This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          OUQcxvVBz1jHKkzHCYmqxFW7EzBMmKG7Ey06T0rfwQY=
Subject key identifier:   97:B7:77:A4:9D:80:87:E6:C9:EB:F6:82:31:AB:B7:AD:4C:A8:5F:EE
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019C1D274E9C59E028410F08B5C9077AC7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1435
Signing time:             Mon 02 Feb 2026 07:00:41 +0000
Manifest this update:     Mon 02 Feb 2026 07:00:41 +0000
Manifest next update:     Tue 03 Feb 2026 07:00:41 +0000
Files and hashes:         1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: wGl7n85/PWYLp2YZGWoDFMszVmaXEEb1GKHS4oYzx4o=)
                          2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
                          3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
                          4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:4e:9c:59:e0:28:41:0f:08:b5:c9:07:7a:c7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Feb  2 07:00:41 2026 GMT
            Not After : Feb  3 07:00:41 2026 GMT
        Subject: CN=97b777a49d8087e6c9ebf68231abb7ad4ca85fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:0a:bd:40:ed:bb:6e:10:a4:35:79:58:7b:
                    6b:ed:29:d1:e1:94:32:4d:73:34:af:99:fe:27:a7:
                    66:04:c5:50:fc:9c:82:86:81:ee:ab:a7:dd:e9:2a:
                    57:47:90:80:8c:6c:6c:64:db:df:dd:d6:d3:5c:ad:
                    7c:24:32:50:37:67:21:67:34:91:37:07:1c:f6:c6:
                    e2:0f:43:d6:11:e5:4d:e3:17:35:8d:86:29:fa:e7:
                    de:90:83:45:13:59:91:ca:34:38:8b:2f:b5:76:6c:
                    1d:48:3c:e2:3e:13:d9:56:cb:e9:96:d2:78:0b:4b:
                    d8:1f:44:3b:0d:86:5c:76:81:49:16:c4:f5:c7:0c:
                    1d:c0:57:10:45:b4:8b:e0:6f:87:f5:03:23:64:14:
                    18:5a:e7:ba:cb:4d:44:e0:ee:7d:1d:4a:b7:cd:ef:
                    93:b0:7a:f5:87:3d:dd:54:70:a5:dc:58:11:27:15:
                    ff:fc:22:ee:9e:6f:06:22:39:fb:a8:80:dc:a4:ad:
                    8b:29:16:6a:3a:a7:b0:0e:74:0f:4e:27:ce:db:36:
                    60:d2:bb:56:b3:3b:81:9f:68:5b:50:70:30:e2:43:
                    42:3b:b7:90:64:b3:13:33:f5:bd:2d:d5:ca:68:ee:
                    a3:78:7b:d7:48:6b:ee:35:78:73:7f:af:b9:a1:d8:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:77:A4:9D:80:87:E6:C9:EB:F6:82:31:AB:B7:AD:4C:A8:5F:EE
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:aa:89:2a:cf:cd:19:4b:3b:b8:cf:62:ff:5e:55:a8:37:51:
         4d:b8:cc:40:8c:97:6b:1b:85:f0:99:54:91:79:0f:6d:a8:d6:
         b4:9b:56:1a:19:5e:38:aa:98:f5:10:0e:77:3f:80:07:47:22:
         ef:70:df:cc:e2:6a:66:e1:f6:d0:0c:90:e1:c0:e5:20:08:a6:
         0d:dd:ed:1e:7d:93:ce:d3:a1:4b:ee:0f:ed:af:b7:d7:40:34:
         03:b2:e1:e6:7c:a0:df:a2:7f:cb:9f:1a:59:e3:49:13:1b:a7:
         bd:43:84:1c:57:53:12:54:58:47:7d:d4:2f:7c:64:a6:ae:57:
         d4:03:fb:d8:5b:da:b6:6c:fa:8f:d1:92:70:00:42:2c:29:e1:
         46:f8:37:fe:65:ba:9e:20:05:09:71:5c:c8:23:d9:f7:81:a2:
         13:79:a0:50:14:90:84:12:36:72:ab:16:df:e5:c8:3e:8a:73:
         85:b8:31:68:a9:8d:bf:2c:3b:48:95:29:9e:fc:a1:0f:50:cb:
         87:0c:ef:8a:6b:0c:cf:c3:00:76:95:72:a1:f8:54:57:fb:f2:
         ed:6b:c3:f1:9f:35:cc:8f:49:ee:fb:7b:d6:df:42:24:38:ee:
         b1:d1:63:48:18:9a:2e:19:0f:53:84:36:4f:18:9f:3a:ae:de:
         c8:3d:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:16:27 2026 by rpki-client