This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File:                     BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier:          afHDQ4P9Cf4cGh8bJ8PFtxpWsgGdYnRF4UXuz+6h1Ho=
Subject key identifier:   BC:D1:CA:F4:D2:27:FC:28:EA:78:B8:B7:8B:55:3E:E7:00:80:24:72
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer:       /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial:       019C0631D05A17A2A7F6797E99CD2969688B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number:          136B
Signing time:             Wed 28 Jan 2026 20:00:53 +0000
Manifest this update:     Wed 28 Jan 2026 20:00:53 +0000
Manifest next update:     Thu 29 Jan 2026 20:00:53 +0000
Files and hashes:         1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: IJ/gvgyIkivEBp4BKkAkmSWbnAafu1t6JbBIJWJVA3I=)
                          2: G3jVmyoNAwofeohH7QYgxzHN3pc.roa (hash: xwSHI24/qEI97cWzr7QJQ9jRHsPQR1K9//44yIlRg94=)
                          3: et-otWfBYLYereCUg28QQ2BY1dc.roa (hash: 3271ZGQbvHfopYcPZbONmJzH//nGkIK7baJJb26jmnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:06:31:d0:5a:17:a2:a7:f6:79:7e:99:cd:29:69:68:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
        Validity
            Not Before: Jan 28 20:00:53 2026 GMT
            Not After : Jan 29 20:00:53 2026 GMT
        Subject: CN=bcd1caf4d227fc28ea78b8b78b553ee700802472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:85:a7:08:f2:65:e0:cf:ba:23:3e:23:92:
                    24:cd:89:a9:54:cd:fb:22:43:cf:52:e0:02:88:a1:
                    13:97:ec:8f:a4:16:0a:1e:2f:19:53:b1:98:53:b3:
                    ea:b9:c0:70:32:41:00:23:b3:d2:e0:67:2c:0f:ed:
                    33:18:e0:78:b0:4b:2e:40:d0:bd:dc:56:e2:1d:8d:
                    74:44:a6:5f:77:ac:91:54:78:48:db:65:3b:a8:80:
                    d0:f4:10:54:d6:00:3c:56:ef:3e:1e:40:1c:1f:5c:
                    d4:49:e4:d7:71:2d:4e:25:61:ee:94:a6:e1:a6:a8:
                    e6:82:ac:3a:0e:d1:54:f4:f8:bc:46:92:3b:76:4b:
                    e1:c0:fc:97:9f:ac:57:e3:6b:a4:e1:ef:3b:2f:b3:
                    cb:0d:42:08:de:1e:45:fd:20:f3:70:27:e5:bc:67:
                    40:7b:b8:a3:65:be:bf:ed:46:c8:3c:f9:9d:39:e7:
                    eb:16:3d:93:5c:77:d5:a9:15:e4:7f:66:a5:e8:8f:
                    6d:1c:8c:43:6a:68:ad:f5:54:89:26:e3:ef:37:97:
                    7d:a1:05:fe:85:f1:fe:61:6a:b1:04:81:e8:7c:f7:
                    db:b2:35:de:2e:19:ca:65:f7:8b:df:c2:85:e6:96:
                    3b:c1:19:ef:8a:8d:6e:14:50:0d:34:19:df:45:2c:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D1:CA:F4:D2:27:FC:28:EA:78:B8:B7:8B:55:3E:E7:00:80:24:72
            X509v3 Authority Key Identifier:
                keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:37:79:6e:e1:f8:e4:b2:80:b3:b4:fb:89:85:66:eb:79:
         f7:62:e4:76:b2:53:4a:21:ae:3e:31:bd:0c:bf:a1:97:cb:3c:
         fd:b2:48:2d:b8:56:38:4a:e0:27:c2:dd:2e:f7:1d:77:85:0e:
         f2:e0:78:cf:03:a8:e8:27:de:00:5a:16:fe:2e:86:fe:e0:13:
         a1:fb:a4:55:52:66:f5:45:67:16:83:c0:79:4b:10:71:e9:eb:
         d3:64:b7:fb:58:9a:f0:28:99:07:aa:70:fa:aa:1d:26:80:c5:
         7b:61:1a:cd:49:69:b8:ac:cb:b1:16:26:d4:d1:1a:83:61:1d:
         a7:ad:d7:d6:d3:77:e8:48:2e:48:ce:d1:66:b3:06:c9:13:13:
         4f:46:df:70:b7:f8:93:dd:a8:38:53:72:44:bb:17:c4:2c:ad:
         da:3b:c4:f6:0e:19:1b:df:a7:f5:4b:dd:e5:b8:17:78:1d:47:
         d3:6b:6a:ef:76:ff:8c:5c:12:8f:1d:1a:89:d7:7c:7c:7a:70:
         eb:e1:88:69:53:1a:7a:91:4c:b0:91:1d:56:c4:eb:75:94:07:
         7d:6f:62:07:19:e3:84:19:4a:f8:1d:66:b2:9d:bc:94:bc:f5:
         0d:4e:10:70:6f:84:03:00:9e:c0:06:24:9f:75:c8:83:da:7c:
         6b:44:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 01:20:18 2026 by rpki-client