This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          ZA+WFRK6IBgOyECwgG6RaGsD8F0LLLj55sV9WFzyI1E=
Subject key identifier:   D9:AB:C3:AE:A5:3D:E2:2A:8C:73:4F:26:EB:D1:82:C1:F6:39:69:FD
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019BF6F5E71E814713D234523A35A09DEDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 21:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:09 +0000
Files and hashes:         1: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          2: DPfDzK5MIgt9uCqb-OzrjnTt0XE.asa (hash: xVJ7dS76yV9K4GLx/NHqZB5JP3AMDX7XWVpGOyoTdvQ=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: Fa9guveX/KBOzCqQrNRtgDxz0KuDnLbYez6FEI4vYwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:e7:1e:81:47:13:d2:34:52:3a:35:a0:9d:ed:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Jan 25 21:01:09 2026 GMT
            Not After : Jan 26 21:01:09 2026 GMT
        Subject: CN=d9abc3aea53de22a8c734f26ebd182c1f63969fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:b7:5e:2e:58:52:3b:7f:de:77:95:17:ae:
                    9a:aa:1b:77:a0:49:66:1f:0f:67:f5:e8:c5:32:c9:
                    6d:12:0c:a6:f7:5c:d0:79:d2:5d:8d:12:9f:80:dd:
                    27:a0:be:6a:59:3c:92:0f:92:e3:8b:3f:77:1c:65:
                    52:9e:b9:1a:26:d1:23:ca:9d:0a:c2:26:fa:b0:b8:
                    02:65:af:48:21:4c:0c:f9:a3:76:bf:7d:f8:9c:c6:
                    8d:e3:de:99:a2:1d:52:88:35:bf:c9:1c:cd:22:95:
                    79:f2:bf:ed:00:95:51:b1:17:ac:7a:3b:2d:74:d1:
                    e7:dd:84:4f:4c:ec:4b:cf:b5:94:92:c4:62:2e:a5:
                    a1:5c:ec:81:ff:93:04:56:9c:e7:da:24:7b:a3:ca:
                    5e:b5:dd:2d:f8:88:9e:c9:e1:0a:1e:bf:78:bb:c0:
                    cf:3c:f9:98:70:b4:93:b4:c3:04:50:58:cb:26:60:
                    8a:4f:38:f4:7d:5b:12:bc:42:d0:d3:c9:5c:80:0b:
                    18:91:a6:74:ab:60:0f:2a:0d:8d:0a:7b:9f:f4:03:
                    e8:e1:55:4b:99:57:3a:3c:bc:f2:da:38:28:bb:d8:
                    af:21:01:08:0f:03:6a:96:31:9b:1b:7d:22:8f:ff:
                    69:4b:6a:04:d8:17:49:9b:be:d9:60:58:ff:04:19:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AB:C3:AE:A5:3D:E2:2A:8C:73:4F:26:EB:D1:82:C1:F6:39:69:FD
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:1b:8e:0b:d4:8e:38:b8:de:28:16:66:f2:8c:d0:bb:44:
         c7:f9:51:28:a9:2b:f5:22:e4:73:e6:04:87:3c:fe:71:38:12:
         18:91:6d:26:63:04:95:4e:5b:b9:12:fb:54:20:de:d5:e7:c5:
         9a:ea:2a:73:a3:52:40:6f:1a:35:0d:94:d2:e1:c8:d2:ff:6f:
         4e:90:24:70:b8:27:7e:42:51:d1:ae:a7:04:ad:3b:24:9d:38:
         64:94:0b:f6:80:98:90:ab:6b:58:fe:e6:7d:46:05:58:cd:92:
         8f:0a:6e:74:c7:a1:af:01:35:c8:89:74:bb:5f:cd:a7:c8:a4:
         c6:18:a7:d1:ed:8f:4b:a1:4b:75:d5:7f:c2:6f:b9:d8:cc:57:
         ba:2f:f8:46:cd:2c:2e:14:c1:d6:f0:92:4a:4f:d6:5e:a0:26:
         5e:24:8a:08:df:f3:92:68:55:77:64:7e:55:f4:2d:ac:45:09:
         a9:6a:05:8e:40:15:fc:ca:16:c3:96:d2:29:dd:c9:3b:d7:96:
         45:56:d3:d4:a5:1e:a1:77:91:2b:2a:4e:89:b7:a5:e9:8c:cc:
         5a:0c:b5:ff:f4:d7:6c:34:8c:2c:ef:ad:1e:e6:34:64:d1:8c:
         a2:98:e7:d6:71:c0:48:54:06:54:0e:41:ed:a8:90:c5:ac:7a:
         4d:92:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:06:29 2026 by rpki-client