This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          x8J5z3wS6gaUJrlpQCqpZNWN/u+791hbjNg/1CtuCKQ=
Subject key identifier:   AF:EB:8F:52:37:E3:CB:AA:39:B3:F0:4E:AA:DB:12:FE:4F:41:89:3B
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019BD80F8430DC8E3F8DF0D39B06DBE9A76A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          17DB
Signing time:             Mon 19 Jan 2026 21:00:54 +0000
Manifest this update:     Mon 19 Jan 2026 21:00:54 +0000
Manifest next update:     Tue 20 Jan 2026 21:00:54 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: xlQsrtN/C9NS3rtaFjgZfSJpd6FRkyv3YILP9Vd6+6w=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:0f:84:30:dc:8e:3f:8d:f0:d3:9b:06:db:e9:a7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Jan 19 21:00:54 2026 GMT
            Not After : Jan 20 21:00:54 2026 GMT
        Subject: CN=afeb8f5237e3cbaa39b3f04eaadb12fe4f41893b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:61:a2:16:69:d4:27:ff:9c:ed:d5:e7:08:
                    a8:d4:a8:21:dc:bc:7e:8e:43:00:81:7f:98:ae:94:
                    fb:c7:21:15:ef:65:44:6d:20:eb:eb:66:c1:e7:0b:
                    b4:df:4f:58:9c:6d:ea:05:4b:a1:c9:78:37:e6:f3:
                    e3:52:b8:f8:e8:a2:0a:ce:20:8c:40:c8:15:86:12:
                    ff:0b:96:b4:2f:74:84:18:82:aa:0c:57:67:3a:7d:
                    6a:95:b9:0e:61:c5:1b:fe:2d:ca:33:b5:f0:5b:3f:
                    16:81:8f:87:d4:c2:ea:a0:58:98:c7:5d:8a:b3:b2:
                    9a:0b:49:10:ad:1b:32:5d:c8:3e:04:80:62:4a:12:
                    a4:eb:07:67:ba:61:8a:6f:2c:2d:90:87:34:73:13:
                    5c:ad:f3:ac:5f:de:9a:37:31:1f:fa:c2:f1:d6:8b:
                    42:fc:a9:c3:11:71:23:a6:21:7e:ce:7e:1c:56:4a:
                    49:15:22:81:de:3c:7f:87:fa:3c:4b:ea:2b:ab:c1:
                    e4:30:62:1d:bf:bc:7a:e0:c6:dd:a4:6d:8a:ec:f5:
                    ed:dc:49:93:63:c7:8c:cf:a4:76:24:18:42:bb:95:
                    5a:88:cd:27:37:ee:0e:a2:b6:4d:eb:e0:5d:04:14:
                    3a:93:f8:f3:66:f2:8b:ae:bd:27:34:59:93:e7:b5:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EB:8F:52:37:E3:CB:AA:39:B3:F0:4E:AA:DB:12:FE:4F:41:89:3B
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:56:39:af:88:2f:aa:34:36:0e:1c:45:44:17:ea:7d:1d:59:
         bf:94:f1:8d:c9:8a:6c:f7:29:05:b2:69:e4:29:ef:6d:55:1f:
         ff:9a:64:9b:12:45:2e:a7:2d:c0:8b:0b:3c:41:ff:13:3e:c3:
         cd:b9:ef:eb:77:12:24:af:0a:69:95:cc:e1:f2:a5:9c:49:4c:
         dd:41:d9:3d:ea:bc:0d:41:f0:ec:35:55:02:5f:35:9a:e3:95:
         0a:9f:f2:6b:cf:ca:d1:64:30:83:6c:fd:0b:61:c5:ef:30:4d:
         18:44:5d:75:14:dc:8a:ab:d5:86:78:41:fc:fa:df:f3:c9:d4:
         52:01:dd:d9:42:3a:26:03:4b:41:ff:00:31:43:59:32:2a:8d:
         47:03:e8:dd:59:f4:f0:a6:93:7b:b1:cb:cb:78:9c:87:3b:6d:
         93:8f:3a:14:d2:fa:b6:12:5d:12:49:d4:14:89:17:32:04:2a:
         29:11:e4:55:c5:e8:37:4e:0a:71:29:93:2d:99:61:68:ca:2c:
         4c:12:02:ac:46:8c:a1:c8:96:b8:ed:45:d3:b8:c9:b4:72:8e:
         19:9a:db:c0:d8:70:92:cf:d1:44:20:55:34:f2:13:35:4d:dc:
         2f:b8:55:19:f0:80:20:97:80:b2:8e:b4:a1:12:d5:f7:46:c6:
         23:be:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:52 2026 by rpki-client