This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File:                     BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier:          SQbzNAr9BYfWBWfhT58p2UR29nx36j7hMG6dL3Fj99A=
Subject key identifier:   83:2B:21:09:10:4F:F4:FA:19:1F:50:D2:80:40:F4:23:88:AD:F1:18
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer:       /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial:       019C446C3C58515D166F41658C434AAF4013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number:          1207
Signing time:             Mon 09 Feb 2026 22:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:09 +0000
Files and hashes:         1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: Y/k6dxLtRi1oS51qjKBnJvhzqdmgbyQtCbsoY0x4cvY=)
                          2: fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (hash: 02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:3c:58:51:5d:16:6f:41:65:8c:43:4a:af:40:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
        Validity
            Not Before: Feb  9 22:01:09 2026 GMT
            Not After : Feb 10 22:01:09 2026 GMT
        Subject: CN=832b2109104ff4fa191f50d28040f42388adf118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:36:f0:ea:8e:9a:3a:b9:8d:85:12:67:c7:
                    7b:36:5b:30:1b:27:63:f0:61:dd:9b:c2:1d:b6:7a:
                    8f:11:c3:b2:b0:3c:83:28:9a:73:d9:15:4c:65:f9:
                    f0:19:87:3d:fb:c6:dd:6a:e7:f8:23:1f:65:c5:46:
                    c6:73:e8:27:76:27:5e:c1:07:3c:ed:43:37:7d:3a:
                    41:55:a5:aa:ab:03:ba:1d:f3:06:44:f0:8b:f6:77:
                    c6:3c:77:2d:b8:df:94:a3:b8:a2:ca:14:36:68:c4:
                    ee:c4:72:a6:03:05:19:56:6b:c5:9d:79:9a:c2:57:
                    7c:b7:3b:2c:b5:67:f2:62:7c:17:68:ba:de:8d:bf:
                    cf:40:f6:f3:69:85:5c:d5:a7:b6:cc:b3:b2:8f:32:
                    2a:10:1a:3e:08:27:51:2b:31:20:b5:d5:ed:58:d9:
                    a1:61:c4:e1:3c:db:15:6a:7b:7a:01:17:43:3d:31:
                    4b:f7:c2:7e:5f:cb:54:f3:1b:e4:98:29:fe:11:63:
                    55:5b:b6:79:3f:8e:19:fc:47:93:dc:fe:fa:c9:e7:
                    a3:16:02:7c:89:1c:65:aa:be:2f:35:25:aa:e7:01:
                    e5:97:95:ac:2f:a8:59:01:46:8d:75:6b:35:4c:f9:
                    5b:f8:a4:c5:ac:33:18:8f:c4:f6:f3:91:1e:ff:50:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:21:09:10:4F:F4:FA:19:1F:50:D2:80:40:F4:23:88:AD:F1:18
            X509v3 Authority Key Identifier:
                keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7f:62:74:d3:fd:c2:1f:89:aa:96:68:7a:0d:23:0f:5f:39:
         32:5b:d9:2b:16:f6:cb:f6:f9:30:6d:a2:b5:8b:86:49:41:81:
         35:dc:f9:24:e3:9c:d7:55:78:6c:7f:77:86:5f:56:40:84:da:
         c2:9c:de:c5:32:ba:42:f4:f0:c6:ef:3d:b6:0f:37:ae:ec:97:
         aa:af:69:31:00:38:00:4e:d9:8c:2b:ac:48:e0:eb:ee:72:d8:
         16:da:05:ba:b6:16:ee:86:ec:3b:5b:81:b1:0c:69:db:1b:8d:
         c5:73:d2:c6:69:45:fb:30:2f:9e:97:02:aa:30:58:7f:14:62:
         3c:dd:81:09:43:c1:21:1f:00:60:7e:bb:0e:ed:b6:5c:f2:a2:
         c1:26:2e:45:26:68:1f:f7:34:51:da:3f:b5:f6:1c:12:f9:ea:
         57:c2:85:61:c5:d5:7a:6d:8d:71:fa:c8:35:fd:3b:0b:67:05:
         bc:0b:b7:f8:7e:24:c8:07:82:53:6a:56:91:7a:68:f4:2c:7f:
         2a:70:05:f9:a1:d4:dc:d4:78:14:0e:c8:34:60:a9:1e:70:83:
         e0:21:23:4e:80:00:4f:4b:b5:a2:84:79:b6:42:2c:c7:d0:af:
         60:a4:71:bf:f6:bb:ea:b7:ea:89:60:18:86:07:99:bb:34:8f:
         36:40:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:16 2026 by rpki-client