This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File:                     19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier:          ZcHfPMqDpEqvUbsVLUGI9kxVZiqf9/kyY/vGCP+bezU=
Subject key identifier:   D1:93:1A:77:63:DB:CC:25:C7:81:30:B5:7A:F0:1E:32:A7:1E:46:3D
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer:       /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial:       019BF3BE0699F31674A351CEC4D3F44F889D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number:          0924
Signing time:             Sun 25 Jan 2026 06:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:15 +0000
Files and hashes:         1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: 6X4nhdaTg/o9hU7H8NYXR1x0xqeLwrry5pX7pWih92U=)
                          2: Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa (hash: zmUzBEXw7msOBYr3VGkxq3D1/a+XrxaT8Frd+PDSbhs=)
                          3: b5B5fVg5JQFI93o_bkGxYqBgTcA.roa (hash: KxD2Oza9P8EtKAvqi17xlL2B0ma0zo5mB3KiOChLdyg=)
                          4: oE6r51K-Hn36jEQK9rwYznVcluY.roa (hash: ktgHZDZ0XBs6bzgGz/KVT3sjiszOsWQkRn5c+F0Z0G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:be:06:99:f3:16:74:a3:51:ce:c4:d3:f4:4f:88:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
        Validity
            Not Before: Jan 25 06:01:15 2026 GMT
            Not After : Jan 26 06:01:15 2026 GMT
        Subject: CN=d1931a7763dbcc25c78130b57af01e32a71e463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:d9:b5:9a:94:98:76:05:e9:ed:ac:66:ee:
                    ec:da:83:7f:4e:91:86:34:26:d3:42:6e:9b:f0:62:
                    b7:88:eb:9d:58:57:b5:c6:9c:9d:91:8a:ca:79:00:
                    c4:e9:cc:ff:5c:bb:89:93:8d:63:e4:83:96:b4:2c:
                    85:89:31:d4:9b:e8:92:0e:18:d5:60:46:82:43:b5:
                    01:83:20:e1:7f:e2:0e:6d:0c:33:d4:67:69:3f:b1:
                    cb:48:60:6f:75:04:52:13:b6:b7:3f:72:e5:1e:98:
                    04:ac:23:05:01:01:b0:c7:bd:d9:27:fe:8b:08:3f:
                    fd:8b:a0:9f:09:e9:c2:d0:c8:33:3e:0b:34:7e:c5:
                    19:95:44:22:0b:ac:b9:dc:db:ca:90:9c:e9:f0:ef:
                    cd:40:35:35:61:1f:d4:69:91:96:c7:87:cb:75:45:
                    97:3e:51:d3:fa:74:4e:c6:7c:49:96:c1:ea:ef:97:
                    e0:8d:77:c4:be:be:56:49:1a:b1:61:eb:31:dc:e8:
                    27:fb:d0:dc:77:31:ee:84:e9:e6:3c:ca:99:c7:04:
                    17:a2:dc:ee:df:8e:fd:06:fc:19:7c:42:d3:e2:99:
                    a8:70:9e:37:c1:2b:92:50:5b:3d:45:68:74:6e:19:
                    b8:03:da:63:57:ed:46:1e:74:b5:1f:61:ed:42:6f:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:93:1A:77:63:DB:CC:25:C7:81:30:B5:7A:F0:1E:32:A7:1E:46:3D
            X509v3 Authority Key Identifier:
                keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:13:61:77:57:94:5f:3f:bd:f7:75:94:26:ca:9d:ad:12:c5:
         c7:32:69:20:a7:80:20:7e:04:14:5a:fd:b6:09:aa:b9:e1:14:
         d7:1b:69:44:3c:b8:63:ad:11:8e:d2:14:dd:6d:4e:41:7c:d2:
         9b:60:0a:72:9e:79:01:29:47:1a:72:d5:df:4f:1b:15:9b:8f:
         f6:53:19:ff:5e:d0:7d:e4:84:04:9b:91:45:24:f7:30:81:89:
         d7:a7:6b:a4:81:96:c3:37:1a:da:91:0b:f2:4d:7c:0e:fe:b6:
         60:51:34:24:e5:7e:15:e9:be:e6:e0:a4:16:0d:b6:24:c9:ec:
         10:c8:c2:23:62:1f:66:74:76:c7:42:a0:da:97:3b:f3:d4:12:
         e2:af:24:eb:47:87:5f:96:1c:7e:4b:eb:59:6e:fa:55:5c:72:
         63:5e:a2:8a:b3:ce:c7:2d:86:75:ba:24:d8:22:cd:2d:e1:25:
         76:07:59:10:54:27:b8:ef:59:4d:8a:b2:21:95:d2:a1:b1:cf:
         2c:d0:f9:65:30:cf:13:6a:f8:77:3a:03:2e:a2:ef:cb:2f:64:
         49:9a:b3:1d:bd:ed:88:7b:55:db:7f:bf:9b:79:76:bf:b0:1f:
         ba:b6:f2:69:6e:18:cf:59:69:05:2b:36:82:2a:a8:cf:3d:d9:
         a7:19:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:22 2026 by rpki-client