This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          WcQlPBpWae93BPobHV6NL/K+jfQQZ0ZlCDXhtW4JtQs=
Subject key identifier:   24:83:EC:75:25:73:8C:9B:49:31:EC:C9:60:C7:A1:25:24:6D:B0:BB
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       019BF72C9EDC6273FD142EED7B4F480CF3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          06CC
Signing time:             Sun 25 Jan 2026 22:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:55 +0000
Files and hashes:         1: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (hash: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: i0dUOdbuApmhf1xlzCYMFChr22NQYVOvJ+PI3agTcqE=)
                          3: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (hash: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM=)
                          4: WrMgI56WRjshSRrApL-slkKjgA4.roa (hash: 0BKk8cC15fl8RJL/MOhUkeA23XV4PJie7eRKpkT7taU=)
                          5: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (hash: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo=)
                          6: smKaRyBksPR8VVMeNllW4CrXk_U.roa (hash: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y=)
                          7: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (hash: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:9e:dc:62:73:fd:14:2e:ed:7b:4f:48:0c:f3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Jan 25 22:00:55 2026 GMT
            Not After : Jan 26 22:00:55 2026 GMT
        Subject: CN=2483ec7525738c9b4931ecc960c7a125246db0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:ee:b4:c3:5c:5c:33:18:80:f4:47:1e:68:
                    95:0a:1c:df:66:8a:ca:54:13:45:a6:b2:73:a6:16:
                    ed:5a:6d:c8:ec:22:f7:81:9f:84:ec:6f:62:26:71:
                    73:d4:77:ae:ef:4b:93:43:ce:6d:ab:79:51:14:09:
                    2f:46:4e:35:4c:10:65:af:b4:41:d5:4a:f4:e2:f9:
                    bf:67:51:5f:29:b0:8b:4e:f2:7f:a0:89:48:6e:39:
                    81:c3:c0:55:ab:87:73:51:37:8b:29:2d:5c:3a:e1:
                    94:26:f4:20:9d:e8:b2:51:57:d5:a1:7f:7d:94:28:
                    2d:73:a6:76:c2:42:49:8e:25:57:40:2f:86:ce:60:
                    89:cb:08:88:8d:91:25:b1:7c:8d:0e:db:84:da:5f:
                    9b:be:b6:b5:da:1f:1c:58:e4:a8:93:9b:32:ff:e2:
                    b2:41:03:31:62:d1:ce:75:b0:4c:5a:35:8f:82:47:
                    2b:7c:63:6d:b8:41:89:5f:a4:6e:ab:5c:cf:6e:e6:
                    b8:d9:c2:3a:06:07:a6:87:5b:5b:e2:5e:39:39:34:
                    ee:ed:fe:59:5b:32:50:e4:e5:06:e9:83:f3:c9:d4:
                    c4:95:43:d2:08:9a:51:2c:80:2c:2e:06:59:f8:76:
                    84:19:ee:c0:ed:df:03:fe:69:83:64:88:88:70:a2:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:83:EC:75:25:73:8C:9B:49:31:EC:C9:60:C7:A1:25:24:6D:B0:BB
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ba:68:67:98:59:66:2e:e8:fb:f8:35:21:13:bb:e0:0a:21:
         8b:07:fd:4d:73:25:5b:15:e7:46:fc:f9:95:ea:36:51:e9:3f:
         d6:76:ba:55:58:2c:98:d7:e6:f8:37:cb:40:6c:f8:01:2b:6a:
         0c:45:76:52:8d:71:3c:2e:bb:0f:ec:6d:e5:38:b6:ff:a7:54:
         d3:da:44:e2:3f:e7:ee:98:fd:f5:7b:c3:90:3b:4f:7f:e3:8a:
         ec:5c:18:43:c4:b3:f8:3d:14:2f:5a:f0:a5:7a:9b:43:7e:be:
         0f:75:54:ad:5b:a0:e4:47:13:1a:ef:e1:e0:05:c1:18:d4:cd:
         6c:ac:40:1f:04:0c:77:5d:22:e8:ef:c2:3c:2f:6d:55:b9:4c:
         30:fe:d4:8a:4a:77:6a:23:23:cf:22:cb:56:18:86:47:e2:f7:
         5d:2f:7a:6c:29:4b:fe:35:93:9e:75:81:8b:1a:dc:7c:6a:75:
         77:7a:e1:bc:50:a6:c6:0a:6e:50:92:45:14:fb:e4:76:a1:2e:
         76:15:1d:38:ba:4f:cc:bc:26:02:9d:17:33:9f:1b:86:d6:26:
         85:e3:8d:8d:f1:ea:51:f1:74:db:11:65:77:f4:a5:e4:34:46:
         7c:ef:95:ae:f0:ae:1c:55:74:56:d6:6f:94:81:a8:e9:c4:9b:
         eb:23:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:30 2026 by rpki-client