This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File:                     Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier:          2jMzlM715ovhSayzGcB+i1NzEgzkxEPpLtziA4ygih8=
Subject key identifier:   1D:7A:E3:39:48:AA:80:29:33:28:96:F7:75:8B:A5:FB:74:4C:ED:E1
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer:       /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial:       019BF3BDE2FB6D54BD831A979699422E78BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number:          0B66
Signing time:             Sun 25 Jan 2026 06:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:06 +0000
Files and hashes:         1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
                          2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: YAX2IG7q3jWG+DsrZLdSqvSbDu223L80XuLy4hAqv+o=)
                          3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:e2:fb:6d:54:bd:83:1a:97:96:99:42:2e:78:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
        Validity
            Not Before: Jan 25 06:01:06 2026 GMT
            Not After : Jan 26 06:01:06 2026 GMT
        Subject: CN=1d7ae33948aa8029332896f7758ba5fb744cede1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:88:f2:82:ec:12:07:1c:32:54:fd:fd:39:
                    b4:07:4c:a7:e9:83:1d:53:60:62:38:56:e0:4f:f2:
                    6a:07:17:44:56:26:44:47:1c:0f:f4:0a:5d:61:76:
                    b9:a8:65:6f:8f:15:7e:e3:6b:dd:26:ae:cb:c2:be:
                    ec:56:31:c5:f5:50:60:38:47:b8:f5:e4:29:a8:bc:
                    ea:70:39:a5:7a:99:ee:17:ee:19:b9:b6:15:c3:19:
                    91:57:5b:2c:25:8e:5e:97:34:17:48:af:08:36:a9:
                    de:82:8a:e0:41:85:44:89:27:b5:39:2b:20:09:2a:
                    bd:a0:47:54:b5:0c:0b:ee:32:3a:4d:02:89:27:6f:
                    ab:3e:9f:9f:d2:ef:60:22:b6:2a:95:ca:05:91:26:
                    72:bc:f5:17:46:11:3d:da:e4:b0:fe:48:dc:87:dc:
                    e3:cc:5c:9c:a4:66:a4:81:19:2f:60:dd:ef:a3:a1:
                    3e:55:02:37:4f:f3:6f:41:82:88:64:d1:b8:32:b9:
                    11:29:81:2e:3d:95:98:db:a3:51:22:96:7e:a3:04:
                    4e:61:86:f9:3b:98:7f:cd:ad:ce:85:84:65:cd:d3:
                    89:4f:fb:df:86:a0:e0:20:1f:99:11:e7:24:38:d4:
                    d9:a2:fd:19:ea:5e:c0:b4:bd:5e:5f:d5:1d:39:ad:
                    4b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7A:E3:39:48:AA:80:29:33:28:96:F7:75:8B:A5:FB:74:4C:ED:E1
            X509v3 Authority Key Identifier:
                keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:bf:38:ca:39:18:0e:b9:26:cb:8c:53:f2:cc:5f:2d:95:
         64:13:d4:e8:db:2c:ca:13:00:7d:b5:22:03:b5:52:b2:51:75:
         0b:43:91:22:96:f6:4d:10:5e:64:e9:06:3b:4f:0a:db:65:21:
         51:09:05:1d:ac:ea:82:a0:43:66:56:cf:29:85:0b:e7:14:66:
         69:da:6a:ee:bb:55:8a:3a:70:74:61:36:a6:01:03:da:17:17:
         42:a6:f7:74:bf:c4:1d:c7:a1:e7:22:8a:52:52:c8:f4:7d:9d:
         e6:d7:55:45:58:2f:5c:2e:7c:e0:0b:2e:40:bb:0d:49:c6:30:
         49:37:94:c8:6c:15:5d:4d:5e:36:81:f1:30:10:26:99:df:97:
         f1:5f:7c:f3:34:ae:d1:3d:ec:5d:53:96:b8:ad:04:d8:8d:89:
         ca:50:05:b8:3c:ab:63:57:8b:7c:3c:3e:9a:75:e8:c0:a0:bf:
         84:26:c2:76:23:1b:56:0e:ef:d2:c0:e6:50:21:05:4c:8d:de:
         7b:4e:f7:c3:a0:4f:89:64:87:74:23:93:f5:f9:80:1c:a1:db:
         25:28:e7:7e:ca:1c:ca:43:7a:f6:e6:7a:34:d5:5e:83:14:46:
         e3:1a:a1:21:51:62:09:1d:0e:6a:15:df:cc:0e:b7:5a:f6:2c:
         72:21:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:10 2026 by rpki-client