This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File:                     BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier:          4HJz2pzWuCrSrrIwlBNjHvGD6eQfWjhrInOZVxHW9PE=
Subject key identifier:   1A:45:32:0B:4B:51:1A:C3:B6:27:95:03:3A:9D:F3:8A:80:E8:A0:28
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer:       /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial:       019C446C55B0208B4D346363B790CEB8A4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number:          1736
Signing time:             Mon 09 Feb 2026 22:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:16 +0000
Files and hashes:         1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: dvt96713rkgIPV/QCDZ8HAheY/xOQx9e9KUkt4qbPjQ=)
                          2: M2182yhCWIp3Dr1q8N4Z80xWV3w.roa (hash: IY36SUnI5dTjS3K8jOcIn+WsAvHQBxCsJZS9oy5ygLI=)
                          3: jYy2uYNL4nb69qr5FWiz-y5I14g.roa (hash: uK2ZzVfws+izj4DF8qyLOr4woZd1HOHCjMW0FZXm+bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:55:b0:20:8b:4d:34:63:63:b7:90:ce:b8:a4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
        Validity
            Not Before: Feb  9 22:01:16 2026 GMT
            Not After : Feb 10 22:01:16 2026 GMT
        Subject: CN=1a45320b4b511ac3b62795033a9df38a80e8a028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:a1:8a:eb:a8:88:77:cc:ad:00:25:59:34:
                    bf:49:16:f2:ce:79:83:81:01:57:57:a2:d8:b7:6f:
                    2a:21:d7:9a:03:35:34:0e:ed:71:4b:2f:9d:a6:87:
                    7d:38:59:71:c0:83:3e:cc:47:80:21:08:05:63:85:
                    e1:cf:3d:e4:10:19:70:d8:69:1a:78:d7:ef:3b:59:
                    f2:79:4d:7c:81:96:ec:eb:d6:20:b9:67:11:c7:e0:
                    1e:e3:c3:ce:a2:fa:39:93:6a:36:ec:d4:19:3e:a1:
                    c5:92:89:91:2d:d3:6d:a2:ce:91:71:6c:24:f4:12:
                    8b:89:03:71:54:72:44:03:ab:fe:18:4c:76:40:79:
                    7d:ac:dc:5f:78:cc:d2:6c:a0:1e:1f:85:ba:4e:7f:
                    2b:92:5c:36:b5:1e:30:19:08:d4:e6:8a:2c:58:3c:
                    74:dd:0e:2b:53:93:4b:f4:cd:ae:af:32:6d:a5:78:
                    c8:74:3f:cd:f9:d7:b4:0b:f3:9a:ea:36:2c:47:d0:
                    33:db:15:b0:6a:e2:d5:cf:d3:3b:92:15:f0:49:f2:
                    4e:41:dc:12:5c:2a:f5:43:cd:13:30:2a:c5:bd:6e:
                    ed:c7:bc:c3:ad:5f:57:96:b4:e1:cf:99:71:64:fe:
                    49:43:e9:a4:f7:a3:c8:92:a2:36:b3:5b:09:21:84:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:32:0B:4B:51:1A:C3:B6:27:95:03:3A:9D:F3:8A:80:E8:A0:28
            X509v3 Authority Key Identifier:
                keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:85:aa:62:7a:58:a3:cc:57:14:02:a3:b9:0f:33:11:87:4a:
         2d:b9:87:fb:6c:86:94:7e:7f:3d:60:67:67:13:75:4c:55:5c:
         b4:2c:25:30:b9:9e:c3:37:90:21:de:f9:a9:4a:4d:ef:4b:a6:
         ba:c6:6e:f5:78:f3:97:55:df:bc:ab:c8:81:d1:2c:fa:ed:26:
         f7:04:56:cb:77:4f:d8:ee:64:25:01:6c:86:f9:fa:c5:25:c6:
         f0:e9:d3:a7:f1:43:29:19:f7:bd:c2:09:e3:22:42:47:d0:88:
         47:d0:97:78:47:e0:3d:1c:84:f3:86:00:76:65:53:51:9b:39:
         d8:15:9e:72:7a:5c:2a:a4:5b:4d:cb:d3:17:2f:f9:a7:a6:d4:
         30:73:24:15:bd:b5:ab:4e:f5:e0:27:0b:1b:7d:24:16:de:24:
         fd:52:1e:17:aa:65:2c:ae:ab:1d:48:7d:f7:b7:fe:5d:b6:95:
         e3:53:25:ad:97:7a:5a:f2:26:59:65:c1:85:c0:f5:3e:68:4f:
         10:f9:10:d3:e7:6e:34:cf:6d:cf:16:4e:fb:b3:0b:3f:2c:6f:
         de:aa:f9:96:45:fb:1f:27:1c:67:6e:8c:da:3a:fb:50:bd:1e:
         b4:77:bf:8d:c3:6c:01:a6:67:65:a3:0d:33:da:c1:10:23:e3:
         0a:f4:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:58 2026 by rpki-client