This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File:                     bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier:          HlBst/i4vTlXLcPOu0Idy5Dw0oZZjA1bne5x+KvN7j4=
Subject key identifier:   5F:6F:D5:56:7A:D7:0B:7E:5D:65:CF:EB:4E:96:7E:95:F0:D9:3B:3C
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer:       /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial:       019BFA9B77694A403E61015BEB39A67C628B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number:          0959
Signing time:             Mon 26 Jan 2026 14:00:51 +0000
Manifest this update:     Mon 26 Jan 2026 14:00:51 +0000
Manifest next update:     Tue 27 Jan 2026 14:00:51 +0000
Files and hashes:         1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
                          2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: ZLSmx0Sow1SKLnGOeqZBogR1kQ2iOnHxwT2WL7Z5mG4=)
                          3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9b:77:69:4a:40:3e:61:01:5b:eb:39:a6:7c:62:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
        Validity
            Not Before: Jan 26 14:00:51 2026 GMT
            Not After : Jan 27 14:00:51 2026 GMT
        Subject: CN=5f6fd5567ad70b7e5d65cfeb4e967e95f0d93b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:23:4d:b7:35:16:7e:ff:00:d7:a2:ad:07:
                    e7:e7:ba:cd:03:31:16:27:9f:2b:67:95:29:6c:6b:
                    3e:2f:6c:1e:d7:e6:51:d2:f1:23:9f:40:9e:c9:8f:
                    43:23:12:d3:94:f6:1b:32:11:b7:a2:71:99:16:0b:
                    01:75:d9:1e:ec:4e:9d:ac:af:95:32:77:ad:32:3a:
                    af:36:e0:66:d9:f3:3b:9c:cf:8c:f7:22:87:88:f5:
                    4a:ed:16:c0:7e:13:ed:d9:01:a5:f3:cc:c4:f6:35:
                    74:2a:8e:d1:42:e0:a5:b9:27:5d:ca:3b:8e:77:bd:
                    f6:ad:f7:53:73:95:93:d7:2c:71:9d:2a:df:8c:a7:
                    54:1f:84:f5:77:d1:56:c4:9c:5e:ef:50:fb:d3:f3:
                    8d:fd:6c:19:9c:d1:ed:31:91:01:49:68:cf:39:04:
                    ab:41:da:76:19:b5:36:a3:ce:96:59:02:ab:d0:be:
                    7b:5a:8c:4c:23:4d:b3:41:57:3a:08:21:ec:a8:b5:
                    02:09:b9:d7:ec:7e:6c:b8:8e:15:a8:1c:87:81:07:
                    f7:b7:68:c4:7c:ef:93:4b:f8:b2:be:df:aa:74:82:
                    53:0a:92:97:8c:98:55:2e:14:ce:00:5b:ea:ab:a0:
                    f2:a3:30:96:f8:84:49:2f:f0:d8:2a:bb:13:5f:d2:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6F:D5:56:7A:D7:0B:7E:5D:65:CF:EB:4E:96:7E:95:F0:D9:3B:3C
            X509v3 Authority Key Identifier:
                keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:33:35:dc:4e:24:94:73:63:f8:7c:36:d9:7f:bf:75:c9:
         d3:b5:01:54:fe:39:5d:5a:a6:68:64:5e:01:f1:d4:37:2c:dd:
         89:0e:02:65:ad:a9:e8:28:e9:d3:24:a9:c9:91:6b:b1:5a:04:
         4d:6c:be:1e:ad:7f:19:2d:0a:39:a8:c5:fb:55:61:0d:7d:88:
         33:53:ee:9d:56:f6:48:6b:f1:bd:62:6b:02:03:7f:4a:08:ea:
         d9:3e:1a:f2:aa:00:96:14:5a:48:f3:2a:f2:a5:c3:ad:33:7d:
         a6:28:5e:7e:93:dd:ba:aa:35:60:b5:38:99:15:be:d1:d0:33:
         92:16:e5:74:c5:2b:e9:b7:d3:a5:71:53:9a:d2:18:e3:60:46:
         91:64:ee:60:2e:9b:0b:f5:4b:9f:43:25:61:d1:70:51:ef:9c:
         e8:ee:29:b2:1f:87:dc:ef:4c:1f:62:82:75:12:ce:3e:0f:68:
         36:eb:49:7d:6c:fa:12:d9:b7:b2:50:57:cb:84:41:0b:40:a9:
         04:9f:35:60:4c:23:f8:77:58:37:70:6a:d0:48:03:6e:6b:89:
         3d:0d:05:57:81:4c:a0:45:e3:ef:ad:7e:12:f9:ae:8f:fb:a8:
         ea:99:0d:e2:89:10:f8:cc:86:cb:5a:22:84:1c:64:5e:21:94:
         10:c0:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:40:20 2026 by rpki-client