This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          +jFUWN7WgQaYVXLz2nNFTkHxdBDswueKOtw7H664MH8=
Subject key identifier:   05:C8:94:6A:8E:D9:7B:CA:0F:67:CD:04:9A:F9:18:8D:9A:DC:3F:9D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       019BFC89F25B5BDD3406AB2500D397681A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          1822
Signing time:             Mon 26 Jan 2026 23:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 23:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 23:00:57 +0000
Files and hashes:         1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
                          2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
                          3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
                          4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: YffSRWASQEz99g+7ZjiIleM9ZhsYOwhAzYxfMp8pbPw=)
                          5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
                          6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
                          7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
                          8: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
                          9: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
                          10: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
                          11: aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa (hash: 8UFm1q7FERl7hmEhN4RSU3M8aef8QuPV/UHa7FsVID0=)
                          12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
                          13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
                          14: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
                          15: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
                          16: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:89:f2:5b:5b:dd:34:06:ab:25:00:d3:97:68:1a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jan 26 23:00:57 2026 GMT
            Not After : Jan 27 23:00:57 2026 GMT
        Subject: CN=05c8946a8ed97bca0f67cd049af9188d9adc3f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:13:d3:08:62:4c:98:34:b7:93:d2:70:a8:
                    d2:79:56:ad:14:2d:ba:c2:52:5a:04:88:cb:6f:43:
                    d1:07:c5:27:7c:cf:ab:80:4b:20:db:82:c7:8d:fe:
                    57:69:a7:b1:f1:4e:06:ab:44:e1:88:37:69:89:b6:
                    8c:46:b3:6f:47:dc:a4:86:e1:b7:93:e3:71:60:a6:
                    4a:b0:6a:d8:9d:c9:f8:4e:ae:d4:1f:0f:4f:08:33:
                    e0:0a:d9:2c:55:3f:66:8a:63:28:67:66:2f:3e:47:
                    a7:be:ed:af:a0:f3:9a:9f:e8:9d:3c:13:fe:4b:de:
                    2a:30:68:47:59:c6:6b:c0:46:02:c3:c1:a0:b1:80:
                    99:7f:f3:ee:8c:c5:31:0a:f3:0f:37:36:8e:e6:aa:
                    00:80:98:40:42:b8:89:6a:03:f1:39:de:fb:7d:75:
                    93:4c:7d:6c:0b:4d:29:eb:8d:f9:12:d8:d6:c1:40:
                    c9:3b:b3:c8:72:38:23:05:24:88:5f:85:ff:eb:8f:
                    2b:e6:a6:bc:31:48:7a:4a:1c:49:7c:de:b9:2f:df:
                    87:94:5b:3c:03:9b:3a:5f:b1:02:45:06:0a:02:f5:
                    3f:50:6c:12:ab:55:de:77:43:03:ec:65:b7:7a:8c:
                    89:5c:73:3f:19:19:2e:a3:20:25:c5:7b:eb:19:ae:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C8:94:6A:8E:D9:7B:CA:0F:67:CD:04:9A:F9:18:8D:9A:DC:3F:9D
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5f:d8:03:da:1f:c3:87:8a:63:74:08:c8:29:1a:5a:b9:cd:
         a0:ce:ca:37:c6:83:e5:dc:ea:30:ae:47:83:82:06:ca:1e:a6:
         ad:d4:db:21:8a:55:87:91:37:00:16:65:a5:a5:24:02:c7:c6:
         ee:81:2e:fa:46:0a:ff:09:a7:81:d4:fd:67:2a:7c:f7:c0:60:
         2d:fc:d3:8f:cc:b8:79:d2:3e:f7:a9:54:9f:a2:0e:5a:bd:8a:
         5a:d7:c1:4f:f0:ca:5f:e1:88:8b:fb:f7:60:96:ac:d5:19:37:
         c3:48:68:27:e2:d2:bc:10:76:53:51:15:32:a5:9c:53:6b:aa:
         d6:d9:ec:4f:fe:03:0f:7b:9b:05:be:69:75:12:23:83:0d:46:
         6a:83:2f:69:74:18:b7:3b:b4:88:e5:9e:86:5c:cf:c7:f7:80:
         2e:4d:7a:e8:7c:83:56:04:41:63:8f:5d:db:44:3f:dc:c3:76:
         e4:db:6f:52:59:e1:93:38:99:c1:b1:fd:e3:1e:25:f4:96:7f:
         fa:da:39:15:31:9e:c6:30:07:82:0a:38:59:37:07:9e:ed:e5:
         0e:0b:6e:06:a1:a5:e6:80:71:62:c2:4b:9a:ca:32:e7:46:51:
         51:ab:8b:ff:7b:83:5c:8e:db:7c:fd:43:24:b9:89:6b:81:e2:
         61:72:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:16:56 2026 by rpki-client