This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File:                     bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier:          vgnaCkVuihddkbeVF5FlrVR8bLLrXYT93SD6sf2NrDk=
Subject key identifier:   87:F7:3E:E1:18:5D:62:D8:98:F8:6B:BB:6E:63:55:C5:B9:8B:33:31
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       019C1D27918FCC3EA5EF7C7EF7607FB8D249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number:          1364
Signing time:             Mon 02 Feb 2026 07:00:58 +0000
Manifest this update:     Mon 02 Feb 2026 07:00:58 +0000
Manifest next update:     Tue 03 Feb 2026 07:00:58 +0000
Files and hashes:         1: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=)
                          2: 9CTRikFmDfftuulzmE7oVg4SrXo.roa (hash: QetHPa6rhiOmzCiHhKi65+JEz8i5R3+PHpMQcXOELTs=)
                          3: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=)
                          4: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=)
                          5: IseQbjc3SpcyUOPq4Wx4jbeVrwY.roa (hash: 1LrasHnqIMCbBJdweDs0ritZuYeZS+3aW/bWYuziBXA=)
                          6: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=)
                          7: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (hash: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo=)
                          8: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: XcAf/yJKNqnHbRaxPQKnzZS1roE8evjSVSIQgRCwNJM=)
                          9: jQ9RMCpwNTwYfimV7ID_rUCi6Jo.roa (hash: epRbU/bf6HhhyAdmIE7JEgeJXVkXi3sclBBNp0SAlwg=)
                          10: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=)
                          11: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=)
                          12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=)
                          13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=)
                          14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:91:8f:cc:3e:a5:ef:7c:7e:f7:60:7f:b8:d2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Feb  2 07:00:58 2026 GMT
            Not After : Feb  3 07:00:58 2026 GMT
        Subject: CN=87f73ee1185d62d898f86bbb6e6355c5b98b3331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:84:71:a8:fc:7b:c9:63:93:9b:18:fb:f4:
                    60:e8:20:d5:f4:c0:37:a2:4d:ea:76:5b:8d:a4:55:
                    e7:3f:67:a4:4a:8d:86:30:03:78:54:ad:c6:4b:a8:
                    41:f0:84:7d:88:fe:8d:53:c1:ea:10:46:64:25:7f:
                    87:2b:a0:46:b2:8d:4f:9a:5b:28:14:02:89:d5:c1:
                    3f:70:7b:8d:ae:46:63:70:6f:33:e3:af:6a:8f:db:
                    2b:76:56:d5:0d:ee:11:7d:00:75:57:03:b1:b8:a2:
                    9c:f2:bf:53:86:c0:4e:4c:8f:cb:82:ee:1a:f8:6f:
                    e8:b7:d1:15:a4:0b:8f:9c:04:03:da:ee:2d:b4:e8:
                    db:dc:d0:07:2a:57:a0:f0:bd:1f:17:8d:10:f1:0b:
                    78:93:12:f7:0e:c6:80:ff:7a:8e:d9:a0:a2:24:ed:
                    38:76:13:dd:09:88:61:29:58:7f:08:11:fe:ec:2a:
                    db:c4:34:a5:0f:a7:e3:f7:62:33:b1:1d:b6:7d:28:
                    96:58:db:c3:5b:0b:8d:9f:f6:24:36:02:cc:13:70:
                    c6:07:b9:59:d3:d5:c5:7b:26:61:61:53:50:aa:ca:
                    1b:03:f3:76:ed:d5:22:53:22:f8:24:fa:81:e9:9c:
                    01:8b:8e:02:f7:5e:8d:04:9f:ad:eb:bd:07:0c:dd:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:3E:E1:18:5D:62:D8:98:F8:6B:BB:6E:63:55:C5:B9:8B:33:31
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:4e:b7:73:11:fa:0d:da:22:85:d6:91:77:76:9d:41:42:
         fc:e5:f9:a0:e2:88:af:7e:d6:7d:30:25:5f:92:92:f8:dd:32:
         69:ad:df:ea:b3:95:27:d7:4d:50:2a:0d:a8:50:f4:e7:2d:9c:
         2d:2f:0c:4f:2b:77:fc:d9:26:3b:41:90:fd:c5:a6:ce:03:fb:
         39:56:ec:0c:bd:28:a9:45:52:5f:d1:cf:25:2d:27:f9:d2:c7:
         e4:b3:e4:c4:07:60:20:25:d2:72:aa:2b:b1:aa:70:4c:cb:f4:
         27:8a:a3:6f:83:46:f4:d4:56:3f:b5:60:a1:3e:e1:90:7c:1a:
         af:ce:04:e9:b3:5f:b7:55:cb:82:3f:30:07:0b:4a:51:c9:d6:
         73:56:8a:55:e3:9d:78:5b:5d:54:ac:f5:96:70:62:ff:80:bf:
         fc:fd:ef:76:37:ea:2e:ff:08:11:3b:ea:ca:f1:53:6d:c4:c1:
         79:4c:66:df:9e:09:b0:d1:1c:6b:2c:6c:89:38:13:07:36:e7:
         b8:7a:e7:f9:08:75:65:c9:98:ab:b9:c0:a8:7d:55:b8:95:32:
         44:e2:79:b0:57:7a:6a:ad:83:b0:de:ae:66:40:0a:69:80:26:
         1f:ce:01:37:3a:83:f5:0e:e9:70:f0:cf:f4:7a:d1:78:8e:5e:
         18:31:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:12 2026 by rpki-client