This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File:                     bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier:          7ekSD2z9+6AOPvay4l0s3QIFxz4hteX1xFoMp16Rnek=
Subject key identifier:   4A:2C:34:5C:63:9E:1A:91:F3:15:72:31:0A:B0:A7:C2:63:26:9B:4D
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer:       /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial:       019C420F4F83A18C0BB1F4EAD738E1393993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 11:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:25 +0000
Files and hashes:         1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: 6a9IverrzY/bNP9AY7YsWq8GrJVppOK3XFgtf7MeDGk=)
                          2: tgcnf14aynpCDHSaD58uVjKIxEc.roa (hash: DCplR2F0sZ78zHn6+9bhiFCaCAnd3KIcfPI0d7dZVY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:4f:83:a1:8c:0b:b1:f4:ea:d7:38:e1:39:39:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
        Validity
            Not Before: Feb  9 11:00:25 2026 GMT
            Not After : Feb 10 11:00:25 2026 GMT
        Subject: CN=4a2c345c639e1a91f31572310ab0a7c263269b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:52:c6:a7:24:44:18:6b:a6:c9:70:b6:70:
                    70:e8:81:68:18:d4:74:a1:67:24:9d:b3:1d:4f:34:
                    ee:4e:1f:d7:99:34:f8:37:ff:34:93:5d:12:1c:37:
                    0b:ff:97:bb:f1:6d:88:27:55:fd:f5:03:fe:4e:2d:
                    d4:cd:80:62:6e:8b:ba:e4:fa:71:26:91:71:74:fa:
                    cb:87:91:7d:7b:d3:43:d0:a6:6a:1b:ba:62:51:72:
                    31:de:8e:0d:52:29:75:ed:02:10:48:20:a4:d3:e6:
                    e8:fa:de:88:80:61:c2:f2:7b:d3:00:d2:e1:84:cc:
                    81:b0:6f:ec:2b:9f:9b:a7:81:f9:4c:c5:c2:2e:a6:
                    b9:86:77:05:34:6c:6e:43:68:e0:98:ce:3e:6b:b2:
                    cb:97:4a:34:6d:94:17:8c:be:8e:f1:6c:85:9f:5b:
                    1d:67:02:b3:c3:2f:33:81:4f:70:ad:6d:3e:65:63:
                    e9:75:b9:8a:b5:9c:84:fc:81:12:4e:d6:5b:79:75:
                    ce:c6:1c:ce:29:c8:e7:11:19:eb:c7:f6:7c:cb:2f:
                    62:37:77:18:e4:cf:43:6d:4f:d9:0a:fb:d1:bf:0f:
                    f8:9d:6f:2a:2e:d7:3c:20:29:72:31:ab:fd:80:8b:
                    5d:63:f2:8c:74:a1:eb:63:14:27:ca:bf:9e:08:ff:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2C:34:5C:63:9E:1A:91:F3:15:72:31:0A:B0:A7:C2:63:26:9B:4D
            X509v3 Authority Key Identifier:
                keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:e2:9e:7d:2a:d0:8e:82:e8:c4:89:fb:6a:ad:80:67:0a:
         b8:b1:23:cb:ce:1e:7d:d7:81:55:94:80:44:d4:c1:e5:4e:cf:
         e3:6e:57:6e:68:10:d8:07:c5:65:73:08:71:7d:a9:9a:3f:91:
         ce:09:b6:50:61:8e:d2:f4:51:57:5d:b3:de:7d:84:4b:b7:26:
         5c:ef:ff:8e:7d:b0:39:1e:9e:c2:cb:79:96:83:64:2b:dc:ee:
         74:2a:5e:37:55:3a:af:d3:ca:f6:52:b6:b2:35:83:71:d5:39:
         9d:fc:20:7f:1b:ec:5b:5d:25:5a:23:43:59:20:1b:13:1d:f6:
         7e:43:d2:d2:68:cf:38:77:05:33:91:bd:6c:7c:45:77:01:36:
         29:f8:8e:7e:5e:0a:59:fd:d9:60:26:e3:39:d7:38:fc:ae:09:
         3d:2a:b0:17:cd:79:09:dd:c6:6b:f1:7e:7d:92:dd:3f:aa:76:
         b0:52:fd:ed:45:79:a2:d4:f0:22:df:4e:7f:a5:b0:fe:25:38:
         66:8b:8c:f6:dd:e6:23:74:c2:b5:e8:00:0b:6e:de:39:e8:90:
         68:94:8e:5a:e0:59:0e:99:12:31:46:b3:76:89:0b:1a:1c:1a:
         90:93:bd:a8:82:50:9e:98:db:95:71:45:62:16:b8:78:8c:81:
         4e:b3:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:31 2026 by rpki-client