This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
File:                     BgecQppxRvH5qgSb20LKlRRLdNo.mft (raw, json)
Hash identifier:          Mplft7uBQQ1kLtKzrfwbvH8uJ3842aqPNyOw11LRe8g=
Subject key identifier:   52:D8:5B:65:BA:41:1E:8A:F3:60:A3:FD:3F:DD:64:41:E6:84:BD:32
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019BF53EC84D213254ABCCAF9E6B2A8130A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 13:01:30 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:30 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:30 +0000
Files and hashes:         1: 29_WowYfqJe9zWky2i9zd1IMKO8.roa (hash: t5yfXmceGMHi1hJ7+A0WmF++eREcNUx+HaoZlDGeCzE=)
                          2: BgecQppxRvH5qgSb20LKlRRLdNo.crl (hash: JXQezHDaskDwls1UK2X3msSbP8xPygtY3F6FJLESMvs=)
                          3: CJhVm_eH3bYrt2WK7XOnICKmwB8.roa (hash: o+prHna3ENMxEiyAjzFgmNPv1wWdGR9CaxMHixJBHwA=)
                          4: SY2RUPr2I46mE_ozmympoAhaX-w.roa (hash: p/god/upKn8qp+kQ4G0jUS1vVblFxTRCzcmR7IGieAw=)
                          5: tC7UKeB8w3xTexAmTW3uJLnKirU.asa (hash: hTiLsx0u487b825D9HiMcTVOtYWcOz5Jbvfe4xvPGy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:c8:4d:21:32:54:ab:cc:af:9e:6b:2a:81:30:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan 25 13:01:30 2026 GMT
            Not After : Jan 26 13:01:30 2026 GMT
        Subject: CN=52d85b65ba411e8af360a3fd3fdd6441e684bd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:8c:a0:87:fa:32:fc:eb:3f:07:6f:d1:50:
                    e2:d5:91:12:6e:c6:bf:6b:ba:40:dd:fc:32:ed:1e:
                    c9:34:39:b8:44:77:fa:01:2e:88:4a:9a:7c:aa:97:
                    01:29:cc:ef:ce:14:74:b9:83:e6:1d:18:6b:a1:3b:
                    95:a1:c6:6a:49:ee:2f:e8:a7:0f:d4:56:7f:1d:88:
                    f0:db:66:fd:8a:26:64:e3:2e:6b:5c:11:07:53:95:
                    4b:e8:ec:16:0f:59:a4:aa:da:a0:be:37:e3:33:06:
                    17:b4:64:eb:eb:17:51:74:d3:85:94:ea:40:20:88:
                    ec:36:4f:96:b9:2c:9a:5c:a7:27:75:4d:44:d5:65:
                    32:bc:f5:57:54:0a:1a:bd:d3:fa:c4:f2:c2:f2:66:
                    d2:3f:43:09:c9:b0:31:9e:a4:a4:68:5d:55:34:09:
                    9b:1a:c2:9a:57:81:bc:f5:65:82:9b:4c:51:9e:7f:
                    7e:b5:52:d1:9e:94:dc:04:fd:54:ee:52:17:50:d0:
                    42:cc:f5:e3:19:bf:ec:79:18:7c:44:5a:25:18:1c:
                    91:e9:a4:41:b3:3c:0f:1c:3d:f5:17:e3:54:c0:2d:
                    60:6c:14:41:e1:39:a2:f8:03:03:4b:28:8d:21:81:
                    f6:69:34:6f:aa:3f:dc:7a:9d:18:ec:77:34:5d:fc:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D8:5B:65:BA:41:1E:8A:F3:60:A3:FD:3F:DD:64:41:E6:84:BD:32
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:cc:a5:f8:f2:07:f3:07:85:bd:65:68:42:21:6c:f2:9e:
         7a:56:94:d4:ad:69:ef:01:37:e6:95:04:93:51:60:57:00:6d:
         f5:e2:d0:59:d9:1d:fd:51:ca:b0:19:86:50:0b:71:e2:b6:c7:
         ca:b7:fb:9f:62:8a:e2:70:6a:bc:84:0e:3f:6c:80:8d:d3:f7:
         d2:89:cc:1c:32:cd:47:47:e2:98:a2:49:5f:bf:84:8d:dd:22:
         ee:98:91:8a:d0:c4:38:2c:bb:1e:26:bb:8b:23:ec:61:cb:d1:
         a3:02:8e:ee:aa:50:24:18:48:74:4f:c9:84:4b:a4:21:77:6d:
         36:63:c1:fd:fc:d8:99:2b:52:e4:0e:68:da:46:de:4f:72:59:
         9e:23:04:ac:96:07:ef:4e:76:33:a4:63:9c:f1:c0:56:dd:72:
         00:f5:ea:95:14:07:67:12:23:7b:a5:5b:e1:11:52:4e:25:3f:
         4c:16:d2:4f:b7:32:5b:3c:8a:67:d6:c3:97:81:3f:ae:4b:d4:
         c1:23:6f:9d:1c:a0:07:de:e3:e8:d1:9b:df:c4:74:57:1d:5a:
         77:73:6e:2e:f9:f4:f0:50:69:f1:17:95:18:f8:4b:7a:8d:96:
         36:6a:24:2c:8a:05:50:d2:de:fd:9e:3f:47:22:d9:31:79:f5:
         6a:be:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:32 2026 by rpki-client