This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File:                     boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier:          ij2hIeYhH0Kkrsc41dnqWMI78DXwICtz9SOx6P41o20=
Subject key identifier:   C1:63:78:5F:7A:B1:2A:1E:61:BE:50:2C:40:B1:82:01:40:D0:E2:90
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer:       /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial:       019BF6BF3748FA5BC778E2565B86022D5A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number:          1742
Signing time:             Sun 25 Jan 2026 20:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:25 +0000
Files and hashes:         1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
                          2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: Llp6C/R0xZLPoSiWFZtZCmh1i5gLTbGJWmHm6bbqnLw=)
                          3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:37:48:fa:5b:c7:78:e2:56:5b:86:02:2d:5a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
        Validity
            Not Before: Jan 25 20:01:25 2026 GMT
            Not After : Jan 26 20:01:25 2026 GMT
        Subject: CN=c163785f7ab12a1e61be502c40b1820140d0e290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:f0:57:73:ef:4c:42:f2:46:52:96:58:55:
                    a3:b1:4f:b7:9f:39:8b:c9:13:cb:e7:f9:b8:56:d3:
                    ab:cd:38:96:f9:b2:b8:54:e2:6b:ea:cb:88:23:4d:
                    b8:7c:f4:e9:82:c2:0f:7d:7d:72:25:6a:7a:84:7e:
                    e6:b1:23:c9:de:2e:b2:c8:2a:b4:2d:e9:d7:5e:30:
                    81:3d:73:cf:1d:7e:94:bb:b7:f2:18:35:f7:79:c5:
                    61:3a:ea:78:b5:2e:35:8a:7d:03:1e:cf:a1:7d:89:
                    6d:80:8d:d6:0c:9c:1b:f8:b6:61:93:2a:44:96:03:
                    46:d9:11:ba:9d:f6:d5:3b:50:44:f9:5f:bc:22:2c:
                    e9:76:50:4f:24:d0:d1:70:34:e6:9d:9c:c5:43:bc:
                    04:4a:be:78:32:76:b4:8a:77:f4:da:42:e1:db:24:
                    6c:6b:91:d0:6e:56:c0:a9:4c:01:e7:7a:51:09:52:
                    55:7f:96:79:4f:08:1d:53:6f:59:77:8b:27:82:03:
                    f7:4d:ae:8c:44:99:ba:9e:12:57:2e:5a:05:b6:1e:
                    5f:97:16:c8:70:d9:20:15:2e:29:92:ca:e5:44:d8:
                    62:22:96:89:bd:2b:12:fd:f2:c1:11:1f:f4:be:a4:
                    4a:5b:89:57:81:66:f4:4f:22:0a:3d:e8:bb:77:8d:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:63:78:5F:7A:B1:2A:1E:61:BE:50:2C:40:B1:82:01:40:D0:E2:90
            X509v3 Authority Key Identifier:
                keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:93:53:e7:8f:e7:21:40:3a:81:24:91:6f:09:8d:d9:7c:
         ac:2d:d4:21:07:db:df:74:3b:6c:e3:30:58:2e:76:c3:49:73:
         2c:c3:a2:88:f2:77:d7:71:ab:09:01:d8:f1:27:c9:c3:6d:ad:
         e5:90:58:78:8b:10:7f:b7:3c:e6:40:c2:3e:2e:e2:f3:43:05:
         d6:75:f3:a1:c2:dd:f7:e1:f2:c3:42:95:ce:70:b8:95:35:4a:
         29:5a:93:8d:0f:29:93:c4:fa:bb:c9:64:82:87:85:06:1a:61:
         21:5a:2e:2c:07:c5:ee:de:a7:e5:b5:97:bf:2f:72:96:ad:de:
         bd:d5:f6:8a:b1:ec:e0:c7:2c:88:57:9b:50:97:65:10:d8:6d:
         f4:b2:08:5a:a9:fd:a9:f1:76:7b:79:75:b7:df:a9:a7:24:ce:
         d1:80:64:49:50:bb:6e:13:3c:3c:2b:35:54:7c:80:04:5c:a5:
         66:63:8c:3d:ef:52:2a:ef:c0:6d:e4:d4:c7:e6:36:05:6c:fc:
         19:43:88:00:03:d2:1e:11:4e:81:76:b5:54:f9:d7:7b:8b:57:
         88:e4:6a:c5:d6:7f:d9:fe:e8:86:48:04:ab:6b:06:a0:b2:b2:
         bd:26:68:04:9c:47:c1:46:09:2b:56:8e:2b:2a:ab:db:b3:bc:
         bf:43:b4:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vzdI+lvHeOJWW4YCLVqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm
YTdjN2UwHhcNMjYwMTI1MjAwMTI1WhcNMjYwMTI2MjAwMTI1WjAzMTEwLwYDVQQD
EyhjMTYzNzg1ZjdhYjEyYTFlNjFiZTUwMmM0MGIxODIwMTQwZDBlMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifwV3PvTELyRlKWWFWjsU+3nzmL
yRPL5/m4VtOrzTiW+bK4VOJr6suII024fPTpgsIPfX1yJWp6hH7msSPJ3i6yyCq0
LenXXjCBPXPPHX6Uu7fyGDX3ecVhOup4tS41in0DHs+hfYltgI3WDJwb+LZhkypE
lgNG2RG6nfbVO1BE+V+8IizpdlBPJNDRcDTmnZzFQ7wESr54Mna0inf02kLh2yRs
a5HQblbAqUwB53pRCVJVf5Z5TwgdU29Zd4snggP3Ta6MRJm6nhJXLloFth5flxbI
cNkgFS4pksrlRNhiIpaJvSsS/fLBER/0vqRKW4lXgWb0TyIKPei7d433ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFjeF96sSoeYb5QLECxggFA0OKQMB8GA1UdIwQY
MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt
NWMwMTgxN2ZiODIyLzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy
LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqaTU+eP
5yFAOoEkkW8Jjdl8rC3UIQfb33Q7bOMwWC52w0lzLMOiiPJ313GrCQHY8SfJw22t
5ZBYeIsQf7c85kDCPi7i80MF1nXzocLd9+Hyw0KVznC4lTVKKVqTjQ8pk8T6u8lk
goeFBhphIVouLAfF7t6n5bWXvy9ylq3evdX2irHs4McsiFebUJdlENht9LIIWqn9
qfF2e3l1t9+ppyTO0YBkSVC7bhM8PCs1VHyABFylZmOMPe9SKu/AbeTUx+Y2BWz8
GUOIAAPSHhFOgXa1VPnXe4tXiORqxdZ/2f7ohkgEq2sGoLKyvSZoBJxHwUYJK1aO
Kyqr27O8v0O0cA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:03 2026 by rpki-client