This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
File:                     B_C6WbHHbPINxDguWihU1xQsJro.mft (raw, json)
Hash identifier:          73OjSbxXiry1sQqKFKfw7vHUF83YhvUz2aFpBtXNhpw=
Subject key identifier:   51:AC:7A:D0:1A:D2:8E:78:57:C4:4B:F3:04:10:08:8B:99:31:3D:BD
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Certificate issuer:       /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial:       019B9FA0DF54ED40D9DF5747C5AF4FF46046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
Manifest number:          089F
Signing time:             Thu 08 Jan 2026 22:01:18 +0000
Manifest this update:     Thu 08 Jan 2026 22:01:18 +0000
Manifest next update:     Fri 09 Jan 2026 22:01:18 +0000
Files and hashes:         1: 9KMoQY1gowbZEM4SdiT6qdPcaoY.roa (hash: 9tjgCLIhVP4gdJ0NRTzxaWLBRQyFzOb16vRDQVUO7SM=)
                          2: B_C6WbHHbPINxDguWihU1xQsJro.crl (hash: EW/xhdjvqZNLAN9Zc6lL4kGp4QOaWWKnWkHz+N7DRvw=)
                          3: GqkdZzknH_deLDzuqM_YgIM73Bc.roa (hash: kHUSuuY5KdlMDH9BRt+SuFZ/pUXNnonz/oEhFFhfI2I=)
                          4: _dI7fAYNYvlzR2_TT35e3qHnTEg.roa (hash: fMLP46uHLpOTk8Ws3sC+augdPIpnziReWAy6AORNOyM=)
                          5: jPQoehqzjLAGUch6Ki5vOe9Q4p8.roa (hash: TD8JYBVxPMbC9w7CyBa/n3yLGwuHv5es9HqJ2XvkWDI=)
                          6: kUfpnQONG0EuaUE2rzE8Xk8ewzg.roa (hash: m582BqFcPLn0BgLwQ/eeQutqG8eJoaxvasfexxjqW4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:a0:df:54:ed:40:d9:df:57:47:c5:af:4f:f4:60:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
        Validity
            Not Before: Jan  8 22:01:18 2026 GMT
            Not After : Jan  9 22:01:18 2026 GMT
        Subject: CN=51ac7ad01ad28e7857c44bf30410088b99313dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:84:25:bd:29:ed:4e:19:ea:9f:0f:8a:ed:
                    c5:f5:47:c4:e6:5d:df:99:a7:55:f0:5a:f0:44:49:
                    31:9b:ea:b3:39:ee:4f:37:d6:14:f2:e8:47:cf:aa:
                    ef:db:1b:b8:b9:e1:52:84:62:7a:fe:6f:f7:aa:a1:
                    e9:8c:9a:15:9e:87:74:ec:e6:b1:9c:9d:d3:10:72:
                    da:76:a5:09:12:16:c2:37:ef:9d:3e:fe:7b:74:72:
                    a5:28:da:3c:fb:d9:e1:58:ec:6a:bd:8d:4a:35:8f:
                    70:89:ed:17:e8:e5:02:30:95:75:12:56:ba:a7:ea:
                    70:fb:1e:6e:84:51:25:1a:39:7a:8b:40:e5:d3:f0:
                    04:01:14:5f:d3:31:2d:c4:64:1a:8e:5c:56:5a:a1:
                    5e:ac:2b:38:9e:e6:b9:e0:c2:06:b9:ae:d0:8e:34:
                    16:e2:10:d2:8c:52:bf:2c:5f:cf:f9:8e:ae:f9:d3:
                    70:cd:b8:3f:e6:1d:c9:a4:83:e8:d4:97:64:57:df:
                    91:72:c1:5a:35:cb:7e:c8:8d:2d:93:1e:1c:cb:a9:
                    0e:fc:6f:c0:c1:a9:06:22:e5:e7:ec:25:33:b9:c8:
                    1a:99:b1:6c:53:bb:6f:6d:4f:44:5b:93:82:5b:45:
                    83:ba:27:08:9e:a6:02:b0:71:6c:a0:c4:6d:4f:f0:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AC:7A:D0:1A:D2:8E:78:57:C4:4B:F3:04:10:08:8B:99:31:3D:BD
            X509v3 Authority Key Identifier:
                keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:76:e5:d6:86:36:6c:18:ea:1c:c9:6f:94:de:c0:20:b3:d8:
         6a:fd:30:2e:22:dc:0a:7b:87:49:08:48:25:1a:8d:5e:42:84:
         28:d7:51:69:ff:d3:e5:6f:75:0d:ee:10:43:72:bf:51:56:4f:
         53:4c:0e:89:da:8c:96:d8:ce:90:79:0a:3d:a1:0d:c7:36:a6:
         80:ab:85:4a:4e:e7:e6:fc:87:2a:b1:d8:94:41:43:df:09:1c:
         b0:05:7b:10:24:e4:90:22:b3:45:a8:bb:38:7b:81:b5:56:27:
         81:b3:e8:3c:06:0a:dc:ad:09:74:a9:2b:f6:0a:fc:a0:bb:89:
         6a:3c:2e:24:d9:62:15:27:1f:cc:4a:db:ac:43:27:ef:1e:69:
         68:a8:2d:71:34:fa:da:85:f9:76:17:36:61:58:9a:38:9a:21:
         a0:e9:bb:4b:88:1b:fb:8d:e5:2d:57:7a:ee:de:1b:0b:a4:d5:
         28:d0:50:5f:19:ca:36:4d:bc:fe:69:0a:be:32:0d:68:e4:96:
         d2:1c:16:ae:7d:6e:ce:eb:f8:05:76:46:57:e4:9c:f2:5f:42:
         84:8f:01:da:72:05:8c:36:75:fc:ff:2a:3a:7b:19:bf:e8:cd:
         f1:96:ad:a2:13:60:5f:4b:4a:fd:38:f3:3f:f0:f9:e1:43:fd:
         e9:40:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:14:33 2026 by rpki-client