This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File:                     BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier:          uLNtW8rWWfxVLwgSGzyG7gO3r7R3ZayZQ/kR3ARxO7w=
Subject key identifier:   FA:7F:BD:6C:73:E2:46:F2:25:6D:6E:AB:B9:BD:B4:E6:A3:FC:D5:96
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer:       /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial:       019C4322697572D1F5868B0874FA4385A27C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 16:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:54 +0000
Files and hashes:         1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: evCUZGyFg4KrxwAeKUaRYRuy1SlKdfwj6q+I9mmRiaM=)
                          2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
                          3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:69:75:72:d1:f5:86:8b:08:74:fa:43:85:a2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
        Validity
            Not Before: Feb  9 16:00:54 2026 GMT
            Not After : Feb 10 16:00:54 2026 GMT
        Subject: CN=fa7fbd6c73e246f2256d6eabb9bdb4e6a3fcd596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:9d:5e:b4:5c:b2:d1:55:6c:74:5f:40:f9:
                    87:c8:f7:0c:5a:eb:31:32:dc:95:26:ef:51:d3:3c:
                    25:13:fd:85:6d:77:80:66:23:a1:79:a1:b3:3d:60:
                    13:20:34:a7:f1:83:c2:fa:f8:8e:72:36:43:6d:66:
                    4c:e9:11:0c:58:11:2d:6a:5f:07:8e:d4:79:80:9a:
                    be:c3:59:15:01:cc:fc:dc:46:1e:14:19:ae:4d:c7:
                    ca:d5:52:8a:b9:68:f0:4d:51:83:58:83:71:69:64:
                    ef:2a:86:2d:6d:2d:65:82:8b:c7:a0:8c:21:e1:1c:
                    40:4a:66:62:86:d2:ec:87:0b:40:90:38:7e:db:9e:
                    20:7b:bf:6b:f5:16:78:17:d1:9d:b5:68:59:2f:7c:
                    1c:13:e2:06:e6:a6:1c:99:99:05:75:56:e2:c6:91:
                    af:3f:58:e9:59:c7:28:a5:b3:22:80:01:d9:85:b5:
                    8c:41:5d:69:a0:da:ba:d4:1b:1d:16:e6:54:d7:02:
                    1a:42:8f:34:29:68:a6:ae:d8:7e:69:b2:fe:8e:7e:
                    b4:91:14:d6:52:1d:f8:5c:5d:ad:45:bd:d2:ff:f8:
                    14:0a:ce:68:95:88:32:28:d5:1d:66:cc:cd:94:94:
                    9a:7a:44:a6:26:57:a5:aa:72:9b:db:14:e6:53:e0:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:BD:6C:73:E2:46:F2:25:6D:6E:AB:B9:BD:B4:E6:A3:FC:D5:96
            X509v3 Authority Key Identifier:
                keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:1c:99:80:98:52:c0:16:d6:fd:e7:5b:80:04:23:f5:02:
         40:43:82:04:c0:86:87:d5:0b:67:d1:01:8a:f2:51:e7:ac:e9:
         c3:15:1e:f4:31:bc:97:58:9c:7c:49:24:bf:e0:66:2d:34:ba:
         9a:9d:67:5f:17:58:b0:e4:cc:5d:53:59:e0:05:0a:8d:5d:de:
         19:29:f5:77:2f:44:77:f6:28:8c:89:83:77:19:5a:10:b5:25:
         4c:ab:64:21:64:9a:cf:d6:22:ad:f7:37:cd:21:ac:17:04:42:
         f4:f4:f9:61:e4:16:9e:17:5d:53:ae:25:5e:89:47:26:00:a8:
         c3:04:12:35:e7:34:e2:9a:69:44:ad:21:cb:90:fe:6a:a4:51:
         a5:00:22:99:f0:51:62:39:98:0b:7d:3d:e1:a9:63:9c:b2:fb:
         39:2e:42:d1:95:78:d8:87:84:4a:dd:bf:cf:e0:d7:b9:6a:72:
         53:63:7c:66:45:85:b4:36:03:c2:7e:82:88:0b:b6:e0:99:3c:
         a7:41:d2:a0:0b:f7:7b:46:0b:a3:c1:ad:33:9a:2a:98:cb:51:
         30:e4:0e:dd:41:a4:31:ec:23:56:31:d1:4d:59:20:46:9b:b3:
         b5:19:a6:0d:91:1c:b5:b2:33:ff:17:db:2b:34:90:31:90:f3:
         83:9d:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:30 2026 by rpki-client