This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File:                     BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier:          nBwOpf5l0SuuNuGyaQdz+sr1AYe73g5llHbxSHPRO5A=
Subject key identifier:   DF:AA:19:C4:4A:BA:2A:91:CE:B5:CF:13:5F:7D:21:9B:60:A8:A7:CC
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer:       /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial:       019B9441D0B249C51677339ACEB512ADA6CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number:          0754
Signing time:             Tue 06 Jan 2026 17:01:39 +0000
Manifest this update:     Tue 06 Jan 2026 17:01:39 +0000
Manifest next update:     Wed 07 Jan 2026 17:01:39 +0000
Files and hashes:         1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
                          2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
                          3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: sfoWVHGsjbTv9ySCcwht+4e7biunxfyilBlshIccd0c=)
                          4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 14:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:94:41:d0:b2:49:c5:16:77:33:9a:ce:b5:12:ad:a6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
        Validity
            Not Before: Jan  6 17:01:39 2026 GMT
            Not After : Jan  7 17:01:39 2026 GMT
        Subject: CN=dfaa19c44aba2a91ceb5cf135f7d219b60a8a7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:48:c0:2a:04:9d:f6:99:fb:8a:b6:bc:b4:
                    fb:3c:95:0e:11:6e:ab:e2:96:7d:ce:b5:99:b2:0b:
                    79:bd:06:ce:e6:a6:ee:04:3a:ef:8d:55:ce:19:74:
                    a2:97:fa:94:de:e4:23:c8:aa:73:56:2c:40:32:f1:
                    30:58:84:34:f7:1a:c5:11:67:6f:18:d3:af:21:be:
                    87:35:6e:c1:c4:28:c8:e1:9e:be:e2:44:dc:86:21:
                    08:5c:4f:ac:a3:d9:ff:cd:70:63:f5:0e:e8:39:e1:
                    6f:75:51:29:55:74:04:9a:ab:08:39:d8:48:32:36:
                    8d:1c:5f:10:64:f3:06:51:ec:59:52:f8:68:47:65:
                    7d:eb:fe:0f:9a:71:81:99:d3:92:e6:c3:87:3c:36:
                    f6:d0:23:6f:c3:f0:50:49:c4:86:9e:fd:36:17:de:
                    19:c0:a8:32:78:8b:8f:6c:43:c1:c9:7e:40:f8:2e:
                    ea:4d:7d:cf:30:a3:67:31:0e:76:54:51:96:fb:18:
                    68:ea:34:98:11:55:15:b1:0f:2b:8c:95:a0:33:a2:
                    a4:4d:61:ce:49:53:6a:58:c5:b9:fb:63:a7:7d:c3:
                    bc:a9:c2:e2:34:10:f6:56:f7:7e:9d:5b:8c:71:8d:
                    2e:92:fd:a1:c6:df:0f:61:ce:f3:e1:39:89:0e:35:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AA:19:C4:4A:BA:2A:91:CE:B5:CF:13:5F:7D:21:9B:60:A8:A7:CC
            X509v3 Authority Key Identifier:
                keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:78:80:a6:a2:34:0b:b0:ec:a1:99:db:5a:4e:6b:df:a0:8a:
         db:7f:db:fd:2c:7e:42:ca:b0:8c:5f:cc:f1:83:7e:bb:e2:50:
         f6:17:06:3c:ed:4b:39:21:cd:bb:06:38:26:ba:d2:da:53:9a:
         93:74:a4:8f:7e:09:f9:9e:79:31:c0:bc:20:5d:43:12:22:7a:
         23:24:df:b1:9a:a9:49:b2:e0:7d:6d:71:8a:da:ec:ab:d6:65:
         4e:67:5f:0e:69:dd:1f:33:ed:61:08:9d:47:9e:b4:61:56:0b:
         3c:93:8d:6c:b9:3d:ab:d2:b6:fd:5a:f0:c7:d8:45:64:2b:66:
         25:0c:f7:8f:ce:d3:6f:76:ad:69:d0:cd:72:38:f6:1a:2e:41:
         aa:a9:06:46:e4:98:dc:31:34:6a:73:bb:33:72:4e:05:d5:c2:
         d3:da:a7:9f:33:7a:8f:bf:48:ad:39:52:f9:54:3c:3f:38:1e:
         7f:41:d7:e5:80:29:65:19:11:f1:a7:3e:57:c3:e5:eb:3b:69:
         15:57:cd:47:dd:48:43:39:f4:74:fa:34:bb:fb:f3:ff:2f:13:
         d6:2f:22:69:11:18:e8:e4:8a:66:8e:a8:b7:54:fb:81:e9:38:
         9f:17:d2:0e:60:ee:0e:8d:73:42:d6:4e:c4:e5:fa:14:a7:34:
         8b:66:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 21:10:53 2026 by rpki-client