This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File:                     bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier:          aLex5CnWWZoaxItNzoRuBaq+yOl3mBIG2vsB6yJRmAI=
Subject key identifier:   72:2C:8B:D4:28:FF:B9:13:7C:49:D0:CA:12:B7:F0:19:0C:44:39:83
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer:       /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial:       019BF7D18B77D36CBA9CF4BCFA99873F7234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 01:01:03 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:03 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:03 +0000
Files and hashes:         1: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (hash: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA=)
                          2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: k7jiEA5n/UayB9xxvbWhksk6qu5TrpMYtIHO5dG4hQM=)
                          3: wgHQmaQij3F-nK5W4X8CVxaOPm0.roa (hash: sBWiBVt4sHrg4hhwrk19Ek9irYUlBrf3WzJ8I2XR+Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:8b:77:d3:6c:ba:9c:f4:bc:fa:99:87:3f:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
        Validity
            Not Before: Jan 26 01:01:03 2026 GMT
            Not After : Jan 27 01:01:03 2026 GMT
        Subject: CN=722c8bd428ffb9137c49d0ca12b7f0190c443983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:c8:f1:f8:82:7f:25:36:18:a2:8e:11:dd:
                    47:7a:b7:bc:47:b9:fd:6c:1d:32:ee:83:04:0a:5d:
                    16:b8:3d:a5:41:6e:08:07:36:3c:4e:55:a4:d4:4b:
                    e3:0d:0a:02:04:68:f9:83:37:7e:d1:45:09:6c:94:
                    12:f3:19:a6:c6:c0:a7:7e:18:3b:07:1a:85:fb:41:
                    dd:82:61:2b:11:b2:7a:87:b4:64:1b:9f:f4:19:d6:
                    dc:07:c1:78:4d:aa:57:3e:54:e7:ff:1d:70:bf:2c:
                    e7:3a:c6:e6:bd:5a:66:73:54:45:83:a8:f8:20:d8:
                    4e:b6:93:e7:73:79:62:4c:14:c2:bf:c4:bb:a6:ca:
                    5f:48:db:e7:d3:3e:6c:25:be:7a:30:c2:5e:17:c8:
                    68:4a:69:1e:43:5d:4a:d0:76:39:45:50:82:07:7d:
                    2d:a9:d5:a5:7a:c9:db:c7:6b:8d:b0:fe:38:a2:af:
                    4b:20:81:5a:be:de:29:47:d8:ae:ec:07:ba:e1:08:
                    65:33:18:ca:a1:47:d5:fb:3a:79:03:86:d1:32:b1:
                    2b:fd:b1:cd:4a:1e:96:0b:01:19:a2:c0:d1:f5:7b:
                    91:5d:ec:1b:06:43:d8:b3:92:4a:c8:e4:2d:16:c2:
                    d7:62:38:80:79:28:c8:81:4f:7d:53:77:fb:04:d0:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:8B:D4:28:FF:B9:13:7C:49:D0:CA:12:B7:F0:19:0C:44:39:83
            X509v3 Authority Key Identifier:
                keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:15:b3:78:2a:04:e0:77:5f:57:69:55:d3:04:00:01:b4:
         1c:54:70:21:31:97:7c:ca:38:e7:af:86:af:c5:7f:60:9f:b5:
         a0:1e:ec:16:bd:f3:04:43:96:57:ee:e1:2a:76:c6:91:14:ba:
         a9:9b:1f:ec:35:1d:42:9e:be:ea:17:10:4b:0f:3a:b0:63:60:
         ae:09:44:a2:5d:e3:b7:fd:ea:f4:0f:02:3b:6e:87:25:cc:aa:
         69:0d:d5:34:f4:c9:25:21:8f:d6:de:07:ac:33:25:ec:90:2a:
         c9:c1:a6:37:6f:b9:2c:7e:4e:ed:de:b5:bd:9b:85:01:ae:a6:
         94:5d:a1:2b:50:b5:0d:f3:99:3f:d3:0c:81:4a:7c:de:da:6f:
         8a:4f:54:17:ea:06:d2:0a:3a:a8:d6:f1:8e:30:62:5b:1f:ac:
         c9:33:6b:1e:2f:a5:7e:e3:bd:b8:e5:52:fd:45:8c:22:c4:a8:
         9c:16:66:31:e3:75:05:e1:d5:fe:50:e6:6e:d5:cb:1d:d8:ea:
         38:57:4c:df:cf:ae:b0:a4:b9:16:14:5a:ae:77:b8:cf:98:08:
         73:64:7b:c2:55:74:88:a4:a0:3f:f9:dc:42:36:94:2e:35:20:
         ff:1b:e0:ff:bc:cd:09:95:bf:4b:23:be:ae:52:38:7a:af:c9:
         77:30:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:10:09 2026 by rpki-client