This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File:                     jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier:          ToG/IvHsPcVjwVMW33wWpMfLPJjvHEhi84YJk0ws/SQ=
Subject key identifier:   BF:E4:F8:DA:78:90:07:C4:06:B1:2E:83:01:D2:79:03:EF:B7:3B:6E
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer:       /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial:       019BF3870446DF3FA449D20C564C71DF88AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number:          16AC
Signing time:             Sun 25 Jan 2026 05:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 05:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 05:01:10 +0000
Files and hashes:         1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
                          2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
                          3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: j6IyllD5Dyv3sLU30/M2Dngn8NdzBhYke7dz4wdVWMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:87:04:46:df:3f:a4:49:d2:0c:56:4c:71:df:88:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
        Validity
            Not Before: Jan 25 05:01:10 2026 GMT
            Not After : Jan 26 05:01:10 2026 GMT
        Subject: CN=bfe4f8da789007c406b12e8301d27903efb73b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:99:fc:0f:25:58:e7:89:5f:0f:ac:14:df:
                    74:46:8d:70:63:56:84:9e:f7:ea:91:ee:21:fc:ac:
                    33:48:f8:63:54:a9:30:7c:d4:5d:2c:96:c9:1c:b1:
                    08:a6:f4:f9:66:16:51:ae:5c:fb:51:6a:c7:d9:d6:
                    c4:de:e4:3b:74:5b:c7:62:1a:21:b7:5b:f8:6f:b0:
                    e4:05:ac:eb:bf:dd:d4:60:04:0f:5f:a3:e4:7c:6b:
                    de:29:b3:bf:e4:dd:20:85:72:39:a6:b3:80:4f:c6:
                    7f:50:49:e6:a7:c2:51:e4:3f:d4:3d:4e:18:ef:08:
                    da:08:d9:57:25:9f:88:bc:44:ea:c7:d5:3f:e3:c8:
                    a4:cd:ef:e4:27:eb:ae:14:cc:82:bd:94:8a:f9:33:
                    7e:05:52:9f:d2:50:ff:8a:ba:e4:72:18:11:fa:f6:
                    c1:52:0e:f6:4d:c1:e2:f9:78:fd:04:ef:00:2c:7e:
                    a5:09:a9:6e:60:f3:8c:bd:85:0a:bb:9d:bc:e1:a6:
                    63:9d:57:39:76:8d:89:91:75:81:58:8d:6c:1a:a7:
                    96:cb:44:3d:55:41:b2:ae:65:cd:55:4d:35:78:0e:
                    1d:a5:ec:0f:93:5b:f5:b5:34:ba:3b:31:af:56:08:
                    63:79:02:09:52:68:f6:17:15:59:1a:be:16:7b:cb:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:F8:DA:78:90:07:C4:06:B1:2E:83:01:D2:79:03:EF:B7:3B:6E
            X509v3 Authority Key Identifier:
                keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:84:38:3b:9b:d0:8a:de:db:5d:81:7d:58:9e:99:59:39:98:
         88:86:15:da:60:44:8a:d5:f9:e1:70:70:d1:ea:ab:bf:59:a1:
         5e:86:67:3a:89:7f:13:08:fb:75:93:f9:46:87:cd:fe:c6:56:
         7e:d9:17:63:a6:54:e7:00:04:0b:7b:94:42:7e:88:af:9a:a3:
         4e:a9:af:a4:8c:52:c1:5c:d1:c5:94:38:45:5d:9a:2d:84:2c:
         ab:b4:e6:7f:46:dc:45:34:cd:ef:0a:fe:ca:09:62:d4:27:c7:
         ad:7b:6b:31:28:15:aa:18:14:eb:1c:1d:3c:bf:d2:cf:0b:55:
         74:97:8d:8c:84:ce:d5:39:94:bd:e0:96:49:bf:0f:5b:ab:15:
         b7:87:ab:94:40:b9:88:bc:95:3a:65:f8:73:db:aa:f0:7c:9c:
         15:f4:b4:6e:9b:fb:7e:7a:14:f8:07:3b:e4:52:07:f3:f7:ff:
         c6:6d:91:42:95:62:a9:90:24:b4:91:ae:cc:0d:fa:0f:ce:1a:
         6a:64:4f:eb:d0:fb:05:02:b1:8f:e0:17:1a:56:12:29:51:7e:
         e3:f7:33:a7:f3:67:ea:4f:dc:81:89:23:8d:6d:52:ca:3b:2a:
         0e:09:4b:21:14:88:38:bd:23:5e:30:3d:c7:bb:a7:45:c7:80:
         d2:87:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:15 2026 by rpki-client