This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
File:                     B1n2rBc_de2eWF7H2HKlhlzvKDU.mft (raw, json)
Hash identifier:          o6KFKWUf4zfkDdRTzVPr0eARarcj3XzHAPyxy8+JY44=
Subject key identifier:   97:78:2D:33:1E:DD:FB:A1:2D:CA:75:2D:35:D7:10:E1:F4:AB:F1:E5
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Certificate issuer:       /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial:       019BFB406099228F9E3E2559F097FB7D6AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
Manifest number:          17F1
Signing time:             Mon 26 Jan 2026 17:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:58 +0000
Files and hashes:         1: B1n2rBc_de2eWF7H2HKlhlzvKDU.crl (hash: CSoMm+y+0H3lJQL9tfGPHupA8zOxD5b82/O1VbgKRUE=)
                          2: bgwAATh9CUO7xiOucQ6npGFxHx8.roa (hash: T9bimoTkLBlvWZuKy6AOXF/8PICrLV1Er8M52jbgMpA=)
                          3: dNWgNNfC_9Tb3AbDhKIOGZyMQJI.roa (hash: H/aG56vllxYgpt1w/M61EHtJG74GyZ5NJWRtl+F7t/g=)
                          4: sjPesBIIA06CEd69RkfrjPMQWDw.roa (hash: yILvkFkjNMnr+ERjSfm5WnXK67VNMt3otW/1DbB0ZNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:60:99:22:8f:9e:3e:25:59:f0:97:fb:7d:6a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
        Validity
            Not Before: Jan 26 17:00:58 2026 GMT
            Not After : Jan 27 17:00:58 2026 GMT
        Subject: CN=97782d331eddfba12dca752d35d710e1f4abf1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:d1:79:b1:09:fe:bf:20:e7:a2:3c:42:24:
                    0c:1c:86:1e:85:2d:10:ef:07:bb:55:ab:06:bf:5a:
                    97:e1:c9:81:b3:12:41:64:b3:bc:3f:8c:2e:9e:4c:
                    fa:d2:00:68:28:4e:36:9e:25:8c:0a:94:09:66:1c:
                    46:47:1a:1d:82:e1:b8:e7:65:4e:07:30:9d:34:45:
                    e6:cc:ad:e5:b4:7f:3b:f1:46:b7:d7:a1:9f:51:3d:
                    15:cc:d7:46:bb:95:b9:c7:6e:bf:da:35:bb:f5:7d:
                    80:b2:6c:39:02:34:c4:e1:82:49:64:89:90:d5:9b:
                    3c:c0:f8:76:16:a1:27:e3:ab:86:44:47:a0:6c:47:
                    2a:84:88:1c:c7:e6:fd:ed:98:d3:0c:a5:16:55:8c:
                    c3:2c:6b:bb:b0:b8:c6:11:20:31:d0:17:55:ae:5b:
                    a0:73:5e:11:1e:2f:0c:2e:7c:e2:05:38:c2:43:2b:
                    0e:6b:e2:da:11:6f:b5:92:0c:90:67:4d:c9:68:ef:
                    ec:5f:8d:43:d0:16:ab:7f:c1:89:4d:b5:05:f1:b3:
                    26:16:02:4e:15:7b:99:81:5d:e0:60:db:9f:a3:96:
                    d6:f4:e7:0e:ed:7e:5c:20:ef:d0:80:34:47:97:51:
                    c1:d0:6b:5d:2f:d2:0b:d8:16:e7:79:69:34:a9:e7:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:2D:33:1E:DD:FB:A1:2D:CA:75:2D:35:D7:10:E1:F4:AB:F1:E5
            X509v3 Authority Key Identifier:
                keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e0:17:18:2b:ad:19:4f:5e:1b:59:28:d1:06:c8:f4:d0:ec:
         a5:78:9b:3b:b6:93:a7:06:d4:ce:f3:a5:7a:e5:68:b4:8c:57:
         45:19:e8:e3:4f:14:a1:44:0d:ed:79:c0:25:72:84:41:dc:46:
         ba:b0:df:48:21:81:e2:05:5e:b2:16:93:9c:8b:31:cb:7e:96:
         d5:ab:15:d8:89:95:5f:fb:fb:f6:51:fd:13:b2:54:4c:31:13:
         4f:bb:17:16:0a:9a:22:ab:20:73:23:bf:40:43:d5:29:64:96:
         1b:06:a3:6b:99:d1:43:cc:db:aa:91:6e:71:4c:f6:06:b6:7e:
         a3:87:49:b4:b3:a6:81:04:9a:74:4d:e4:b0:54:0e:bd:b6:f9:
         8f:5a:3c:23:9a:05:db:d0:3a:f0:61:53:59:34:1e:06:ab:15:
         21:5e:44:37:22:97:65:66:33:80:4c:5d:ab:f8:de:2d:04:91:
         da:1b:a1:57:6a:3e:d2:ba:6b:6f:af:f3:c1:cd:14:29:38:e2:
         d4:77:15:1d:66:c8:ca:6b:8b:77:e6:23:27:13:1d:9c:88:ab:
         93:4b:54:9a:95:bb:d5:fc:f7:3a:9d:e8:4a:0a:8e:30:83:d7:
         2f:77:a8:26:30:63:6a:23:cb:1d:07:05:8d:05:ce:81:32:0c:
         be:b6:ee:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7QGCZIo+ePiVZ8Jf7fWr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTlmNmFjMTczZjc1ZWQ5ZTU4NWVjN2Q4NzJhNTg2NWNl
ZjI4MzUwHhcNMjYwMTI2MTcwMDU4WhcNMjYwMTI3MTcwMDU4WjAzMTEwLwYDVQQD
Eyg5Nzc4MmQzMzFlZGRmYmExMmRjYTc1MmQzNWQ3MTBlMWY0YWJmMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupXRebEJ/r8g56I8QiQMHIYehS0Q
7we7VasGv1qX4cmBsxJBZLO8P4wunkz60gBoKE42niWMCpQJZhxGRxodguG452VO
BzCdNEXmzK3ltH878Ua316GfUT0VzNdGu5W5x26/2jW79X2Asmw5AjTE4YJJZImQ
1Zs8wPh2FqEn46uGREegbEcqhIgcx+b97ZjTDKUWVYzDLGu7sLjGESAx0BdVrlug
c14RHi8MLnziBTjCQysOa+LaEW+1kgyQZ03JaO/sX41D0Barf8GJTbUF8bMmFgJO
FXuZgV3gYNufo5bW9OcO7X5cIO/QgDRHl1HB0GtdL9IL2BbneWk0qecNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd4LTMe3fuhLcp1LTXXEOH0q/HlMB8GA1UdIwQY
MBaAFAdZ9qwXP3Xtnlhex9hypYZc7yg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUt
N2JlM2JkYTA1OTI3LzEvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUtN2JlM2JkYTA1OTI3
LzEvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOAXGCut
GU9eG1ko0QbI9NDspXibO7aTpwbUzvOleuVotIxXRRno408UoUQN7XnAJXKEQdxG
urDfSCGB4gVeshaTnIsxy36W1asV2ImVX/v79lH9E7JUTDETT7sXFgqaIqsgcyO/
QEPVKWSWGwaja5nRQ8zbqpFucUz2BrZ+o4dJtLOmgQSadE3ksFQOvbb5j1o8I5oF
29A68GFTWTQeBqsVIV5ENyKXZWYzgExdq/jeLQSR2huhV2o+0rprb6/zwc0UKTji
1HcVHWbIymuLd+YjJxMdnIirk0tUmpW71fz3Op3oSgqOMIPXL3eoJjBjaiPLHQcF
jQXOgTIMvrbu2w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:08 2026 by rpki-client