5:67:
         5f:4d:9f:96:24:d2:9e:e5:1b:b6:5e:ee:e3:dc:92:02:51:23:
         24:c9:46:d2:3f:18:e9:cf:60:01:ba:31:1f:33:ce:f4:a7:ac:
         a5:3e:ad:16:f9:85:07:59:c8:2f:6c:07:49:fc:72:aa:1d:4b:
         3d:66:21:e3:b4:c6:c5:cf:15:4c:4a:73:17:62:d2:95:5d:ba:
         86:9b:75:e3:6c:2c:27:e1:36:33:23:e1:84:ca:65:ac:d8:73:
         18:7a:39:e3:9f:78:e3:eb:2f:52:1c:9f:d3:3d:44:82:ac:61:
         e6:e3:e1:b5:43:e5:5f:0a:35:dc:70:81:07:63:48:6f:bf:c0:
         eb:44:ec:06:bd:2b:b5:f6:53:87:a3:5b:18:72:1e:5e:da:71:
         3a:c8:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:27 2026 by rpki-client