This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File:                     bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier:          Av0pxl0mWEdIwpCUEpTDKWQF/WKpf4mwTKimQ3iqiEg=
Subject key identifier:   F3:5F:48:ED:00:D2:F5:06:A4:0B:5C:C6:35:10:9F:A2:5C:8D:3F:F7
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer:       /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial:       019C42B409B7555BF1FC653A68CBBFA37F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number:          0F82
Signing time:             Mon 09 Feb 2026 14:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:21 +0000
Files and hashes:         1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: BIXpht+DbCLh1nRXiE73PFr2VJQFqjEopWDPu8WQehM=)
                          2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:09:b7:55:5b:f1:fc:65:3a:68:cb:bf:a3:7f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
        Validity
            Not Before: Feb  9 14:00:21 2026 GMT
            Not After : Feb 10 14:00:21 2026 GMT
        Subject: CN=f35f48ed00d2f506a40b5cc635109fa25c8d3ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:2f:68:3d:cb:9f:d4:f0:a4:e1:a0:3a:3a:
                    5a:11:cc:ca:0b:2b:18:b7:ab:80:c1:08:32:21:e9:
                    fe:a4:7d:6e:8d:20:dd:54:0e:57:ac:ed:0a:8d:62:
                    ec:e7:8a:0b:c1:7a:5c:d7:2a:91:22:a5:d6:28:2c:
                    3e:04:62:dd:1b:db:c8:c8:e3:bd:13:d0:9e:22:d4:
                    99:37:73:12:85:77:e8:da:8f:b0:43:70:15:6e:3c:
                    a3:c6:2f:a3:7f:26:05:33:3e:be:64:fc:1a:98:93:
                    f6:4f:e9:73:c1:36:4d:ed:5a:be:cb:63:e2:eb:03:
                    41:7f:87:18:af:10:c0:aa:b5:fb:90:d6:9f:b2:a8:
                    9a:4a:5f:3e:21:2a:b1:86:3a:33:85:05:4a:3c:bf:
                    3c:55:de:ad:6a:b9:8a:6a:be:8b:4e:0b:3d:61:42:
                    2a:91:0f:27:94:96:c2:e5:a3:73:d1:5f:2a:e8:3d:
                    b8:d4:e8:d0:2a:67:36:0f:7e:87:fa:21:50:24:6b:
                    5e:c2:9b:2f:65:57:5d:ec:e4:3b:ad:60:a4:b1:cb:
                    03:d7:f7:32:fa:41:be:9b:53:eb:52:1d:1a:41:cf:
                    b7:17:94:54:1a:0e:dd:81:45:9d:65:f7:1d:66:13:
                    c3:db:12:7b:51:b8:02:79:d4:b8:f9:04:81:c4:e8:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:48:ED:00:D2:F5:06:A4:0B:5C:C6:35:10:9F:A2:5C:8D:3F:F7
            X509v3 Authority Key Identifier:
                keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:a7:1c:89:6f:c5:f6:0a:1c:6c:2e:86:b3:b3:29:fc:67:
         af:c4:ae:5b:87:9a:86:ec:6f:7e:4f:0c:89:b6:16:1a:d4:52:
         32:a6:ef:b6:e4:ea:f9:45:af:50:5b:28:d6:b7:bc:b0:4d:01:
         e4:d3:91:68:22:3f:b5:3e:8a:c1:6c:c1:82:53:cc:7e:f5:17:
         02:3c:c8:c7:8a:a8:0a:c2:fb:ac:07:f9:ac:84:30:f6:0c:c3:
         b0:e6:9e:be:ed:a9:a1:bd:59:25:e9:30:9d:c0:a6:69:fc:09:
         48:ca:17:1c:14:2d:9f:a1:11:b2:75:3e:6c:87:05:e2:c1:73:
         af:f6:c5:d6:fa:58:72:e2:3d:9d:9e:4f:39:57:b7:eb:10:36:
         ba:7d:b3:e1:e6:23:cd:83:03:3c:dd:f7:3a:16:46:e8:f1:a6:
         76:73:08:47:4b:7a:88:17:cb:ea:59:01:4f:cb:3d:b5:62:34:
         f1:b8:4b:83:b1:96:8c:f2:6d:ac:08:fc:82:71:6f:8f:25:b6:
         f5:ea:83:ad:ca:c5:b9:4c:ad:71:1e:73:1f:0a:aa:f0:db:70:
         5b:17:d5:aa:1a:eb:5c:ff:4c:20:72:89:3b:b0:a0:79:14:32:
         90:ad:53:3f:c7:94:8f:a4:b1:3e:4b:5a:20:e8:44:a8:28:65:
         0b:84:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:53 2026 by rpki-client