This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File:                     bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier:          DmujvJk2gJVsY0n5ufS3w09wCO81Yn+LYmJ+rPsePXw=
Subject key identifier:   E3:37:FB:72:40:1D:D0:F2:EB:76:6B:60:AC:AE:44:16:B7:D1:4E:2C
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       019BF53E3CAD89AFEB40CE8F630048715051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number:          182E
Signing time:             Sun 25 Jan 2026 13:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:55 +0000
Files and hashes:         1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=)
                          2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=)
                          3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
                          4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=)
                          5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
                          6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: Gg5Amc2qUcsF2E+4MYSHrvqf1dfCEs8FKWAPBHSk09g=)
                          7: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
                          8: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=)
                          9: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:3c:ad:89:af:eb:40:ce:8f:63:00:48:71:50:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Jan 25 13:00:55 2026 GMT
            Not After : Jan 26 13:00:55 2026 GMT
        Subject: CN=e337fb72401dd0f2eb766b60acae4416b7d14e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a6:5a:ca:73:30:d4:6f:59:80:cc:38:84:f7:
                    09:d7:fe:88:8c:93:3c:c9:db:ae:df:6a:08:60:d8:
                    f1:ae:80:0f:71:40:0d:2f:87:d4:33:ed:80:2e:40:
                    76:6c:a4:5d:6f:41:4e:79:7a:cd:d6:25:3f:8f:f6:
                    6d:08:04:75:0b:52:96:cf:4e:fb:ce:bb:a3:a8:52:
                    9f:ae:7d:a6:97:21:ab:5f:ae:4c:10:e9:22:02:5d:
                    05:46:e1:e0:98:5c:0c:57:60:b6:93:9d:40:63:57:
                    94:8e:ee:ed:8c:9b:ed:88:bf:e8:83:0d:93:ac:74:
                    49:15:4e:c8:21:fd:35:e6:9d:18:54:af:5f:a8:cf:
                    66:14:e5:5f:21:1e:6b:07:39:9a:ba:e8:26:6e:8b:
                    ca:82:d6:0b:06:dd:7c:29:6c:70:e9:6f:65:3a:db:
                    73:ec:82:91:6b:1b:98:cc:dc:b8:97:f5:b9:d8:2f:
                    33:77:88:83:ab:62:75:25:33:af:ea:7c:98:92:3b:
                    b7:d4:e6:6f:1e:74:ad:f2:a2:3e:f3:d4:58:66:23:
                    68:ec:c2:c2:2b:68:7c:b5:de:e7:9b:88:71:5c:21:
                    53:ca:cf:60:ca:f7:ce:87:5d:06:30:8f:f4:e3:57:
                    9b:4a:9a:77:fa:f4:25:7d:6a:42:8f:0d:78:27:24:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:37:FB:72:40:1D:D0:F2:EB:76:6B:60:AC:AE:44:16:B7:D1:4E:2C
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:17:79:fe:e4:3d:6a:13:5d:1b:2b:63:59:a0:e8:57:55:52:
         25:3c:9c:d7:7d:d0:d4:2a:03:73:a3:bc:34:59:9f:1d:24:33:
         b3:7f:7b:22:55:fa:93:07:c4:f9:d8:6a:5c:0b:89:fb:64:e6:
         94:b2:8c:f7:77:80:48:e0:66:15:3e:c8:ea:97:1b:f9:8d:b8:
         d5:0b:3f:dd:4e:57:47:ed:c9:fa:04:7e:87:d5:1c:19:b9:c2:
         7d:b4:80:06:f2:93:09:2a:22:02:2c:5a:c1:60:8b:02:67:2f:
         69:6b:73:b1:35:6c:ea:62:7b:17:e4:6a:5d:11:ef:72:32:f8:
         7c:13:51:43:e9:f4:ae:5a:a1:4e:c3:f6:bc:75:1b:9f:07:a0:
         a2:c2:a0:af:df:b5:32:91:1b:df:33:2f:29:46:4a:5c:69:fc:
         f0:2c:d4:3f:bb:d5:6a:79:02:84:30:71:8c:93:a3:dc:5a:cd:
         9f:06:9d:22:91:ed:62:36:36:f6:95:29:02:46:20:a7:24:b3:
         3e:63:ce:7e:c3:bd:39:bf:db:f3:c5:58:b0:d7:a7:41:e7:ac:
         26:d9:00:5c:56:89:39:5d:ad:b5:3c:0b:8f:82:78:ad:f8:8d:
         78:de:6a:9c:76:5a:48:66:71:d7:ab:c0:fe:13:aa:39:88:84:
         6d:3a:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:12 2026 by rpki-client