This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          tEL3Q4U4WROBwl2iIBv6vZVWbDo6Pkcbg5vhi+D0GLY=
Subject key identifier:   F6:4A:23:9D:AD:5B:63:84:2D:05:A5:D3:8D:6E:37:5E:55:D8:CD:2A
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019BF273E8A79619E64E567AA4907A8D4BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          17F8
Signing time:             Sun 25 Jan 2026 00:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 00:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 00:00:41 +0000
Files and hashes:         1: 1-hrB_4i445lAPatm9pXp75UPr1I.roa (hash: YEzNTLD9wfX8VjD6MK1Rs1n5S4HzUgswhciPZWTMqSc=)
                          2: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: ZV6WVsgtgTTQPJ15JVfTxXO4Wd0ERVAUyBQD652RAnE=)
                          3: 1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa (hash: z9/vDo3XxLBhdAOAkVfQRjghVloHXSHSVsc9PHpJpsk=)
                          4: 359PtD2aT4lYVKLtb8GpHiwDpSM.roa (hash: +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=)
                          5: 3TVHsbS8DDbS5jFNHXliJUV-vt0.roa (hash: VNMhI1DbQRZPhe0DLvYfFvfWzVgThx5w3CClRDwW+eI=)
                          6: 3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa (hash: hzh/xwb8heLsOXwzZrTck/MAmVN9avO1bZxPN2Q3Qc4=)
                          7: 6zpsdnIXKDCxVFEhevxRA4_zSCs.roa (hash: OPbPEb2Sk8Js+TBK52PtXkK2BFw7aQaLU/bCQ0DpgQ0=)
                          8: CjqRUuv68PFiU7765GT5HXOx8Bw.roa (hash: PvucfJQmBJoQyaNYzAVmEi/q9uSQDhp1g2JhGdUwoW0=)
                          9: EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa (hash: pwqZR3sLomznVe36SGqzsoCNYDQVFyLcuDqHZembszU=)
                          10: I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa (hash: rgMw3gFLvDe2bJ2gkzdn82gcIPRZuH5eYyiNhuqG2wY=)
                          11: IUnxJCEXGpjb9x8O-AKLChbdKH4.roa (hash: ngyGAWfnTLrenQ1MiPj1AnwG2yKMniipm+cR6MK1lC0=)
                          12: MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa (hash: gTpV76Ww0BCzvfD9wYqWRlnMaGyxOQ5bU1mc1SqNJxs=)
                          13: _0yShHb3_Lvo8oOIhf1dP9etifM.roa (hash: C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=)
                          14: bYA_hDz-uHsDwzycumiOlbXWrtA.roa (hash: Yl9BNnwj6zQSqqxSRXXKmcquJUlgVyqLxCnPkLZIOXw=)
                          15: beBz1EHSK0ejZhV2Z5PmcoiuBnM.roa (hash: mDHGqDcF8EKgwMgysUIVSZ+OvPwZjW1FW23RjIyMX4g=)
                          16: g0RaLD65-oQgpyqHw6Rb1clt6Us.roa (hash: MBY8mcPfd1xDaI5XexA7xmIlVnR5RWaKP5T2lgf3SaQ=)
                          17: idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa (hash: iSNlVvk976S8zGXNaqHMWJhFzSvDbSMz0/sY5GUQxFg=)
                          18: jPMCixDvfVo9glBXbNMOz86F-rU.roa (hash: yq4kSM4l08bAj6xNIMbu+OFNBQBF0qIIeLACLieVs2o=)
                          19: keMt9GC91bHZXuQ0h87FQe-gBaY.roa (hash: W4gS8hqr2Jgdapo27zgTBxXWuHg7t03Y6FgU8O4hTKw=)
                          20: mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa (hash: BLYdcZ3Gbdmq0apl8BQS+jPj3Rqpg+Sj0dliHzXdyWM=)
                          21: okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa (hash: hH8YmXQn5X8TblBZy3b0UzoPWUDgyN7U0BO4gNmqkZc=)
                          22: rdklJtnIsRPpCMnxSS1GGHIWCtI.roa (hash: i2J/w0/vFTIyr+KWAGpYaVRFjg90ISDIds54aojdKiA=)
                          23: xrEslglVuEnnQ0vF9Dsq9qhfjps.roa (hash: Qjzp64QTM1xn969UZDkr+b0btpansANNv6kwoq7jiQo=)
                          24: zX07X_H3K2-11ztBe_0TWCV6UDU.roa (hash: m7+UubbmMpsAyslPYtLacfeBJL7t5bWeQmDZDfKFeeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:73:e8:a7:96:19:e6:4e:56:7a:a4:90:7a:8d:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan 25 00:00:41 2026 GMT
            Not After : Jan 26 00:00:41 2026 GMT
        Subject: CN=f64a239dad5b63842d05a5d38d6e375e55d8cd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:61:4f:73:4b:70:d0:cf:46:bc:66:43:c5:
                    5f:24:8c:77:88:23:c0:30:8f:11:45:cc:b4:f8:ac:
                    0c:df:8f:22:0e:fa:e2:8d:9d:5e:a8:20:97:d4:b9:
                    f9:a5:29:4c:07:ab:23:48:0b:50:37:72:da:c4:b0:
                    bc:89:88:6a:ab:97:b3:06:55:b7:04:d0:b2:5a:df:
                    db:be:8e:bc:52:2f:82:b7:a5:45:26:69:49:54:75:
                    bd:a7:1e:c7:cb:81:99:32:e5:5a:49:1c:cd:f4:4e:
                    89:3f:87:23:15:d9:e6:27:b2:e2:b3:c0:ad:85:6a:
                    91:52:d8:2e:b7:e6:01:04:37:e1:8a:14:3f:95:51:
                    a7:08:6a:47:21:2e:63:88:de:a5:ef:fb:95:14:9e:
                    51:76:95:4c:69:6e:e2:03:6b:ae:4b:52:15:33:c5:
                    00:08:4c:71:d7:74:af:67:07:f6:7a:15:87:bb:d1:
                    23:ab:a9:04:5e:43:0f:0c:de:c2:91:d5:43:38:10:
                    29:36:ca:a5:3b:3f:32:90:e7:1b:03:41:21:a0:3a:
                    eb:b7:59:d8:08:0a:d4:72:71:db:56:0e:48:97:e2:
                    c3:37:62:be:fa:b4:7b:d1:10:29:67:06:08:dd:03:
                    ac:5e:6b:1e:cc:c2:b5:7a:0b:2d:b9:3c:63:17:d5:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4A:23:9D:AD:5B:63:84:2D:05:A5:D3:8D:6E:37:5E:55:D8:CD:2A
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a5:4e:a9:5a:d5:f2:82:9d:7c:ed:2e:3c:d3:1f:af:9b:53:
         90:53:65:78:2e:47:36:e8:f2:90:99:44:ec:05:0a:d8:96:c9:
         0c:08:81:55:2e:56:1b:53:07:24:eb:a4:85:63:17:1c:72:f7:
         da:a4:40:99:88:fc:4a:9e:16:27:13:10:27:42:43:dc:3d:d7:
         18:56:d7:b2:27:49:b5:76:7c:30:26:c2:92:21:44:9d:fc:c3:
         9a:f7:99:13:1f:d2:15:b4:68:c0:0a:d6:f8:cc:8e:d1:a6:92:
         4f:01:7d:61:d4:da:3a:57:11:eb:ca:f8:41:fb:f7:f9:b1:cd:
         93:1e:57:94:15:d5:44:c5:1b:83:87:c4:65:ca:c0:e0:90:7c:
         ed:0f:e4:3d:f1:86:81:bb:d7:28:e0:9c:d7:9e:9b:95:f9:57:
         81:b8:81:c3:0e:03:97:0c:fd:36:b7:83:e1:fb:c3:e7:52:3a:
         24:ac:e5:87:29:8b:04:f1:f0:be:88:f0:47:8c:80:07:0d:7e:
         1a:05:9e:74:0c:2c:80:42:b0:65:ae:25:bb:c1:23:92:3d:54:
         d1:56:e9:64:4a:77:b2:70:76:f4:f8:8c:35:61:33:dc:0b:f6:
         40:11:a4:17:ff:6f:de:7f:4b:e1:dd:60:74:d1:b9:b7:d9:45:
         ef:d1:e4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyc+inlhnmTlZ6pJB6jUuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjYwMTI1MDAwMDQxWhcNMjYwMTI2MDAwMDQxWjAzMTEwLwYDVQQD
EyhmNjRhMjM5ZGFkNWI2Mzg0MmQwNWE1ZDM4ZDZlMzc1ZTU1ZDhjZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9hT3NLcNDPRrxmQ8VfJIx3iCPA
MI8RRcy0+KwM348iDvrijZ1eqCCX1Ln5pSlMB6sjSAtQN3LaxLC8iYhqq5ezBlW3
BNCyWt/bvo68Ui+Ct6VFJmlJVHW9px7Hy4GZMuVaSRzN9E6JP4cjFdnmJ7Lis8Ct
hWqRUtgut+YBBDfhihQ/lVGnCGpHIS5jiN6l7/uVFJ5RdpVMaW7iA2uuS1IVM8UA
CExx13SvZwf2ehWHu9Ejq6kEXkMPDN7CkdVDOBApNsqlOz8ykOcbA0EhoDrrt1nY
CArUcnHbVg5Il+LDN2K++rR70RApZwYI3QOsXmsezMK1egstuTxjF9VOGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZKI52tW2OELQWl041uN15V2M0qMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaVOqVrV
8oKdfO0uPNMfr5tTkFNleC5HNujykJlE7AUK2JbJDAiBVS5WG1MHJOukhWMXHHL3
2qRAmYj8Sp4WJxMQJ0JD3D3XGFbXsidJtXZ8MCbCkiFEnfzDmveZEx/SFbRowArW
+MyO0aaSTwF9YdTaOlcR68r4Qfv3+bHNkx5XlBXVRMUbg4fEZcrA4JB87Q/kPfGG
gbvXKOCc156blflXgbiBww4Dlwz9NreD4fvD51I6JKzlhymLBPHwvojwR4yABw1+
GgWedAwsgEKwZa4lu8Ejkj1U0VbpZEp3snB29PiMNWEz3Av2QBGkF/9v3n9L4d1g
dNG5t9lF79HkQw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:31 2026 by rpki-client