This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          zws4ggyduXJ950sMpjgm4rMlQQO5YhTUf5ivKUvxWxE=
Subject key identifier:   F6:EF:5A:7A:12:DC:69:27:61:68:4D:7B:10:9F:12:C2:BC:EA:3F:DC
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       019BFE0ACDA41649B7F1328C6FFB2BBE0900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          0FB4
Signing time:             Tue 27 Jan 2026 06:01:19 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:19 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:19 +0000
Files and hashes:         1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: 3ddXozk3oARYVdZJNOF4Omwt/gkLFV9fM7v2j+pPJJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:cd:a4:16:49:b7:f1:32:8c:6f:fb:2b:be:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: Jan 27 06:01:19 2026 GMT
            Not After : Jan 28 06:01:19 2026 GMT
        Subject: CN=f6ef5a7a12dc692761684d7b109f12c2bcea3fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:dd:d1:e6:b5:d1:cd:85:44:5d:92:b3:fc:
                    ca:d5:47:6f:db:ce:60:16:31:83:2f:7c:b5:9e:ae:
                    ae:0e:f7:80:84:0e:c9:2a:ae:1d:6e:1a:c9:d5:09:
                    d3:23:15:7f:86:25:7f:c7:70:09:b0:eb:bf:08:7c:
                    77:05:cd:b2:92:38:a1:44:d2:f6:9e:cd:9a:7b:f9:
                    83:35:26:19:36:8e:7b:ac:f3:95:88:97:23:ef:99:
                    18:7b:11:1e:eb:3e:0b:2f:29:6d:20:55:40:d6:e7:
                    2c:61:c5:11:47:96:54:3a:03:86:16:0a:f9:dc:5c:
                    f7:06:0d:d0:a2:8c:14:95:ff:02:e3:42:3d:13:6e:
                    fd:15:53:94:b5:36:78:68:bd:e0:b4:e8:0f:d9:ae:
                    79:b6:ac:bb:8e:9f:fa:b2:6a:4e:3e:62:3d:8c:62:
                    47:d1:0c:3e:47:a6:b1:74:36:ba:c9:e0:f4:79:55:
                    9d:e1:c3:59:33:d1:88:c6:eb:15:a8:ba:5e:4c:29:
                    10:e0:9f:f7:c0:e1:bd:cf:db:54:57:9d:3f:ea:1b:
                    1f:0e:34:ee:80:ff:f6:f0:f7:a9:ba:9b:62:a6:fb:
                    d4:2e:e8:bd:21:e4:ea:fb:5f:5e:0d:a0:0d:d5:1c:
                    ae:cf:5b:60:3f:5e:07:f0:04:9d:da:20:af:86:5f:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EF:5A:7A:12:DC:69:27:61:68:4D:7B:10:9F:12:C2:BC:EA:3F:DC
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:1a:23:aa:99:04:91:bd:a7:34:67:cb:74:f1:6a:68:c9:
         41:06:e9:55:a3:9b:8b:97:2f:4c:fc:ef:35:8c:ec:a5:39:d3:
         c2:b9:68:ee:ec:81:54:5b:5b:9c:09:d5:88:5f:2b:1c:3c:02:
         52:9c:7c:68:9f:c9:1d:cf:99:c7:f1:06:e6:2f:9b:eb:a4:46:
         2d:b8:7e:0a:79:4c:51:4c:16:ab:1b:76:38:98:65:62:7c:4c:
         f2:d7:c7:3d:19:e2:02:22:8f:e9:fd:4e:81:7e:85:54:10:0d:
         65:c1:c6:7c:ec:bd:90:6d:5a:37:38:d6:fe:50:0e:76:2d:84:
         7e:b6:6f:09:7f:2b:cf:d4:d2:75:0e:95:9c:0d:e9:af:f0:88:
         2b:4d:7d:cc:34:85:a1:f5:54:cd:49:e9:bf:1c:ab:62:4e:f6:
         41:55:ea:5b:08:2b:97:d4:c2:74:20:fc:81:59:37:8c:3d:40:
         9e:5b:d9:b1:a2:6e:07:88:36:46:e2:78:be:57:a1:3d:8d:a6:
         6e:66:16:62:46:fb:c7:c3:63:48:28:8d:6f:78:1f:42:4a:41:
         43:e2:88:07:c3:57:8a:3f:59:26:4e:3d:e1:86:20:a6:6d:de:
         e3:17:5a:45:7f:91:a9:fc:7f:22:4c:8c:e6:a2:bb:cc:3c:6a:
         c9:a8:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:46:52 2026 by rpki-client