This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          m9k5rVXJml2tjIYF4MoQge5BYlftvYj2fCRM6LYgeXc=
Subject key identifier:   6C:54:FE:8C:2F:78:7D:F3:80:0D:EF:6E:6C:9D:E4:4F:D9:3E:DE:59
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019BF319471518A5CBA94F0E41E0003E8EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 03:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:18 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: lmD+9UYV77SkQKt+84+M1zOoPTkvS/q1EI6pn7AtM6A=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:47:15:18:a5:cb:a9:4f:0e:41:e0:00:3e:8e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Jan 25 03:01:18 2026 GMT
            Not After : Jan 26 03:01:18 2026 GMT
        Subject: CN=6c54fe8c2f787df3800def6e6c9de44fd93ede59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:b5:ab:45:ed:4e:62:85:7d:ca:f4:43:5d:
                    3e:60:1c:ef:82:88:6a:ea:ce:59:26:bf:91:0a:d6:
                    18:f4:ef:8f:53:7c:e9:3a:b5:7e:35:ad:89:1f:43:
                    80:c8:e4:f7:8a:3c:1e:a1:7e:a8:35:5a:6d:35:62:
                    58:96:b6:2f:8b:80:e7:84:61:9c:06:a0:c2:94:a6:
                    db:08:c0:d2:0e:d0:1b:9a:d5:1a:cf:5b:d0:e2:41:
                    3e:43:0a:f9:cc:bb:79:bb:8f:21:96:03:eb:cb:a5:
                    eb:31:ca:50:e3:da:a0:ff:1f:c2:65:84:11:1a:14:
                    61:73:91:99:ec:e4:8b:14:82:3e:77:3c:88:96:13:
                    29:56:c3:c2:4b:55:8f:1b:0c:80:bb:7a:51:fe:f4:
                    66:0a:6f:ab:39:6c:31:57:ad:94:54:eb:8b:ce:e9:
                    e5:43:e1:36:c8:11:e0:b9:13:5b:4a:bf:0a:f8:f0:
                    a5:a8:73:25:47:ff:9b:5c:8e:ba:96:f2:10:49:d6:
                    46:9a:04:c5:d4:2a:a9:a1:bf:5c:f3:1f:e3:a9:2f:
                    a9:f5:3c:1f:11:3b:82:66:d8:4f:b7:71:21:6b:a1:
                    8d:9f:be:e2:65:d7:a1:18:00:92:55:a8:f4:ea:5c:
                    ee:e5:ad:9b:c4:f4:36:1f:00:87:40:1e:ff:07:95:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:54:FE:8C:2F:78:7D:F3:80:0D:EF:6E:6C:9D:E4:4F:D9:3E:DE:59
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:5c:e4:8d:e1:d4:84:58:f5:bb:de:0e:2d:10:5c:03:44:
         b4:8b:20:5c:89:67:c8:48:17:f8:60:11:3d:c7:06:77:c8:3f:
         46:7d:44:5c:78:93:ba:96:ed:9b:e2:07:17:e6:5f:d0:f6:1c:
         09:71:af:e6:c2:9c:fa:a1:a0:ce:aa:a7:13:5b:55:aa:7b:51:
         4d:da:eb:0b:54:37:c3:ad:a2:49:0d:df:fc:bf:96:67:55:ab:
         76:70:b7:13:7b:6a:44:ff:25:54:04:67:6f:49:a1:a1:93:25:
         f7:54:87:64:70:63:31:26:a9:cd:69:61:00:b2:dc:bb:d1:c3:
         d0:9e:90:fb:2a:06:11:9b:61:d0:52:08:ca:62:85:4a:a3:b7:
         03:73:83:6c:7a:dd:88:66:f1:b5:b7:58:7a:18:d9:23:0a:c4:
         d4:f6:4b:c2:6c:99:00:63:58:09:74:f5:dd:76:72:1f:fe:9c:
         23:c0:8e:d0:27:97:a8:95:6b:31:ff:bf:f2:23:3d:73:c8:b3:
         32:69:59:7b:e4:46:b2:0e:08:9a:1d:8e:c3:11:c3:eb:89:5a:
         37:e1:64:24:4f:88:a3:e6:f6:37:7c:dc:8e:bd:db:53:79:92:
         1f:77:58:d1:d8:ff:3a:05:49:5b:df:8e:ea:0d:33:68:7a:38:
         b2:a6:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:13 2026 by rpki-client