This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File:                     bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier:          Ynu17r9iazGoY8RzGcTP+rjVuOSZNKjPIvc+ZiyA6I0=
Subject key identifier:   38:1E:D7:42:DB:4E:32:EB:DF:5E:CB:AA:42:BE:7A:FF:46:DC:87:CE
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       019BF274C29ADCFB8F4BAFCC7D629C56E624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number:          181D
Signing time:             Sun 25 Jan 2026 00:01:36 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:36 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:36 +0000
Files and hashes:         1: 0Wr6LOc9-cDRRvk8SfBTZvB7uNg.roa (hash: UTyLCGmKuWfBIlDRUPRnAFKlYcgHZ6JkYyOZKP8cKhY=)
                          2: GXHV4yIeE_uXr_RNvJr8SVOFQ5A.roa (hash: tqlnNkWBmvsWCIi9jBSs1JVzONgC0EmMyLLdAg7SzVo=)
                          3: O5VMYBwUzg_lCUz1vF8gUa1_N14.roa (hash: OkMLH/MAmpXrPNL5QapYPDyvVrkEb9L9I2BouyFyOPg=)
                          4: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: pQldZSDVlnx3iaM8DSgFvX7fRLQfPKgaT0P+xxkixbA=)
                          5: jpqw9kyQWNXBww86kbGwbPfXFgI.roa (hash: IWd2Np2lM6IR2Rrx253rWdK0A18ykFo1zHImnqtxXzE=)
                          6: klCGnRobFDTStzZHH_87-rAXGCQ.roa (hash: y1ltdNIKY5eSnD7XFYZOka5u7ddS55v/gI9bnMxkSSU=)
                          7: oEduJAl4RTWtM6zwXdI0ziLh6rs.roa (hash: GFX4/mgYvelVvEnpmoKwgMTfCGzjJ8NR2rNnzEY3VSQ=)
                          8: slcKhaxRxeaCpF6VHXmttdYmZB0.roa (hash: J3V/eHX3Ccj83lCQrs3uEZ0s/c+0ECGpX2QVgnPgtrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:c2:9a:dc:fb:8f:4b:af:cc:7d:62:9c:56:e6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Jan 25 00:01:36 2026 GMT
            Not After : Jan 26 00:01:36 2026 GMT
        Subject: CN=381ed742db4e32ebdf5ecbaa42be7aff46dc87ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:ba:84:f1:36:16:f9:3a:81:be:c0:6b:03:
                    c1:a0:94:05:af:81:4c:f5:4a:58:45:07:e0:2c:c0:
                    34:fb:cf:1f:79:53:d6:80:f0:e2:dd:d7:39:2a:f4:
                    f6:89:b6:50:7f:ab:04:a9:c5:30:4a:4c:38:ba:3a:
                    43:10:1c:4a:84:8a:3f:51:0c:07:8a:cb:67:a0:51:
                    dd:db:6a:83:c8:bb:4f:6c:f1:03:06:c5:d1:7b:22:
                    22:bf:f1:6d:e6:59:ba:19:0f:72:05:1a:14:40:08:
                    1a:26:33:ac:d8:b0:6f:e2:6d:61:31:f9:d3:fc:ae:
                    58:49:e6:2f:31:e9:76:4e:d3:65:ec:3a:ab:64:c9:
                    83:17:2a:6e:00:18:b2:4f:0a:41:10:9c:51:33:e4:
                    d7:8b:2f:7f:f9:b4:e6:dc:02:d3:cf:ab:be:68:65:
                    ce:0e:15:39:c3:4b:2f:70:1b:be:93:af:2a:02:52:
                    da:38:f9:c4:33:1b:72:41:b1:e6:19:4b:01:f3:11:
                    78:d2:71:78:a9:b4:b8:c4:78:9b:15:a1:79:fd:38:
                    05:a5:57:52:e5:2e:85:c4:42:36:68:90:63:f3:63:
                    f8:ee:44:46:89:d5:e5:ed:61:75:7d:02:08:4c:6c:
                    ce:fc:b3:19:5f:af:04:d9:ee:1a:a6:0a:61:42:08:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1E:D7:42:DB:4E:32:EB:DF:5E:CB:AA:42:BE:7A:FF:46:DC:87:CE
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:b6:1c:1a:bb:34:46:7a:90:99:63:00:4f:24:42:f8:17:
         71:ab:4d:45:1b:51:73:dd:5a:f8:0a:79:6f:7a:ff:bf:f9:cf:
         a1:6e:fc:b5:23:bf:4c:09:50:f7:5c:99:8d:db:d8:4b:7c:b1:
         ff:42:2d:0a:a3:db:28:40:2f:4c:9a:50:99:b2:6a:d8:c4:c5:
         34:9d:3f:26:8f:65:1e:54:1d:b2:98:40:51:1a:b4:e5:fa:f3:
         17:47:b9:47:cd:8d:61:38:52:af:92:3a:5e:b7:0f:f3:ae:93:
         4c:3d:15:23:95:a8:8e:30:a8:0a:90:5b:f4:f9:86:67:93:84:
         14:d4:c8:54:4d:38:38:1d:67:1f:0d:1c:f5:39:29:d9:b7:22:
         b5:e1:ad:95:60:dd:9f:cf:17:5b:56:b8:d5:a6:fb:7e:41:46:
         d1:b2:ed:4e:4d:b1:dc:c3:cb:c7:33:da:cd:e4:ca:9f:3a:c8:
         c1:59:55:bd:f4:f7:83:98:7a:ae:ff:06:6e:80:12:ac:45:25:
         fe:b6:93:73:1d:70:bf:4e:82:3c:97:42:b7:88:00:bd:50:30:
         6e:25:07:09:29:73:40:ed:65:4f:6a:00:cc:ac:1c:d7:8e:31:
         c2:3d:c5:6d:62:d9:3a:17:9a:6e:22:3f:6e:ef:97:fe:c5:37:
         e3:2f:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:31 2026 by rpki-client