This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File:                     bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier:          JQAxdsbh9jUo38mfYQNMN15Wf6MFKC2HVGq4jf2DEPU=
Subject key identifier:   85:91:13:43:1E:85:26:63:6B:DC:79:87:61:FB:C3:8F:8A:8C:FF:36
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       019C1DCC4239E38B843175874E7F20373CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number:          1843
Signing time:             Mon 02 Feb 2026 10:00:51 +0000
Manifest this update:     Mon 02 Feb 2026 10:00:51 +0000
Manifest next update:     Tue 03 Feb 2026 10:00:51 +0000
Files and hashes:         1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=)
                          2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=)
                          3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
                          4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=)
                          5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
                          6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: AlBT79gkgzWskfeFUbf5aAa6gcqI8C/mbPy0mAZzgw0=)
                          7: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
                          8: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=)
                          9: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:42:39:e3:8b:84:31:75:87:4e:7f:20:37:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Feb  2 10:00:51 2026 GMT
            Not After : Feb  3 10:00:51 2026 GMT
        Subject: CN=859113431e8526636bdc798761fbc38f8a8cff36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:55:f4:65:07:f1:73:46:98:04:81:95:c2:
                    d4:11:a2:cd:be:b6:f5:30:81:30:db:93:d0:d9:f3:
                    03:00:74:1e:9b:ca:c6:c8:43:4d:b0:9d:eb:c4:63:
                    04:53:a3:63:32:02:bb:d5:d8:31:b6:f0:6d:1f:32:
                    3a:ec:8b:0a:23:18:0b:17:06:b2:32:90:bb:11:39:
                    d9:81:84:5a:2f:a1:a7:b8:28:f9:1b:61:56:e1:47:
                    9a:0d:41:0b:5c:b4:6a:00:40:d8:16:86:69:63:a1:
                    04:df:02:88:68:32:7a:aa:b6:f2:df:8c:83:4f:95:
                    79:8b:d0:e9:08:8b:42:b2:98:9d:06:63:ab:16:7f:
                    c3:84:57:7c:c0:b7:dc:2e:fd:49:b6:a5:0a:8b:7e:
                    c2:cf:b1:af:76:75:0d:64:45:dd:58:4d:53:54:1b:
                    44:a7:26:7b:c6:d2:57:1f:e0:a5:fd:c9:a3:76:ca:
                    d5:73:17:2b:83:7a:09:dc:b8:b5:4f:67:01:1d:21:
                    2c:fc:ad:94:25:46:fc:fa:52:57:c6:26:4c:a7:8d:
                    03:ac:2f:9d:4f:2b:e7:d7:95:e2:4b:f8:a6:4b:6b:
                    86:00:27:3b:79:49:db:82:18:f5:59:07:4f:11:d5:
                    0e:b2:b8:2c:44:d4:2c:b1:45:9c:d0:73:65:fe:d3:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:13:43:1E:85:26:63:6B:DC:79:87:61:FB:C3:8F:8A:8C:FF:36
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1c:20:71:18:44:ea:0b:86:47:68:13:bd:1c:96:a7:fb:9b:
         f6:ea:05:df:7a:1a:9b:c7:3d:90:cb:90:f6:fe:dd:08:ed:cd:
         82:b3:0f:f0:18:3d:b1:87:b1:94:6f:e3:10:95:8a:ed:23:cd:
         20:7d:f7:bf:d2:33:39:bb:db:61:84:55:64:1e:60:96:a5:bd:
         b3:08:77:c6:79:f4:35:bc:6f:da:be:1c:52:1c:0f:7c:dd:66:
         c5:40:16:c8:44:2e:07:fa:7c:95:86:4c:99:94:af:91:ab:17:
         14:63:db:07:4a:03:be:32:b7:3b:67:bf:b2:ef:57:1a:a6:70:
         61:01:2f:c8:63:fd:c4:b8:b1:29:73:cb:50:19:8c:8e:08:7d:
         22:a3:1c:55:ec:27:89:72:eb:f7:83:1d:89:89:5c:d2:25:a8:
         fb:34:c6:fb:2d:8a:a2:73:5b:b0:49:28:ea:6d:2e:0d:0e:57:
         ee:af:b6:92:fc:b7:b9:01:f3:35:48:aa:49:01:e9:bf:c4:b9:
         3b:3f:c5:68:c5:a9:e5:4c:ad:ea:64:f4:d5:1a:33:a3:bf:ab:
         93:15:fd:27:e0:ba:ff:17:13:8a:01:3b:4e:3b:6e:7a:87:60:
         27:84:ac:03:cf:9c:e0:c5:fb:18:ff:3f:bc:11:a3:23:60:20:
         a3:a5:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:16:53 2026 by rpki-client