This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          r7vnuJltix2q9V9YctM673HM4xrd6ky91vnmd+XuN8o=
Subject key identifier:   9D:E6:8E:DB:87:28:9D:E4:B0:F7:AB:7F:47:D1:11:38:20:E3:61:B3
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       019BF53DFC53B1804F04391E6F3BB435CCF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          06CB
Signing time:             Sun 25 Jan 2026 13:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:38 +0000
Files and hashes:         1: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (hash: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: uk+3i3iaY6u/zseorFUvWuMDzGlTBC94L5X1/MGWaq8=)
                          3: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (hash: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM=)
                          4: WrMgI56WRjshSRrApL-slkKjgA4.roa (hash: 0BKk8cC15fl8RJL/MOhUkeA23XV4PJie7eRKpkT7taU=)
                          5: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (hash: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo=)
                          6: smKaRyBksPR8VVMeNllW4CrXk_U.roa (hash: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y=)
                          7: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (hash: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3d:fc:53:b1:80:4f:04:39:1e:6f:3b:b4:35:cc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Jan 25 13:00:38 2026 GMT
            Not After : Jan 26 13:00:38 2026 GMT
        Subject: CN=9de68edb87289de4b0f7ab7f47d1113820e361b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:d9:6a:08:7c:01:12:b9:aa:b0:ac:36:92:
                    a0:d4:79:ff:70:77:26:6d:b8:27:24:81:9c:ce:75:
                    01:c2:3d:e3:07:7d:d7:b6:b8:f9:7d:9d:64:7b:71:
                    15:f0:72:ff:b2:41:d1:6d:28:a5:fe:ee:21:5f:b3:
                    3d:5e:8c:74:48:55:7d:16:96:ee:82:50:8e:e0:33:
                    b9:21:e1:b1:5a:3e:8d:cd:7e:e8:0f:9c:98:26:47:
                    b4:19:d3:01:4f:20:af:49:d7:f2:57:8d:53:c3:47:
                    09:a5:a4:4f:9c:d2:63:66:61:51:35:43:7f:92:ac:
                    19:07:25:bc:e5:26:b3:a7:5f:4b:f1:de:64:6a:06:
                    97:ba:6e:b7:b1:b5:b4:ad:f9:31:06:8e:6c:a1:4c:
                    ec:78:36:4e:96:f6:2c:31:1c:08:89:ec:16:cc:79:
                    d4:b3:5c:db:65:2f:26:57:db:dc:e4:49:92:9e:dd:
                    3c:dc:49:51:f5:b1:c5:f7:26:c7:18:38:a8:ef:33:
                    69:45:a3:39:96:dd:9b:84:7d:76:4a:07:66:c4:0f:
                    ed:cb:ad:3e:54:ef:35:62:fe:33:62:25:b0:3f:9b:
                    e5:9c:d4:66:6f:ef:45:83:6d:10:9e:f3:8e:b6:19:
                    15:0f:c9:28:9a:91:df:12:fc:de:45:aa:a3:71:bd:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E6:8E:DB:87:28:9D:E4:B0:F7:AB:7F:47:D1:11:38:20:E3:61:B3
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:24:e9:c3:a8:e4:97:65:58:5d:77:86:5c:77:e4:9a:a8:
         76:7f:e1:91:07:51:66:e3:4a:6d:80:6a:d6:3f:75:4f:90:ca:
         d4:77:ad:26:28:d5:c8:04:67:6b:56:2e:f7:36:87:2a:6c:e7:
         bc:d1:d4:62:a8:9d:51:7f:22:75:69:68:c3:43:c7:2a:4d:65:
         cd:10:34:a9:ba:d8:38:f4:96:74:da:f8:9e:52:46:ea:a7:a0:
         11:c8:5c:03:e7:2c:3a:68:7b:08:9b:77:af:31:5d:90:ea:ec:
         de:9e:d0:af:c7:49:60:03:bf:8a:8e:ff:20:84:b7:4b:45:19:
         45:c3:11:cf:98:32:ef:04:f2:1d:0f:a6:1f:a6:67:51:bc:f8:
         f9:cb:5c:0a:3d:ba:90:9a:35:c4:f9:a7:ed:32:ce:cf:7b:02:
         01:9a:fe:ac:0d:cc:59:2f:49:8a:67:5a:d3:6e:76:a3:d3:12:
         74:83:b3:dc:0e:d4:50:7d:7c:48:fc:ac:96:11:df:0f:b4:9d:
         1b:e1:8b:19:96:ad:c2:89:ee:f7:be:25:df:cd:7c:06:a5:5b:
         15:2a:fc:6c:7d:0f:46:39:30:c8:cc:41:e3:e3:fc:af:d2:46:
         f5:38:eb:af:25:5c:e7:c5:eb:9c:8d:03:17:1c:45:09:5c:39:
         47:e6:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:19 2026 by rpki-client