This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File:                     Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier:          nUZS1uQdPINvBJzHojjFpgl1UZXo2PgpbteOrWm0WDE=
Subject key identifier:   C6:EB:41:9B:F8:23:51:26:3D:AA:27:6E:A7:7B:1D:6C:E2:28:00:94
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer:       /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial:       019BF318B8C8FA42FB66B7828E516A2CC4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 03:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 03:00:42 +0000
Files and hashes:         1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: qBZ4M6IQ4LY7/SwbIM5QRD8dbmwRbqdWnHuo7+n7vZI=)
                          2: GJ88qTwtpZgvlow0U8JklryzTi4.roa (hash: rMuWGzdmVjB9uRhoFbfS+t/YKM/OE+82Ka9FNLX/ToA=)
                          3: OrYOImn3NtSbw6j1q7F4tyMDONo.roa (hash: AOiTTEt/7wPiwgX5uzbI7/3KraGUZvwfK+uoiywXaUk=)
                          4: lHa2144Rf9xpcYGrU4zFSx3PxgQ.roa (hash: YuuR66ZP+oiL0VU5WQBIfFn1e2Jdtzdqyzb4NVbUF8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:18:b8:c8:fa:42:fb:66:b7:82:8e:51:6a:2c:c4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
        Validity
            Not Before: Jan 25 03:00:42 2026 GMT
            Not After : Jan 26 03:00:42 2026 GMT
        Subject: CN=c6eb419bf82351263daa276ea77b1d6ce2280094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:d9:e2:ed:0f:4c:c5:09:e5:42:6b:ae:fa:
                    da:aa:25:04:94:d8:c5:ec:ec:f8:12:10:06:24:04:
                    10:a9:b8:c8:c2:c4:8f:84:93:62:62:a6:f1:80:18:
                    0b:49:71:13:3c:af:ed:86:2f:90:04:80:56:b1:73:
                    f4:fd:dd:ae:a3:a5:3b:c1:5f:29:54:c6:12:08:98:
                    e9:59:cb:7b:69:cf:5e:6f:ba:1f:74:f0:da:60:91:
                    e8:8a:d2:24:59:17:d5:02:ae:9a:6d:c3:bf:f3:50:
                    8b:6d:36:77:c5:e8:6f:a0:1c:30:2a:49:42:4c:39:
                    45:2b:b7:1f:24:9c:d9:df:20:c0:aa:90:f4:a5:9d:
                    7a:8a:22:b7:23:66:5d:42:88:65:76:16:ab:00:6a:
                    f9:13:8c:34:92:d4:c0:a1:33:57:aa:59:5f:03:12:
                    13:8e:aa:b2:df:24:d3:a2:e8:81:f8:08:6c:38:29:
                    f3:b0:08:c6:23:9a:47:66:03:76:92:ba:a2:3f:30:
                    6b:98:b5:c0:ce:2a:7b:11:72:1d:4b:8d:a4:5f:61:
                    aa:7c:52:6b:22:a6:a2:21:b5:ee:c0:6d:9f:30:f6:
                    7b:ab:ee:1c:36:8e:b5:5d:71:d0:7b:cf:2d:f6:eb:
                    ea:40:65:35:77:77:ea:12:78:71:8a:d3:81:13:6f:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:41:9B:F8:23:51:26:3D:AA:27:6E:A7:7B:1D:6C:E2:28:00:94
            X509v3 Authority Key Identifier:
                keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:30:0e:4f:01:77:a0:bf:0c:d8:91:bb:e2:61:7f:4f:32:
         eb:97:f4:8e:8e:74:f8:a7:e3:67:af:08:77:13:f5:bf:6e:9b:
         92:9c:26:e0:e3:b7:7c:9f:c8:0c:2f:3d:13:0d:d0:50:65:82:
         03:9e:6b:ba:4d:51:3a:a3:41:88:e6:58:81:97:65:9b:b1:e0:
         8f:5f:26:b7:a8:e9:a0:4a:c2:d2:bc:a6:f1:03:e3:db:a7:33:
         28:d3:c2:dd:de:c6:f1:2e:92:b7:68:14:6a:9c:97:e9:51:56:
         00:47:2d:e9:2d:21:22:f0:2d:04:62:78:43:3f:1a:28:c4:58:
         83:cf:38:ef:01:8a:91:05:5c:eb:75:75:42:a9:3a:6d:71:1a:
         94:f1:ab:59:ee:fe:49:46:b7:5e:04:7d:f3:7a:84:16:ba:3b:
         99:e4:d5:9b:7a:e3:3a:12:f1:c8:02:5d:c0:46:91:b3:08:ec:
         47:b2:d7:e4:9d:4d:c4:0a:0f:78:c3:14:68:ec:20:e8:f3:5b:
         30:a8:53:a8:e0:3f:a3:de:79:96:46:e3:e8:0d:a7:8d:58:d3:
         7a:11:0b:16:de:bc:19:7b:7a:14:f6:cb:16:66:36:dd:cd:2e:
         84:02:0e:da:2a:38:02:84:c8:1f:fd:6d:e5:ff:c6:ab:b0:65:
         57:81:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:58 2026 by rpki-client