This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File:                     bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier:          b7uvo0M6oONohm3thWjZ0eL7IC9TWEj6lkiL36aUpAc=
Subject key identifier:   4B:86:C1:6C:BE:01:BE:B2:4A:4E:6A:CF:7B:86:62:9C:5C:5D:F5:91
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer:       /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial:       019C42EB891A12E6A4EDD9BEE691B1E80C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number:          0F85
Signing time:             Mon 09 Feb 2026 15:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:58 +0000
Files and hashes:         1: ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa (hash: BHGDW/+IDMtJk2UEAihZYue4lahmvlWX5Zbyw1itKuM=)
                          2: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: 8/YNlG+h0WKBHoe7p8xal+jhcdZbs/Pgb2H2vbhbgG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:89:1a:12:e6:a4:ed:d9:be:e6:91:b1:e8:0c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
        Validity
            Not Before: Feb  9 15:00:58 2026 GMT
            Not After : Feb 10 15:00:58 2026 GMT
        Subject: CN=4b86c16cbe01beb24a4e6acf7b86629c5c5df591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:f4:64:95:7d:8e:fa:07:3e:3c:56:96:5b:
                    df:8b:14:73:34:fc:4f:4c:a2:87:04:61:cb:ea:be:
                    33:4a:45:c6:88:bd:08:f5:3a:17:0a:04:a2:50:d4:
                    68:ca:6a:06:4f:9c:3a:52:65:94:65:bf:d9:8f:84:
                    db:39:0e:f3:a5:4b:14:8b:1b:78:40:17:47:29:34:
                    02:54:36:ed:8c:1d:7d:ce:46:c7:13:c5:89:5e:b1:
                    05:e9:15:2a:8a:49:58:d5:17:f1:80:2d:b7:82:65:
                    4c:c8:5e:fa:f9:f6:d0:7e:51:66:7f:73:a3:7d:fa:
                    6e:ef:17:e0:01:c4:55:9f:31:21:43:d1:0a:df:f8:
                    dc:43:4a:1f:b6:75:a6:60:c9:87:98:ac:9f:46:37:
                    f2:bf:01:02:1a:2a:f6:7b:2f:b4:81:35:1f:0d:8c:
                    12:d2:bb:ad:94:df:ed:3c:cb:5e:7b:64:d6:ed:56:
                    22:fe:b6:bf:04:b3:34:f9:e4:29:6b:9a:63:7e:91:
                    28:60:2c:93:06:39:48:83:76:e6:c4:0b:bc:56:93:
                    e9:5b:a8:24:34:e4:09:78:62:0c:78:a1:85:96:41:
                    da:d1:cb:3d:3d:44:99:0b:ee:b6:55:a5:6b:fb:f3:
                    23:03:1b:ef:27:1c:c3:83:d9:50:30:7a:a9:59:9e:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:86:C1:6C:BE:01:BE:B2:4A:4E:6A:CF:7B:86:62:9C:5C:5D:F5:91
            X509v3 Authority Key Identifier:
                keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:d1:7b:73:fd:be:79:c2:f7:f6:ce:3a:c5:9e:c3:01:f3:
         bc:9b:ff:37:8e:c3:ae:a6:e2:68:db:b0:51:27:87:39:c6:fc:
         f8:d1:e5:de:14:a4:27:97:3f:db:ef:2a:39:a4:a8:97:17:b8:
         eb:49:af:3c:df:78:a7:58:e7:c1:6c:fb:1a:da:53:55:c7:14:
         22:91:97:be:8d:11:55:4c:09:97:6f:7f:7b:a7:d8:4c:4d:70:
         df:84:6e:c8:87:9f:9d:43:98:35:8f:4a:6e:5d:45:cb:9a:32:
         3c:3a:89:6d:a0:0c:3d:89:8f:a0:69:52:aa:0d:af:da:58:5a:
         1e:b5:ed:0a:74:63:2f:9f:21:14:55:0e:01:0d:59:f4:03:a2:
         c2:4a:0c:79:bd:a1:6e:68:36:fb:3e:5d:d4:21:ad:71:1a:5e:
         52:9d:84:8f:c1:87:a2:b5:da:26:ba:8b:da:c4:7c:c9:a6:9c:
         61:44:4a:14:e1:fa:c3:fd:79:c0:65:6b:b9:3e:f6:23:f1:17:
         4e:5e:69:a4:48:db:f8:75:ed:95:fb:67:68:bf:6c:9f:25:f4:
         85:76:2e:e8:6b:64:2c:0b:b4:9c:ad:c7:62:80:00:15:19:61:
         81:5e:b4:13:92:fd:ed:b3:f5:ca:a4:b3:24:20:52:b0:c3:b6:
         44:a1:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:21 2026 by rpki-client