This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          9skoWlZpf90RyQgMb5jmsPdo6F88PVPx4gHDOsmh870=
Subject key identifier:   52:64:BA:20:BB:BA:4B:57:2E:37:53:13:7A:36:E7:BB:75:CE:BC:08
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       019BF1CF29FFDE218639294A104AED002EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          16BD
Signing time:             Sat 24 Jan 2026 21:00:44 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:44 +0000
Manifest next update:     Sun 25 Jan 2026 21:00:44 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: Qa7zO127nrZiWK9a7ehbdN7VAbFrPYAKDPy27rUNjRw=)
                          2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
                          3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
                          4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:29:ff:de:21:86:39:29:4a:10:4a:ed:00:2e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Jan 24 21:00:44 2026 GMT
            Not After : Jan 25 21:00:44 2026 GMT
        Subject: CN=5264ba20bbba4b572e3753137a36e7bb75cebc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:a3:a4:3c:12:8c:64:3f:6f:b2:d3:fe:e1:
                    16:a7:c2:7f:66:da:84:2b:67:36:59:90:42:4e:8b:
                    a7:f1:e2:fd:d6:da:1b:70:0a:76:9b:65:22:3e:3b:
                    b2:3c:75:e1:16:75:05:00:3f:4e:c4:95:23:29:71:
                    8a:fb:d0:8e:2a:ee:f3:05:41:11:83:e2:72:1a:3b:
                    a0:e0:23:51:08:0d:eb:54:3e:46:91:05:f0:ee:ef:
                    bb:d8:c9:28:72:1a:ce:71:ef:c8:4d:93:2a:4d:84:
                    62:bf:78:5d:39:ac:46:33:e2:05:83:48:f3:bb:8b:
                    60:32:13:88:81:bf:08:7e:c5:81:14:fc:4b:96:e8:
                    a9:1f:38:c7:37:55:34:89:c8:3f:b7:0b:e6:a2:64:
                    e8:f9:2c:cf:1a:f3:2d:64:88:bb:3a:37:bc:ea:4f:
                    8a:0c:29:cc:d2:e4:72:38:02:4f:ad:fd:59:e9:22:
                    23:d6:76:4b:f7:db:a2:f9:66:b9:bc:21:d8:07:73:
                    af:27:17:cc:fd:d3:3e:a2:4e:40:16:77:2e:2b:a3:
                    d2:da:19:13:b1:a2:2d:90:3d:b4:80:ce:5f:09:22:
                    66:57:05:3d:eb:33:91:4d:11:8f:79:0f:9e:0c:1b:
                    2f:dc:a8:7a:d6:4d:58:e2:7d:26:1f:e3:88:87:a5:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:BA:20:BB:BA:4B:57:2E:37:53:13:7A:36:E7:BB:75:CE:BC:08
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8a:96:f3:d4:fb:45:d1:a6:a2:40:29:71:85:f4:00:bf:02:
         bb:7b:23:eb:da:30:ce:20:a9:4c:83:ca:ff:67:e9:23:10:b9:
         2d:5a:1a:d1:98:43:f2:ee:44:4b:4b:4e:4e:b8:e7:2c:4d:b9:
         c2:63:5e:aa:89:38:cf:b0:29:3f:d0:ee:24:c9:5a:c3:8c:4f:
         d1:99:c9:ab:d9:f8:e1:28:19:25:49:52:cf:30:99:c0:b7:50:
         36:f8:86:8b:53:6b:df:3e:38:fa:aa:3e:96:0a:e9:63:dd:9a:
         2d:17:9f:6e:35:7a:8a:2c:7a:9f:0c:4b:53:cd:bc:55:a1:34:
         af:dd:f8:6a:e3:be:e5:9c:78:29:fd:4f:6e:4f:b0:01:81:76:
         f0:65:fa:60:90:56:ea:3e:5e:3f:4c:7d:3a:fd:cd:c4:6e:c8:
         26:d4:d1:de:2a:46:67:dd:76:a4:25:9b:47:d0:e5:72:e0:cd:
         c2:ab:d5:c7:f9:5f:e2:d2:60:12:89:29:f5:5f:7d:3c:6c:a2:
         c3:59:f7:dc:b9:c2:c6:9f:e8:22:7e:05:ca:11:5c:9a:61:df:
         69:2a:d4:64:10:a3:02:c2:17:e3:d1:eb:a4:cd:5d:36:8e:51:
         d0:3e:fe:b7:74:90:ca:fa:d2:8b:65:5a:72:81:0b:6c:a8:09:
         99:a2:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:07:33 2026 by rpki-client