This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File:                     BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier:          mUfIbkB359vMFNrGEYPlfvZAFeyAlM74niEUUm5Sn48=
Subject key identifier:   68:03:26:4F:27:2D:75:04:14:67:C8:21:E0:B2:5C:F5:0A:59:94:46
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer:       /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial:       019C1CF0DE2855033C38FDC76E48D3E83B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number:          0651
Signing time:             Mon 02 Feb 2026 06:01:13 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:13 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:13 +0000
Files and hashes:         1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: uYbwDvNqTHyLQJi2FWs3fw70CjE47OFVbkC1YwyFrEg=)
                          2: TXT1GVPFMNe-cqpQPoKx9np5zss.asa (hash: +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=)
                          3: oJaCccfXjQMFvJqVrL5N46TQ9zE.roa (hash: EfVI6n3eE0eVg/MDBz9MdFM6KVuoEgXhMjYwH52/7Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f0:de:28:55:03:3c:38:fd:c7:6e:48:d3:e8:3b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
        Validity
            Not Before: Feb  2 06:01:13 2026 GMT
            Not After : Feb  3 06:01:13 2026 GMT
        Subject: CN=6803264f272d75041467c821e0b25cf50a599446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:63:8f:98:ae:29:be:c5:aa:84:45:31:63:
                    95:ef:9c:65:ad:73:31:2f:75:8d:c7:00:8f:43:45:
                    cd:2b:44:3b:7d:83:25:80:60:5d:34:d4:b0:2b:57:
                    49:34:0f:10:4a:e6:4f:cc:88:95:1e:d7:65:ff:ca:
                    31:5a:57:54:3d:41:ab:58:3a:74:46:47:e4:88:0c:
                    5b:9a:77:e4:cc:95:36:03:30:ca:16:d1:0a:5e:da:
                    87:37:47:79:d1:7a:7b:6f:e4:3a:93:bc:24:7c:8d:
                    ac:21:c1:93:db:c7:ab:0d:c2:6e:c5:37:cd:8a:04:
                    e7:2e:c8:20:61:d1:88:6d:f5:5e:f5:f7:96:21:9e:
                    ff:25:a0:77:a7:28:ed:a4:29:b6:8b:f6:69:90:d2:
                    b7:ac:82:c5:27:c9:81:51:85:0d:c6:aa:5b:0f:f8:
                    6f:a6:0c:ed:a7:4e:52:5a:5d:19:4e:b0:ce:e9:4c:
                    f9:34:6d:89:c6:ba:34:73:9a:b6:c1:b4:87:bc:6f:
                    27:79:ad:ff:fc:61:87:a7:1e:8b:68:3d:63:9e:36:
                    12:3b:97:87:96:89:69:c2:9e:b8:93:26:c1:ae:96:
                    b8:79:1d:a8:97:ed:9a:fb:61:f8:17:33:0a:fd:56:
                    56:03:77:23:85:10:00:67:8e:0b:58:c9:5a:a3:cd:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:26:4F:27:2D:75:04:14:67:C8:21:E0:B2:5C:F5:0A:59:94:46
            X509v3 Authority Key Identifier:
                keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:73:5b:62:d0:91:1f:6f:bc:6a:2e:af:8b:f4:4c:ea:76:ed:
         d4:bc:cd:b6:a0:f5:88:13:9e:3d:b7:be:b4:23:1f:82:2d:93:
         4f:15:93:18:52:f9:f6:98:98:bc:8e:ae:56:03:01:5d:5c:1c:
         68:d4:85:55:c4:05:9a:f0:c0:fa:49:86:81:65:30:a5:15:ab:
         89:ac:34:96:ae:79:e2:a2:14:db:89:aa:98:c7:93:be:fe:90:
         54:1d:78:65:b9:df:17:df:87:7d:49:29:2e:69:6e:4b:fb:a6:
         fc:ea:04:b7:4e:76:1f:88:a5:d1:9e:9c:67:07:b5:45:f1:a4:
         4a:34:82:a4:ed:6f:7b:91:9f:d0:3d:a2:4a:e6:38:6d:ca:34:
         4a:83:ab:33:c3:ee:05:c0:50:1c:65:41:1c:41:76:bf:68:f2:
         6d:e7:13:e6:35:79:75:3d:59:76:cd:54:22:01:7e:f6:21:36:
         c4:f5:b7:93:62:09:5f:05:48:f6:73:79:a6:55:b7:47:18:38:
         da:33:f8:7b:90:0d:26:15:69:bb:d2:99:44:bc:e8:6e:73:e6:
         aa:dc:ef:53:4c:4b:21:44:24:2b:7b:a4:d4:ec:e8:3f:23:72:
         ef:18:7c:c4:ea:e6:0d:e1:ef:94:0e:21:f2:d7:22:51:5f:97:
         64:7d:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:29:08 2026 by rpki-client