This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File:                     beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier:          QqEKAsiuwkozGuz8uEgkO4kxOZUeJM/XCYT83njS2N8=
Subject key identifier:   17:0D:0E:62:EF:FC:23:0A:D2:AB:7F:2A:48:C4:64:C4:23:A4:DA:CD
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer:       /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial:       019BF79A1B544F77D071FF9CE8383AA06BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number:          17EF
Signing time:             Mon 26 Jan 2026 00:00:30 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:30 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:30 +0000
Files and hashes:         1: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (hash: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8=)
                          2: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (hash: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4=)
                          3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: Vv28oeqg9Xc67urjhvVdib8Eae7/kgieZNIUe9lkeOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:1b:54:4f:77:d0:71:ff:9c:e8:38:3a:a0:6b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
        Validity
            Not Before: Jan 26 00:00:30 2026 GMT
            Not After : Jan 27 00:00:30 2026 GMT
        Subject: CN=170d0e62effc230ad2ab7f2a48c464c423a4dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:e2:da:26:5f:f5:55:3e:39:76:83:8c:73:
                    5d:ef:44:89:30:7b:93:5a:77:6d:ea:87:fc:33:b6:
                    d1:19:19:42:9c:37:1f:a5:b0:d5:03:a2:b1:68:6a:
                    f1:43:28:94:dd:df:17:d8:fd:56:99:ae:6b:ae:c9:
                    bf:6f:da:ae:96:a1:f0:c5:76:90:d1:90:08:cd:27:
                    a1:f8:d6:05:c4:c2:ac:bc:97:ac:c8:b0:a0:ef:c5:
                    f0:84:bb:d9:49:8c:ef:c3:9c:74:ee:7a:06:69:9c:
                    7b:3b:37:f6:22:a3:58:91:52:50:b2:73:8b:b0:25:
                    eb:4b:1c:03:ae:bf:b4:9a:f1:4b:a0:c1:65:5d:85:
                    14:f0:a8:27:6a:d0:36:4a:29:ff:61:00:c5:ab:8c:
                    dd:31:f8:2a:ae:96:4d:5e:6d:04:44:74:c7:10:a8:
                    ce:b4:e3:84:c8:f5:b5:1d:42:59:7b:23:00:c0:a8:
                    46:b7:c3:ad:f5:3c:3e:4c:25:2e:b8:68:20:f8:5d:
                    48:db:a8:e9:a0:76:5d:32:9a:21:b4:2f:66:20:02:
                    8e:43:4f:84:2c:f2:38:b4:75:cd:43:3a:72:0c:b2:
                    04:e7:2e:6f:3d:99:80:50:35:27:eb:9f:87:f3:1d:
                    a1:d6:75:ee:1c:26:d4:91:04:53:cd:de:24:4f:19:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0D:0E:62:EF:FC:23:0A:D2:AB:7F:2A:48:C4:64:C4:23:A4:DA:CD
            X509v3 Authority Key Identifier:
                keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7d:41:dc:6d:86:cf:ec:ed:49:62:8e:4a:d2:88:87:8c:02:
         62:8d:0b:19:3b:6b:be:97:f6:f3:85:6a:c1:93:13:e4:8e:e4:
         99:5c:76:5b:c3:1f:e2:ec:63:2d:2c:85:80:36:d2:7f:4d:f3:
         e2:4a:b6:d6:cc:15:20:38:c9:a6:16:17:40:b9:da:45:94:e0:
         6a:59:e3:67:b2:ea:89:67:6e:8a:0f:7e:1e:fc:f7:5a:af:4e:
         23:c9:75:0b:3d:32:6c:a7:ca:f9:48:d1:37:d4:8b:5e:2e:c4:
         d0:0c:71:5f:69:8c:44:30:6d:45:ad:c5:ae:97:6a:2a:4e:4e:
         b0:7d:43:14:5b:af:9b:93:03:c4:ab:df:f3:37:9c:98:a4:fc:
         fe:c6:3e:e6:63:ff:69:e1:67:d7:2a:30:93:58:e5:93:33:c8:
         03:73:6c:3e:7d:a5:69:b6:21:57:69:6a:bf:4f:e3:ef:a2:69:
         62:9f:b3:85:ae:7e:14:7a:36:64:5c:d2:96:fb:7d:6b:52:18:
         5f:b0:9b:a8:3f:a8:51:d7:ab:7b:ec:27:46:14:12:82:01:b3:
         cb:53:bc:5f:e8:9e:32:a5:5e:71:5d:9e:e5:0d:87:2a:54:b7:
         01:7d:24:f5:ea:fa:9c:c8:93:8b:87:28:bc:d6:16:1c:e1:73:
         f8:a8:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:46 2026 by rpki-client