This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
File:                     sBTC9eALxnh9MoMbieoSTfYonkU.mft (raw, json)
Hash identifier:          AIlCoD67ygdps2+i0nO3QhiDiHg4WK+CbqEpQ0YvpPQ=
Subject key identifier:   61:78:5C:E2:80:F8:A5:B1:DB:22:06:92:C9:2A:F2:05:B6:69:21:08
Authority key identifier: B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45
Certificate issuer:       /CN=b014c2f5e00bc6787d32831b89ea124df6289e45
Certificate serial:       019C435942D598AB15968B846F72E30344F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
Manifest number:          0164
Signing time:             Mon 09 Feb 2026 17:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:49 +0000
Files and hashes:         1: sBTC9eALxnh9MoMbieoSTfYonkU.crl (hash: 8pWGUorgoQXf9kMMGPdKMP0rnxRgRI0QD+jD99FokbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:42:d5:98:ab:15:96:8b:84:6f:72:e3:03:44:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b014c2f5e00bc6787d32831b89ea124df6289e45
        Validity
            Not Before: Feb  9 17:00:49 2026 GMT
            Not After : Feb 10 17:00:49 2026 GMT
        Subject: CN=61785ce280f8a5b1db220692c92af205b6692108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b5:3e:ec:3b:35:c9:91:ba:2f:f1:9b:11:da:
                    24:7e:b1:33:1a:36:ac:f2:99:6e:58:66:55:37:bb:
                    59:dc:f9:c2:26:99:ee:c4:25:c7:b5:c0:be:4b:fc:
                    6e:93:44:41:ab:a4:24:56:6a:06:78:d3:65:d9:45:
                    f4:b8:7d:62:75:6b:1f:af:7d:21:ab:8d:e4:8f:a3:
                    eb:40:4d:67:06:92:27:6c:74:ab:10:6a:13:8f:63:
                    e8:a8:f8:31:f8:3b:62:ef:1c:78:f7:21:79:4d:c2:
                    49:5b:ff:06:90:13:8d:de:fe:1a:83:64:5f:98:4a:
                    30:8b:75:a6:79:4b:f8:db:5f:aa:b0:ff:75:d7:f9:
                    18:1b:55:3e:5b:e2:42:c8:73:6c:73:17:e1:f9:34:
                    ea:8a:36:e5:63:f9:86:b5:fd:09:61:16:43:fb:a6:
                    17:25:47:8e:f5:f6:9d:52:d2:54:f1:2d:52:4c:c0:
                    9b:a1:7f:6a:3d:1d:b7:9d:b2:16:9f:02:dd:5b:22:
                    ce:e9:28:f8:21:a4:38:b7:7e:03:a0:8c:73:9a:0e:
                    8a:a6:db:e1:c2:a1:b8:36:96:06:c2:79:45:87:d3:
                    17:a1:34:42:84:68:21:d6:7f:d9:89:a2:bf:04:e9:
                    c6:72:1d:cc:2a:c4:e5:3a:dc:c9:b8:94:39:13:97:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:78:5C:E2:80:F8:A5:B1:DB:22:06:92:C9:2A:F2:05:B6:69:21:08
            X509v3 Authority Key Identifier:
                keyid:B0:14:C2:F5:E0:0B:C6:78:7D:32:83:1B:89:EA:12:4D:F6:28:9E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBTC9eALxnh9MoMbieoSTfYonkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d0b6a3-619e-4b10-a73a-30356acee031/1/sBTC9eALxnh9MoMbieoSTfYonkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:de:d5:6c:50:62:7c:b1:d7:d5:49:c0:af:31:fb:2d:15:01:
         1d:98:c5:a0:ce:fa:6c:14:3d:b2:18:e4:04:72:ff:ed:53:37:
         90:76:82:80:4c:6c:89:15:f1:f1:11:6e:cc:63:14:eb:83:9a:
         08:d9:29:4f:2c:01:78:17:f7:d5:45:1c:c1:87:05:0e:03:83:
         c8:fb:41:02:1a:0d:f0:d1:7b:34:52:ec:f2:61:20:c8:43:75:
         0c:7e:c3:4c:b7:f5:19:a7:24:cb:bd:cb:8f:6c:d4:74:9b:af:
         c5:81:34:32:ab:d8:89:c4:7d:69:db:5c:c7:1c:6a:a5:62:6a:
         dc:c7:a0:8d:2b:42:4e:0f:69:fd:08:ea:56:61:8e:df:63:55:
         1f:99:10:ac:59:ce:d1:92:e3:2d:20:db:ae:1a:c5:71:49:09:
         f3:43:50:84:20:f1:8c:32:83:0f:04:b7:b2:43:4c:5d:ae:56:
         78:ce:d1:25:0e:cb:b1:e5:ee:6e:a5:22:82:d3:fe:4e:56:00:
         e3:26:8c:55:cf:46:ed:c4:d4:f9:43:5d:a4:75:e2:cc:b5:66:
         c5:99:f7:6d:e6:eb:ee:cb:89:a1:ea:ac:5d:b1:9f:b2:2c:51:
         e9:a4:f6:69:34:6a:a3:7c:65:44:7c:04:b3:09:5e:17:a3:f0:
         37:f0:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:38 2026 by rpki-client