This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          P4SGTMCJ/wwu/H+i0Hses5bF1K1jbbEZDmLmw8OxccY=
Subject key identifier:   20:56:BE:F6:9B:61:C2:7A:AB:A7:E6:21:75:8E:84:82:58:15:08:EE
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019BFE0A9DE8FB590EFF5FCFEFCE7AB7974C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          17FE
Signing time:             Tue 27 Jan 2026 06:01:06 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:06 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:06 +0000
Files and hashes:         1: 1-hrB_4i445lAPatm9pXp75UPr1I.roa (hash: YEzNTLD9wfX8VjD6MK1Rs1n5S4HzUgswhciPZWTMqSc=)
                          2: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: GwrDK6If3P1tGedHytI2w4db8LDHtJJ2zfeqp6PBDw8=)
                          3: 1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa (hash: z9/vDo3XxLBhdAOAkVfQRjghVloHXSHSVsc9PHpJpsk=)
                          4: 359PtD2aT4lYVKLtb8GpHiwDpSM.roa (hash: +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=)
                          5: 3TVHsbS8DDbS5jFNHXliJUV-vt0.roa (hash: VNMhI1DbQRZPhe0DLvYfFvfWzVgThx5w3CClRDwW+eI=)
                          6: 3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa (hash: hzh/xwb8heLsOXwzZrTck/MAmVN9avO1bZxPN2Q3Qc4=)
                          7: 6zpsdnIXKDCxVFEhevxRA4_zSCs.roa (hash: OPbPEb2Sk8Js+TBK52PtXkK2BFw7aQaLU/bCQ0DpgQ0=)
                          8: CjqRUuv68PFiU7765GT5HXOx8Bw.roa (hash: PvucfJQmBJoQyaNYzAVmEi/q9uSQDhp1g2JhGdUwoW0=)
                          9: EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa (hash: pwqZR3sLomznVe36SGqzsoCNYDQVFyLcuDqHZembszU=)
                          10: I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa (hash: rgMw3gFLvDe2bJ2gkzdn82gcIPRZuH5eYyiNhuqG2wY=)
                          11: IUnxJCEXGpjb9x8O-AKLChbdKH4.roa (hash: ngyGAWfnTLrenQ1MiPj1AnwG2yKMniipm+cR6MK1lC0=)
                          12: MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa (hash: gTpV76Ww0BCzvfD9wYqWRlnMaGyxOQ5bU1mc1SqNJxs=)
                          13: _0yShHb3_Lvo8oOIhf1dP9etifM.roa (hash: C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=)
                          14: bYA_hDz-uHsDwzycumiOlbXWrtA.roa (hash: Yl9BNnwj6zQSqqxSRXXKmcquJUlgVyqLxCnPkLZIOXw=)
                          15: beBz1EHSK0ejZhV2Z5PmcoiuBnM.roa (hash: mDHGqDcF8EKgwMgysUIVSZ+OvPwZjW1FW23RjIyMX4g=)
                          16: g0RaLD65-oQgpyqHw6Rb1clt6Us.roa (hash: MBY8mcPfd1xDaI5XexA7xmIlVnR5RWaKP5T2lgf3SaQ=)
                          17: idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa (hash: iSNlVvk976S8zGXNaqHMWJhFzSvDbSMz0/sY5GUQxFg=)
                          18: jPMCixDvfVo9glBXbNMOz86F-rU.roa (hash: yq4kSM4l08bAj6xNIMbu+OFNBQBF0qIIeLACLieVs2o=)
                          19: keMt9GC91bHZXuQ0h87FQe-gBaY.roa (hash: W4gS8hqr2Jgdapo27zgTBxXWuHg7t03Y6FgU8O4hTKw=)
                          20: mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa (hash: BLYdcZ3Gbdmq0apl8BQS+jPj3Rqpg+Sj0dliHzXdyWM=)
                          21: okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa (hash: hH8YmXQn5X8TblBZy3b0UzoPWUDgyN7U0BO4gNmqkZc=)
                          22: rdklJtnIsRPpCMnxSS1GGHIWCtI.roa (hash: i2J/w0/vFTIyr+KWAGpYaVRFjg90ISDIds54aojdKiA=)
                          23: xrEslglVuEnnQ0vF9Dsq9qhfjps.roa (hash: Qjzp64QTM1xn969UZDkr+b0btpansANNv6kwoq7jiQo=)
                          24: zX07X_H3K2-11ztBe_0TWCV6UDU.roa (hash: m7+UubbmMpsAyslPYtLacfeBJL7t5bWeQmDZDfKFeeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:9d:e8:fb:59:0e:ff:5f:cf:ef:ce:7a:b7:97:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan 27 06:01:06 2026 GMT
            Not After : Jan 28 06:01:06 2026 GMT
        Subject: CN=2056bef69b61c27aaba7e621758e8482581508ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:43:59:fa:24:ac:72:63:a1:37:cd:2d:d4:
                    4d:ea:45:1a:9f:e5:b7:db:63:07:b9:fd:40:73:58:
                    f1:ad:03:3a:d2:7b:15:b4:ff:1a:c3:78:8f:60:7d:
                    be:84:44:01:6b:60:d1:7a:d5:f7:1d:e3:52:2b:8a:
                    7a:a0:d2:9c:ae:7f:62:02:eb:89:1c:63:93:b7:2f:
                    dc:76:85:a9:7a:2f:53:4a:a8:e8:29:8c:a1:50:9e:
                    98:af:7d:41:69:34:04:2f:55:ca:f0:19:32:f7:41:
                    e5:da:83:14:5c:26:ca:a2:0e:90:a9:5c:4f:d0:29:
                    46:f7:a5:e8:e3:80:3e:fb:b8:81:a6:80:72:0a:01:
                    81:40:73:27:f4:07:0c:2e:29:73:51:d6:40:8b:2f:
                    e1:8c:5c:ce:d4:1b:3b:6c:01:dc:91:b1:9e:16:04:
                    1f:b9:27:20:27:21:61:2b:95:01:e8:03:c1:fd:b7:
                    65:7b:1e:48:69:ef:94:ec:79:18:4e:ae:24:da:b5:
                    87:ff:64:51:d1:96:16:3f:89:b0:15:3e:38:dd:18:
                    6d:1b:32:26:2b:ab:05:aa:10:06:c3:dc:3d:fa:ec:
                    70:48:5d:0f:5e:7c:1d:84:75:5a:be:ae:dd:04:51:
                    57:5c:b9:98:e7:13:62:5f:c0:c8:49:95:bf:1a:dc:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:56:BE:F6:9B:61:C2:7A:AB:A7:E6:21:75:8E:84:82:58:15:08:EE
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:76:25:82:5b:61:65:da:fe:6f:b7:2c:ec:14:de:93:31:
         f9:4f:4f:6c:f2:4b:fb:30:43:c4:70:35:88:de:7d:85:39:0e:
         8d:11:56:59:e4:8d:3f:b2:1a:e9:96:91:08:b7:62:c7:c9:cb:
         9d:53:87:d9:1c:21:d2:f2:9b:2b:d7:87:80:e6:ee:86:23:f5:
         5b:68:3a:83:40:24:d0:e3:2d:18:7d:b0:8c:48:3c:72:77:4c:
         53:42:8e:4d:e1:82:af:18:43:01:70:a3:6d:53:d2:45:7b:a8:
         aa:ed:01:5b:b4:6a:51:73:50:3a:39:48:21:2c:aa:9b:23:ff:
         2d:82:a0:df:9b:c0:6d:ba:ce:4a:0c:a8:e1:8e:f3:f9:e7:23:
         c7:0f:aa:c2:82:e2:39:7f:33:cd:e2:1a:e2:2d:6c:23:4d:07:
         e3:b6:79:1d:66:66:19:d1:30:27:25:4f:2c:5e:09:89:76:77:
         6d:35:9a:16:a0:69:ea:c0:b9:0f:a2:87:41:54:7b:3f:0c:f0:
         5b:03:cf:83:69:2b:03:2f:29:b9:c5:2d:5a:76:19:46:db:09:
         df:0d:d8:4c:46:ba:86:86:11:3f:d1:28:69:47:4e:8a:43:d4:
         d3:72:92:55:48:c5:e4:3b:cf:17:b2:e7:a8:62:ce:4d:00:bb:
         4e:af:20:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+Cp3o+1kO/1/P7856t5dMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjYwMTI3MDYwMTA2WhcNMjYwMTI4MDYwMTA2WjAzMTEwLwYDVQQD
EygyMDU2YmVmNjliNjFjMjdhYWJhN2U2MjE3NThlODQ4MjU4MTUwOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrFDWfokrHJjoTfNLdRN6kUan+W3
22MHuf1Ac1jxrQM60nsVtP8aw3iPYH2+hEQBa2DRetX3HeNSK4p6oNKcrn9iAuuJ
HGOTty/cdoWpei9TSqjoKYyhUJ6Yr31BaTQEL1XK8Bky90Hl2oMUXCbKog6QqVxP
0ClG96Xo44A++7iBpoByCgGBQHMn9AcMLilzUdZAiy/hjFzO1Bs7bAHckbGeFgQf
uScgJyFhK5UB6APB/bdlex5Iae+U7HkYTq4k2rWH/2RR0ZYWP4mwFT443RhtGzIm
K6sFqhAGw9w9+uxwSF0PXnwdhHVavq7dBFFXXLmY5xNiX8DISZW/Gtw3eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBWvvabYcJ6q6fmIXWOhIJYFQjuMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlt2JYJb
YWXa/m+3LOwU3pMx+U9PbPJL+zBDxHA1iN59hTkOjRFWWeSNP7Ia6ZaRCLdix8nL
nVOH2Rwh0vKbK9eHgObuhiP1W2g6g0Ak0OMtGH2wjEg8cndMU0KOTeGCrxhDAXCj
bVPSRXuoqu0BW7RqUXNQOjlIISyqmyP/LYKg35vAbbrOSgyo4Y7z+ecjxw+qwoLi
OX8zzeIa4i1sI00H47Z5HWZmGdEwJyVPLF4JiXZ3bTWaFqBp6sC5D6KHQVR7Pwzw
WwPPg2krAy8pucUtWnYZRtsJ3w3YTEa6hoYRP9EoaUdOikPU03KSVUjF5DvPF7Ln
qGLOTQC7Tq8g0A==
-----END CERTIFICATE-----
Generated at Tue Jan 27 10:23:01 2026 by rpki-client