This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File:                     B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier:          y63CYobyVNsqB5/1M1xxN+w7BVP4A8F5RNQgq7AHTd0=
Subject key identifier:   97:6E:B1:EC:95:38:E1:86:FB:B8:29:6B:BA:69:BA:92:0B:6E:7E:13
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer:       /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial:       019BF98956BD20C03A656E965DA98DC47587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 09:01:25 +0000
Manifest this update:     Mon 26 Jan 2026 09:01:25 +0000
Manifest next update:     Tue 27 Jan 2026 09:01:25 +0000
Files and hashes:         1: 32FLh-2sl2eJtIOGk05i3sfElJU.roa (hash: HsUbHhV9ZeMlUBS5nClbq2bfx/JXEoBIkb5zGIiCc2U=)
                          2: 6y02T8isddrk35I82aQnZfza2hw.roa (hash: 6Bwcv1vQHggut1Ym2FRTt/C0CVvJQpNdaHy95CBYlLc=)
                          3: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: Y8wsuBhSWEO2buyZ5OO6J/M6kMJBkdTXW8r6+9dJvDc=)
                          4: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (hash: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:89:56:bd:20:c0:3a:65:6e:96:5d:a9:8d:c4:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
        Validity
            Not Before: Jan 26 09:01:25 2026 GMT
            Not After : Jan 27 09:01:25 2026 GMT
        Subject: CN=976eb1ec9538e186fbb8296bba69ba920b6e7e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:eb:f9:96:6b:9a:13:08:70:58:be:e9:f0:
                    5a:f2:e9:fc:4d:9a:98:e9:52:5d:01:5e:6f:6a:1e:
                    cf:6e:4b:65:32:75:55:f5:7f:80:41:0e:d8:e7:5c:
                    35:f1:e5:12:3a:ac:71:66:36:68:0a:26:11:45:19:
                    21:2d:0e:ab:46:a5:34:fc:ef:c9:57:bc:6b:5d:47:
                    2c:98:a5:9b:ed:28:a3:76:e1:7a:cf:c5:a5:2f:83:
                    a3:da:e5:3f:df:ee:9e:a1:49:0c:19:0f:99:31:6d:
                    d7:da:24:6a:72:a2:b1:8b:87:15:b2:e2:3f:38:63:
                    9b:e0:bc:d6:09:91:84:83:24:17:5c:3e:31:e8:f9:
                    ad:9e:6f:02:ef:56:1e:47:fe:0b:88:ac:21:81:ea:
                    7c:fb:27:4e:ca:5e:04:50:b4:2d:bb:8f:85:1f:88:
                    ed:49:47:ef:7b:29:ec:13:29:7c:29:1a:c1:12:5a:
                    96:5b:4b:fd:19:b7:6d:b3:d4:e3:ed:e2:71:6a:63:
                    05:93:a3:cd:fc:4d:f2:20:da:17:16:4a:6a:fa:c6:
                    af:af:ff:b0:85:80:48:1a:af:4f:f4:ef:d0:dd:56:
                    4e:8a:16:64:93:29:fa:da:9b:c8:ce:81:1c:ee:3e:
                    d9:96:de:4f:fe:64:b0:bf:d9:31:73:27:a5:b3:13:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:B1:EC:95:38:E1:86:FB:B8:29:6B:BA:69:BA:92:0B:6E:7E:13
            X509v3 Authority Key Identifier:
                keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:55:8e:8f:54:2d:14:4f:4d:65:f5:a1:17:de:9f:fd:a8:3d:
         a2:09:3f:9a:22:28:79:fe:62:2f:b2:77:b7:40:9f:ea:8d:88:
         c6:83:1f:b2:32:37:21:12:e1:33:5e:28:e4:91:0e:5c:d2:26:
         80:23:ba:6b:55:0e:bc:81:ac:8a:3e:3e:39:a2:07:6d:be:4f:
         88:a3:15:0a:a0:92:df:d3:2f:02:69:b9:02:a0:b9:93:9b:ea:
         d5:78:6b:f8:fc:40:b3:32:12:f7:df:a2:05:24:b6:55:16:a1:
         68:50:f1:6d:9f:ac:0d:af:2d:db:a3:82:77:9b:3c:b8:08:c8:
         a4:b1:7e:4b:64:4d:91:7b:af:1e:96:b6:0c:8e:87:6f:fa:59:
         c9:10:88:fe:b2:65:4c:43:96:8c:03:33:ae:c9:3b:ee:30:39:
         2f:2f:29:d7:d5:a1:4d:7f:06:e0:43:26:ce:f3:5c:f5:6c:71:
         3f:e7:cf:f2:71:dd:98:e3:9e:b2:4f:f2:10:0c:ef:23:15:88:
         2a:8c:6e:00:ea:f1:e3:48:51:fa:e0:cd:77:69:da:33:7f:3b:
         15:78:1b:8d:91:bc:04:d8:fa:58:14:a4:72:e4:e5:e7:bf:49:
         1e:aa:b1:d5:ee:20:5c:05:ba:25:6a:16:69:4c:75:29:8c:67:
         1d:6f:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:15:20 2026 by rpki-client