This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
File:                     CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json)
Hash identifier:          yK4HMhOJkWASpWXus9CfWoIwOf3IbgJ1IbOxKuQQZAg=
Subject key identifier:   BF:17:E2:7D:03:67:74:52:83:82:6F:93:53:3C:F0:23:9C:1A:63:DD
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       019BFC532B21E608C1A0B2BECA2BD1FA5E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
Manifest number:          1823
Signing time:             Mon 26 Jan 2026 22:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 22:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 22:01:07 +0000
Files and hashes:         1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=)
                          2: 40JcYIqunxDmA9B_6mBk9o5jeUM.roa (hash: d/8AU3RR65AzamdBuUlvIPIHeRBNB9dCgWFNlGxNpUw=)
                          3: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=)
                          4: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=)
                          5: 6zn_bXq4vLaCBsfKFtI4DMgY8Zc.roa (hash: OrTMirsJ1aKUm7fiP9lslFXEOscQqByWR2wJ7u3TDEk=)
                          6: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=)
                          7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: goDtK4/dzZMOgiuar73gAbsXEoOiJH76qM0R2DWQKvQ=)
                          8: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=)
                          9: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=)
                          10: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=)
                          11: TWWxT-nCkmtPHnYGn6dWdhUMzGM.roa (hash: 7Vooj87eGlBm2XvcSGagn83xkeJCxQE8AEsJBuPCxmA=)
                          12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=)
                          13: ks1Upzi-z1nTgrusPaDvwPggJeE.roa (hash: tJEUHp24WZ9clCaFX4TL4xbQ3JWQ7mZBdJ+SKgZZfVc=)
                          14: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:53:2b:21:e6:08:c1:a0:b2:be:ca:2b:d1:fa:5e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Jan 26 22:01:07 2026 GMT
            Not After : Jan 27 22:01:07 2026 GMT
        Subject: CN=bf17e27d0367745283826f93533cf0239c1a63dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:d8:0c:27:fe:8b:9a:46:10:58:29:7f:02:
                    f2:d5:ac:f6:23:b3:0c:63:79:68:3c:72:99:03:98:
                    bc:2a:ab:71:59:71:2b:d1:d9:f0:17:2e:2d:f6:4b:
                    ba:cb:8f:0f:3d:17:25:3a:da:34:04:d1:bf:0e:25:
                    40:b2:f0:1f:8e:f4:45:98:01:02:12:83:b5:31:9b:
                    99:7e:e4:ad:35:68:81:8d:bb:19:b1:d6:c4:ac:43:
                    2c:17:02:de:cc:e1:ff:ae:01:fe:4f:11:30:a1:aa:
                    bc:e0:b3:ca:ef:b3:43:41:30:af:0c:ce:72:c5:3e:
                    46:c4:0f:ac:0a:db:fb:fd:d1:fa:42:68:b6:68:e2:
                    56:8d:93:72:2a:d3:4d:b1:4b:d2:f4:cd:26:8a:ca:
                    3c:74:99:70:4a:0c:10:cc:75:0d:4f:4d:cf:be:55:
                    34:91:6e:f0:5e:a7:65:72:1c:46:af:5a:d2:7f:3f:
                    47:b8:a3:05:03:4b:d2:0d:13:95:5b:78:90:d2:37:
                    6f:4f:e2:7a:64:be:2d:e8:1d:fa:84:f6:c9:a6:56:
                    b1:5f:67:82:9d:b7:ac:b5:36:b0:c6:c7:65:27:ca:
                    7f:85:6e:b8:5b:1b:a9:77:b6:03:81:12:b2:d6:f3:
                    5f:61:75:d7:8e:9b:4c:8e:c1:22:0c:b9:6c:3a:dc:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:17:E2:7D:03:67:74:52:83:82:6F:93:53:3C:F0:23:9C:1A:63:DD
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:21:73:75:1d:23:2d:01:03:de:14:27:1b:d4:37:a1:a3:
         86:cc:f0:f8:55:1a:08:24:9f:f6:36:2a:db:47:7e:57:19:f2:
         6f:96:3a:64:7f:9f:b1:6a:dd:22:7e:77:fa:e6:ad:66:9c:7f:
         8d:60:e9:9a:c7:7b:b7:73:83:fa:a8:74:9b:70:e4:24:27:4c:
         8b:e7:11:bc:03:2b:0b:6e:24:07:af:0a:c2:0e:26:39:49:6f:
         74:19:d5:8e:de:4d:af:b0:96:0a:c8:95:c7:8f:55:70:98:05:
         ca:9d:aa:ab:74:e0:8d:5f:cc:f5:39:87:86:60:20:ea:bf:19:
         94:9d:11:4d:30:2b:75:1e:60:1d:42:0d:04:3a:1b:0a:08:b3:
         31:a1:0b:0a:71:2e:ff:2c:1b:14:40:13:1d:56:48:f9:bf:6c:
         77:8e:7c:5b:c3:ae:f9:d2:53:91:46:f3:e5:4e:f9:50:8b:3b:
         c8:a8:20:45:01:25:0a:be:c7:c9:75:47:49:92:a1:74:9f:2b:
         7d:1f:c3:5f:b9:94:a6:4e:40:12:f8:1b:2f:23:29:4c:ba:a4:
         78:c3:2e:02:74:84:d5:0f:fe:81:27:18:c8:95:fd:e8:f5:e7:
         c5:0c:ef:80:00:4f:5c:2c:fa:da:b4:34:a6:cc:01:3f:52:35:
         d1:d8:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:07:46 2026 by rpki-client