This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          r3QNjEfGUn41YY4syuymnsn+ZsBhtk9DdJ+MaWJ6P1E=
Subject key identifier:   F4:79:22:80:50:61:47:18:51:2F:02:E6:63:66:30:B2:CE:6B:DE:B6
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       019BFF1D545AC6B2F602BED8CB0E7EBD4916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          15AB
Signing time:             Tue 27 Jan 2026 11:01:10 +0000
Manifest this update:     Tue 27 Jan 2026 11:01:10 +0000
Manifest next update:     Wed 28 Jan 2026 11:01:10 +0000
Files and hashes:         1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
                          2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
                          3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
                          4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
                          5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: PwWc0+u2HO2cz0b523IQkiEhoCPM00kohwZ6mFKb3Z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:1d:54:5a:c6:b2:f6:02:be:d8:cb:0e:7e:bd:49:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jan 27 11:01:10 2026 GMT
            Not After : Jan 28 11:01:10 2026 GMT
        Subject: CN=f479228050614718512f02e6636630b2ce6bdeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:0a:94:09:08:9d:69:ef:ec:63:c2:f4:9e:
                    36:71:16:2c:00:67:d5:cf:f4:7f:17:a0:75:91:ad:
                    a8:0e:68:ce:f1:94:54:2c:52:45:23:ac:8c:62:d9:
                    20:51:4b:aa:d4:a8:a3:8f:80:6d:f2:84:d8:0f:77:
                    27:e6:8b:94:4e:91:da:ee:e3:a2:fe:66:67:14:5e:
                    45:79:f7:9e:85:06:53:3a:ed:01:6e:8b:29:0b:d4:
                    90:1b:37:c9:2a:26:38:e4:28:c8:03:67:51:b7:d8:
                    93:4a:7b:d2:22:84:95:e0:88:d2:79:d5:b3:57:8c:
                    48:6e:c3:c0:6e:11:15:e4:8e:df:61:a7:f6:62:fd:
                    d9:18:1a:9a:94:99:b4:41:e4:bd:14:e6:55:61:df:
                    2c:5b:b5:e8:c3:56:8d:0a:a6:28:a0:c1:ab:f1:4b:
                    70:e8:20:95:63:e3:8d:d9:9b:97:59:11:71:1c:d6:
                    49:14:62:c4:8b:78:60:a1:ad:3b:fb:4a:10:ad:b9:
                    c8:81:ab:c4:e5:ec:70:e5:68:d2:03:c9:fd:2a:2a:
                    db:0b:91:ad:cb:cf:81:8f:a6:98:86:4d:b0:d7:89:
                    d3:d2:20:52:04:69:f0:86:57:94:a4:08:16:4f:48:
                    5f:8b:29:6a:d5:d1:ea:21:25:ba:b3:ab:de:8b:cf:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:79:22:80:50:61:47:18:51:2F:02:E6:63:66:30:B2:CE:6B:DE:B6
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:9c:ac:50:e5:3b:11:50:65:34:36:28:f0:7b:5a:75:91:
         44:02:e0:69:b3:f5:ad:bf:74:23:9b:a2:46:19:5f:ad:f1:2c:
         15:98:c9:e1:0e:63:53:17:9f:3f:17:13:ba:60:1f:3f:6a:6a:
         0e:a8:b1:ea:76:e3:b5:77:39:3c:c5:ec:17:65:5d:4f:17:81:
         a9:20:79:d2:10:8a:97:31:d7:93:e1:40:3b:0c:14:89:f3:92:
         53:63:a2:f4:88:0d:d5:12:a3:be:c5:1d:41:41:f7:52:71:99:
         bc:6e:ef:cd:91:2c:c4:1f:97:c0:22:1f:96:cf:e0:d5:01:fe:
         be:72:94:2c:b4:d8:0c:5d:4b:8d:27:56:0c:7e:40:9d:3e:c3:
         51:ae:cd:a9:da:0f:b7:74:5e:bd:39:86:7d:17:59:0e:53:0c:
         ba:0c:01:6c:2a:9b:b6:f4:77:28:c7:ad:ad:6b:e7:24:d9:65:
         2a:d7:27:1a:53:63:35:62:b4:e2:d2:07:7f:35:ff:61:77:33:
         07:71:8c:e4:ca:4d:6b:42:01:b9:34:da:2a:a4:27:c5:e4:3c:
         99:3a:f4:e8:93:bf:60:82:15:d6:1e:f3:e9:72:95:e9:4e:94:
         ab:f2:82:1f:09:06:eb:5e:64:c8:83:c3:bf:7f:ee:41:ea:a9:
         35:b1:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 16:25:40 2026 by rpki-client