This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          xDB2eTg4GSb5SOtc7ZAr3dIIGTxicB4SXSRHaQeKUB8=
Subject key identifier:   F2:C6:5D:A6:7F:27:D5:1C:B2:44:E5:7B:7E:EC:27:15:B2:57:90:DC
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       019BF7D1DA20A25E9883292BD96E33F60BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          02E3
Signing time:             Mon 26 Jan 2026 01:01:23 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:23 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:23 +0000
Files and hashes:         1: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
                          2: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: d+fY3CgJuUBNjLWB7gYRZEHF7HVdWHx5shsg7jhueqI=)
                          3: MIEvnImfWTyOKpa2aWLkQhgEZmY.roa (hash: txV76t93bWRJ/yIQmWuamg16DjJLT7MgtJIe7paHB7E=)
                          4: PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa (hash: iQu1OA2imBxucOaZb2YkGe/IH/xMnrU8wpfz8jp4qU8=)
                          5: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
                          6: jQ2Nd_F_fm5WB6zVYLgJygrj3Gk.roa (hash: imgBuP5yDwSxgvaj2Hc0zIY/YoHhn9WPYKumza/pBos=)
                          7: o3e9S3T6jeJSI1jiUrWmkImHmRU.roa (hash: +d9ztGRXNM07c8j8iufqKla9V5/CBV9Ud9oEK+f9ZJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:da:20:a2:5e:98:83:29:2b:d9:6e:33:f6:0b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Jan 26 01:01:23 2026 GMT
            Not After : Jan 27 01:01:23 2026 GMT
        Subject: CN=f2c65da67f27d51cb244e57b7eec2715b25790dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:df:c9:ca:0c:1b:ae:9b:e7:32:ee:54:eb:
                    ec:6a:f8:ec:15:55:cb:20:9c:22:ac:03:56:44:35:
                    55:ba:8f:78:de:61:3c:2c:0f:93:3c:97:a1:35:ea:
                    63:7f:d9:cc:a7:24:c1:3c:8e:5d:3f:fa:9b:60:b3:
                    f2:24:51:45:97:8a:be:1d:ca:9f:3b:ec:7e:3d:a1:
                    f2:d5:c1:3d:a8:eb:16:9d:82:b4:ae:85:0b:b2:b3:
                    65:81:00:ee:8e:99:08:58:d8:d4:58:f3:bc:ae:85:
                    4a:1e:31:2f:f9:4a:8a:e2:ee:de:84:c9:39:9f:46:
                    6a:4e:dc:bc:57:da:cd:fd:02:6b:61:fa:e7:b6:76:
                    b1:30:7e:ab:9f:13:93:b4:73:01:0c:01:53:e7:2d:
                    52:19:10:28:50:92:e9:8e:42:b9:13:10:1a:c7:d8:
                    b5:54:c8:a0:00:75:93:d8:85:99:f3:c0:d4:b9:f1:
                    df:60:84:43:eb:e4:47:5f:66:ca:9e:b9:f8:10:b7:
                    f6:c6:f3:1c:ff:68:94:71:4a:c6:8f:cc:a8:43:87:
                    c5:f0:fc:25:01:9f:80:ff:40:8f:60:9e:17:c5:ad:
                    6d:eb:17:3f:bd:5d:2a:5c:ba:91:df:97:fe:09:3d:
                    26:87:be:3e:30:51:a1:f1:5b:0d:b1:3c:5a:2e:75:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C6:5D:A6:7F:27:D5:1C:B2:44:E5:7B:7E:EC:27:15:B2:57:90:DC
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:c3:36:ea:c9:eb:11:79:c4:04:a0:1c:13:3d:c2:ba:ca:
         f4:43:47:a9:d0:9e:dc:08:4e:73:53:3a:a8:9c:cb:0b:f0:7f:
         6f:4e:6c:ec:b6:3c:e6:74:18:f8:2c:a3:6d:db:fb:cf:14:83:
         82:02:b8:3a:54:9e:a7:bb:62:05:09:6c:31:34:62:77:60:3f:
         72:aa:78:41:db:1a:00:bd:bb:cd:9b:ca:92:d8:7d:8a:23:94:
         45:9d:fd:0b:50:a5:25:dc:16:2e:0f:42:0f:27:1e:9e:df:4c:
         b2:f3:e5:63:b4:3f:d5:c7:a9:9c:2f:e5:2b:7f:b0:4e:e0:d4:
         f6:f6:af:a5:4c:f1:c0:01:08:68:71:9c:81:f0:5d:76:34:58:
         4e:6e:f0:99:cd:08:0b:db:0d:1d:dd:13:9e:57:2d:96:2e:0a:
         0f:49:e5:32:77:0e:47:4d:d4:03:9e:bd:e9:1e:e1:2a:e3:09:
         7a:cc:ce:59:bb:17:e6:b5:0e:18:20:46:0c:f1:bc:09:07:92:
         33:aa:e8:e4:82:af:29:81:03:05:0c:77:e2:c9:1b:a0:74:68:
         d2:e5:2b:e0:fd:8a:7a:24:5b:1d:35:62:39:21:eb:6b:92:69:
         58:87:77:c2:1e:2e:f3:5e:d6:ac:b7:53:20:cc:08:1d:39:02:
         8e:80:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:26 2026 by rpki-client