This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          ZfM8X4o895wqZhcT8pc/cT4oDC2zdfq+j2YlOZ0QjSw=
Subject key identifier:   30:10:D6:B9:9B:98:91:40:95:0B:E3:71:CD:EA:6E:77:20:58:22:77
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       019BF61A3E705ED731BCED7B444ECC663429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 17:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:13 +0000
Files and hashes:         1: 9DO8d9woQowqNiDzxlMl1Ect3bo.roa (hash: fzBgjDacb2JVb/qyd2WOo94sgyv6vVFqac/sTPnx2ow=)
                          2: ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa (hash: DiIJsSuhcAdz+1FlA1JBD5Ze6UThcXCbBy3MPnBKwvk=)
                          3: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: RUxS0KitKMMsz408em/KWpMObALQ9/5ezkNj3xJyWpA=)
                          4: vMRw_AiQzf5NqoSV0yfYQ6L48AI.roa (hash: 5YqohlbQK8Oupp95llwrVM2ByoSdreXVXtijBcRMnrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:3e:70:5e:d7:31:bc:ed:7b:44:4e:cc:66:34:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: Jan 25 17:01:13 2026 GMT
            Not After : Jan 26 17:01:13 2026 GMT
        Subject: CN=3010d6b99b989140950be371cdea6e7720582277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:e9:dc:42:b3:2f:99:01:ab:91:8b:b9:84:
                    42:32:dd:51:ab:70:f7:f7:84:1a:51:8d:62:04:38:
                    58:55:d2:d7:6e:ca:62:8f:f4:ec:22:6e:49:fc:41:
                    bb:8f:cd:d2:6e:da:3f:ad:aa:32:35:da:17:f6:1c:
                    e2:f3:0b:67:2a:14:c5:7a:73:f3:42:ad:32:d7:88:
                    71:bb:1c:e9:da:76:6e:21:cf:17:8e:2e:dc:48:cc:
                    34:a4:8b:f8:55:b2:e1:fe:89:9b:eb:45:27:c6:e5:
                    1b:69:7a:79:6c:1e:f6:63:28:ca:29:d5:ae:f3:88:
                    09:bf:0a:80:70:55:23:da:46:f3:04:3e:1f:40:36:
                    f4:e9:eb:bb:39:f9:4d:1e:39:c6:1d:69:18:0b:20:
                    11:af:10:d7:97:2d:64:07:c3:8c:a0:cd:a0:23:28:
                    16:18:06:6c:1c:52:2b:e4:a2:f5:ef:b5:70:90:94:
                    f8:92:d7:85:43:5e:ff:f5:8b:38:58:bb:9f:4e:0a:
                    b1:13:dd:5c:33:a3:c6:2b:74:cd:81:91:9d:e5:74:
                    7a:72:6d:ab:1c:1f:20:83:34:64:b8:46:b7:e2:f1:
                    38:f1:da:bd:e0:7d:50:fb:82:62:26:a5:58:fe:ce:
                    16:4c:f1:15:5f:f7:25:34:77:c6:37:5f:1e:f1:b4:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:10:D6:B9:9B:98:91:40:95:0B:E3:71:CD:EA:6E:77:20:58:22:77
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:bf:e7:7f:84:e7:50:d4:51:1a:97:17:b5:04:75:19:db:
         75:bb:0f:a3:01:9e:a8:1d:79:63:c8:1c:88:60:0e:d3:39:47:
         6a:c8:22:e1:46:06:11:d4:97:28:1d:f1:07:df:b6:60:40:b5:
         df:c4:3c:28:7f:d4:3b:34:64:ef:7a:50:4c:da:17:9a:7f:65:
         bc:02:8a:14:b2:5d:86:3a:55:df:ba:e2:fc:be:cf:8b:31:92:
         e0:e8:79:47:ce:6a:31:53:bb:fb:4e:1e:03:74:a3:5a:40:a5:
         70:fa:92:ad:1d:a9:e0:5e:b5:70:34:f0:28:97:f8:b0:a5:ac:
         f7:7f:d1:e5:bf:74:9f:2a:1c:63:a3:00:0b:de:51:6e:16:46:
         af:60:0a:ff:3e:b0:22:37:29:f3:7f:e4:96:7c:12:3d:d5:e6:
         bf:4c:b8:ef:ed:76:83:21:4e:4d:20:ff:64:ee:73:05:12:1c:
         36:1a:d8:2e:ea:be:3b:a6:25:35:a4:17:b4:ad:a8:2e:8e:50:
         49:93:2f:01:6b:fa:d6:a7:12:7f:b0:66:a5:d9:25:54:39:d5:
         96:33:80:4d:f3:74:0f:90:cf:c7:2f:7e:0b:26:2d:10:4a:11:
         7b:9a:55:83:fa:ac:2b:2a:cf:10:f2:5b:c7:42:71:31:93:47:
         35:9b:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:09 2026 by rpki-client