This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File:                     B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier:          LgRGA4ObLFgLCeggbQeZbCnq8tg0jRgh0OVVLYqdaq0=
Subject key identifier:   C4:CF:6F:DC:08:FD:0D:88:04:60:E7:94:36:21:69:2D:47:03:9C:B1
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer:       /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial:       019C432271E2DC881EA105E4E6C73B5B8DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number:          12A5
Signing time:             Mon 09 Feb 2026 16:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:56 +0000
Files and hashes:         1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: 19GqspFVuiGs24R7nAZJ2AGbGp9fkrGDEnZPlfDLsQ0=)
                          2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:71:e2:dc:88:1e:a1:05:e4:e6:c7:3b:5b:8d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
        Validity
            Not Before: Feb  9 16:00:56 2026 GMT
            Not After : Feb 10 16:00:56 2026 GMT
        Subject: CN=c4cf6fdc08fd0d880460e7943621692d47039cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:35:8c:85:11:78:c5:67:e8:44:bb:eb:dd:
                    13:ac:44:83:08:59:be:59:91:a7:45:f6:84:7c:85:
                    70:ad:57:50:31:f8:c0:b8:8e:0d:c1:e0:a5:0b:eb:
                    5c:5c:c8:58:4f:93:03:f8:61:01:e6:4e:da:bd:85:
                    18:66:c4:de:72:eb:e8:03:24:71:d7:63:7e:34:f5:
                    85:85:68:48:a9:71:8a:4c:7c:2b:70:25:20:45:bb:
                    68:fe:d5:e5:33:b3:93:41:2a:9b:08:fc:bc:10:37:
                    c0:dc:20:ef:b2:36:16:4c:45:ce:9f:c7:de:9e:c8:
                    7f:00:4c:ab:d0:7b:f0:4e:f0:9d:59:30:02:18:99:
                    c6:14:eb:fd:65:90:ee:ef:e0:d0:28:5c:19:b5:a7:
                    0b:95:1b:fd:53:4c:2c:7d:04:32:47:93:31:67:c4:
                    0a:c7:40:f0:5a:6f:96:72:5a:29:75:05:a2:b3:99:
                    b2:5c:e8:53:ce:24:09:a4:10:0f:5a:07:07:34:4f:
                    ee:93:87:b3:d3:46:c7:07:14:1f:2a:09:28:cc:b4:
                    62:01:b2:70:2b:51:f8:f9:d2:75:4f:f6:f6:4f:52:
                    1b:a3:a4:02:79:f7:ef:8e:49:e5:6d:82:42:6e:12:
                    bc:dc:82:2c:f9:70:11:c4:9b:aa:29:95:74:49:3b:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:6F:DC:08:FD:0D:88:04:60:E7:94:36:21:69:2D:47:03:9C:B1
            X509v3 Authority Key Identifier:
                keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5a:33:ae:bf:ac:5f:74:43:c2:b4:d5:ad:ae:8d:bf:3f:c3:
         09:1c:10:c3:6a:7a:ce:4f:76:5f:8b:ea:59:5e:c2:b1:03:8d:
         1d:2e:97:0f:d6:4d:9a:e1:6f:29:c4:9e:0d:9d:9c:7a:d4:c1:
         55:39:6b:ee:57:98:22:45:e4:85:14:29:28:5b:cf:0b:e7:a0:
         76:34:c5:4c:50:41:50:6c:26:c4:f2:1c:7d:02:9a:68:20:18:
         90:ce:a1:a3:5e:25:21:d3:ab:d3:43:be:53:f7:ce:cf:b2:05:
         7d:6c:05:9e:83:a0:8a:83:62:21:6a:d8:73:0d:21:5b:ca:cd:
         4b:ef:f3:64:c8:ce:6c:48:15:f1:6a:11:9e:be:b9:f1:7a:c0:
         83:c2:ba:99:52:39:73:b3:0e:1e:56:6c:5f:d1:08:7c:36:02:
         79:4e:f5:ef:58:ff:a4:4e:d8:35:94:7b:e5:1b:7d:57:36:8c:
         55:f9:fb:12:b7:57:db:c1:c5:0f:08:68:19:51:e7:67:60:f5:
         5e:32:a4:83:9f:7a:cf:29:ac:3e:ff:93:7c:6c:29:3e:b6:1c:
         4b:14:d3:dd:ca:71:eb:e1:db:54:bc:c9:25:96:32:55:9f:ea:
         b7:26:b7:7d:bc:41:0a:71:65:08:8e:14:b5:61:1c:df:3f:1a:
         90:5b:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:56 2026 by rpki-client