This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
File:                     B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft (raw, json)
Hash identifier:          A049PJgzX+hHQQMCEEEs1gM1A77qkPRJft80JSMe5Vc=
Subject key identifier:   3C:E6:F7:1A:87:3C:77:A2:5F:FD:A4:C1:4B:57:55:16:A9:37:EC:25
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Certificate issuer:       /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial:       019BF350623745B649ACA97B761DC6D0FCBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
Manifest number:          05D9
Signing time:             Sun 25 Jan 2026 04:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:29 +0000
Files and hashes:         1: B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl (hash: If0bY7ptJw/QQb0VDYg+vzFn0mk8yYLTg9RCQNBv/74=)
                          2: Hsna_TRszov1J0VZLOsHUlP-JlM.roa (hash: 0oVhD+Hpu4+17JAWqPaWb9VuKSEGIj0vezDUmaIt7EQ=)
                          3: nyiPnK2r5FPcG4hEdHJrG0pBB_k.roa (hash: 4zalWvXyIiVFZhKWkS+NdHFSuL4SaUsBDEJVOkcmQGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:62:37:45:b6:49:ac:a9:7b:76:1d:c6:d0:fc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
        Validity
            Not Before: Jan 25 04:01:29 2026 GMT
            Not After : Jan 26 04:01:29 2026 GMT
        Subject: CN=3ce6f71a873c77a25ffda4c14b575516a937ec25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:64:5f:6e:0e:c5:c2:05:c5:56:7b:e1:90:
                    94:e7:4c:7d:55:ed:29:28:b9:29:8f:f9:45:ac:f6:
                    3d:92:db:b7:c9:e7:41:4b:fe:36:06:ee:51:82:c4:
                    59:78:e2:c5:0b:54:f7:f1:9c:21:72:19:6f:2c:df:
                    35:5e:60:79:93:98:f8:e2:b4:08:c5:f8:e6:7b:82:
                    39:eb:e7:bd:ef:34:6d:5d:97:3b:b3:2e:ad:b8:00:
                    22:60:a0:ae:aa:6d:72:d9:64:a6:5b:96:38:ce:35:
                    25:dd:6a:af:bf:9a:2b:04:cb:01:9d:2b:2f:58:2b:
                    48:df:24:5e:4b:b2:92:98:41:49:21:4b:79:26:30:
                    28:16:a6:55:87:75:a8:fd:07:58:a8:8f:c5:51:22:
                    26:c6:b3:f7:d0:14:4c:24:bf:4d:28:20:92:d7:12:
                    cf:5d:7d:35:99:b1:3f:d5:06:6d:c5:2b:12:b5:f2:
                    c3:1a:a2:ff:88:10:54:82:58:2a:6f:6b:d2:8e:c0:
                    ac:d5:b3:0c:ea:08:43:80:97:9e:c3:db:b7:67:2f:
                    df:91:f1:34:86:d4:95:92:d5:2b:9d:d7:7f:eb:28:
                    17:c5:08:7a:5e:6d:c0:d8:cf:1d:67:71:be:ed:21:
                    16:fd:e9:52:b2:09:6b:99:4f:02:bf:7a:4f:57:05:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:F7:1A:87:3C:77:A2:5F:FD:A4:C1:4B:57:55:16:A9:37:EC:25
            X509v3 Authority Key Identifier:
                keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:b7:47:8d:f9:95:db:27:48:18:83:b5:f1:aa:50:e8:75:
         12:6b:95:d7:4c:1d:44:5f:39:19:d0:0f:c8:44:54:85:77:05:
         fd:9e:30:bc:20:94:7f:70:f6:f9:b2:59:e6:45:4f:00:f9:7a:
         d6:bb:50:49:76:23:d7:17:e2:6f:0c:f8:36:40:4a:0f:3c:7d:
         ff:4c:de:53:59:ab:42:96:5f:49:c6:07:0c:1d:6c:84:00:f0:
         eb:8a:56:51:28:c0:58:63:7f:7d:a6:90:21:c3:cf:0e:64:a5:
         dc:0e:a5:73:7f:e2:21:c1:a3:f1:b7:be:2a:a6:ad:da:aa:a1:
         b4:37:2f:0f:c7:00:dd:d5:77:9c:2b:a5:38:da:8f:6c:35:0e:
         4e:ab:22:97:1e:4f:10:42:2a:8a:36:88:3e:b8:11:20:c0:0c:
         c0:a3:80:c8:1a:40:88:23:cb:ee:86:53:e9:c3:b0:81:53:81:
         2b:5f:76:a9:86:a3:6b:6a:12:26:21:9b:b8:b8:e3:e1:02:0a:
         27:72:82:d8:9b:f2:ce:56:79:05:61:d2:28:90:6c:38:87:d8:
         2c:d0:b4:eb:58:6b:ab:44:dd:1f:cd:f9:46:82:0f:84:5f:21:
         70:30:6b:06:bd:3c:25:f9:d1:a0:36:4b:5d:a9:a5:22:bd:98:
         f5:29:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:46:33 2026 by rpki-client