This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          YUaUkhzTiRfLeBOuHI+2GzCiH5yFZ/BU/ZC3x8gC0pE=
Subject key identifier:   B7:70:09:AE:CF:E4:1B:E7:58:95:41:D1:AE:AC:24:A6:C2:CB:21:B1
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       019BF42C1500631F3F7593023ED5740B078D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 08:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:28 +0000
Files and hashes:         1: 9DO8d9woQowqNiDzxlMl1Ect3bo.roa (hash: fzBgjDacb2JVb/qyd2WOo94sgyv6vVFqac/sTPnx2ow=)
                          2: ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa (hash: DiIJsSuhcAdz+1FlA1JBD5Ze6UThcXCbBy3MPnBKwvk=)
                          3: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: 4/1I6EOAf1mWppxnZG/xrSRK0xom2cbGrwKSELwoJZM=)
                          4: vMRw_AiQzf5NqoSV0yfYQ6L48AI.roa (hash: 5YqohlbQK8Oupp95llwrVM2ByoSdreXVXtijBcRMnrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:15:00:63:1f:3f:75:93:02:3e:d5:74:0b:07:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: Jan 25 08:01:28 2026 GMT
            Not After : Jan 26 08:01:28 2026 GMT
        Subject: CN=b77009aecfe41be7589541d1aeac24a6c2cb21b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:8f:ff:1c:69:7b:21:fb:2a:18:47:49:dc:
                    c7:64:b0:4c:1e:f8:71:a7:40:cc:b9:5b:17:5e:d2:
                    1b:ca:f2:d9:7b:3a:ed:dc:4c:56:5d:33:b9:72:38:
                    fc:db:21:25:b9:8a:19:26:f6:75:15:6a:92:b1:2c:
                    26:03:e4:e4:3f:9f:a7:27:27:45:e1:a3:ed:b9:53:
                    44:37:40:a3:7e:1c:dc:31:65:f8:b3:9d:60:9b:2c:
                    c4:2f:62:fe:0d:d2:f9:3f:b8:d6:27:64:d3:93:aa:
                    02:3e:4a:8c:a5:3a:83:f0:e9:c7:44:2b:b2:cb:a5:
                    1f:7e:5d:ad:81:cb:37:f8:3a:8f:3a:e0:f4:11:34:
                    94:72:5c:a1:a5:97:b4:89:14:ee:e1:24:c5:80:fa:
                    7e:5b:ca:f9:14:34:e2:23:75:49:47:a2:01:19:0f:
                    c6:d7:d5:48:6a:e3:27:fa:b2:e0:b5:25:00:3c:ff:
                    2d:32:fd:29:b2:1e:0c:81:88:b4:19:60:93:95:a1:
                    6f:bf:23:28:dd:a1:d7:f8:ef:e5:38:61:33:e1:27:
                    41:58:af:d0:50:ec:95:07:c2:eb:27:79:e9:51:95:
                    8f:a3:0e:da:0c:bf:ae:20:8e:4b:37:ab:1c:da:f5:
                    82:0a:fc:4f:4b:76:e2:f8:39:23:1a:ce:3a:2e:ad:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:70:09:AE:CF:E4:1B:E7:58:95:41:D1:AE:AC:24:A6:C2:CB:21:B1
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:88:01:b3:23:03:c8:e9:fc:5f:cf:85:74:44:b4:97:9b:
         7c:d5:35:95:ca:0f:58:aa:fc:3c:34:e7:a5:b1:4f:b4:88:bc:
         15:80:5c:ec:98:02:4e:36:23:1a:4f:17:23:f0:b8:e4:e4:81:
         74:bf:16:6b:6b:38:b5:a7:91:ba:87:5d:eb:be:34:56:cc:d2:
         d2:0a:05:8f:ac:d3:2d:2b:b2:09:d1:7e:68:8b:91:f0:d5:3e:
         38:30:6a:86:c3:11:ac:a7:1e:77:77:95:21:a4:6b:1d:99:9a:
         45:66:11:e3:15:c9:a0:e9:57:27:d6:0b:d7:7b:01:42:ed:bb:
         5f:ba:f7:db:b1:00:69:c8:68:ff:1f:15:89:51:29:b3:05:3c:
         fd:20:e0:3b:93:31:74:f5:fd:5c:46:16:99:f0:57:5b:86:3c:
         ec:b9:8c:b0:35:ab:b7:99:3e:09:5f:62:7f:75:e9:10:67:fb:
         d2:c0:ae:6e:cc:8e:f7:e9:45:4a:f0:5d:72:e7:50:00:9b:9b:
         02:71:11:ae:d0:cf:56:c8:e3:c2:b5:3c:82:74:41:e6:9c:5a:
         4d:f8:bd:44:7f:bf:ac:aa:30:a1:b5:f8:19:22:4b:9e:3e:c9:
         8d:b2:7f:41:33:2c:83:25:03:00:fd:d3:fe:0e:4e:e7:03:cc:
         df:54:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:30 2026 by rpki-client