This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File:                     BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier:          692fSH0tkvbrEAd/zwp1H7qpfLr8MGcAfs0FJG7lnWQ=
Subject key identifier:   2C:73:AF:F4:4C:82:5A:94:48:DC:93:D6:AC:DA:E3:1F:AC:9D:42:C7
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer:       /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial:       019C427D520765101BED1C2842E8E3890779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number:          06A0
Signing time:             Mon 09 Feb 2026 13:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:35 +0000
Files and hashes:         1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: i8hu5dX8de751yHQpELhOpVl3TCWOirW0sfDT9ETw5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:52:07:65:10:1b:ed:1c:28:42:e8:e3:89:07:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
        Validity
            Not Before: Feb  9 13:00:35 2026 GMT
            Not After : Feb 10 13:00:35 2026 GMT
        Subject: CN=2c73aff44c825a9448dc93d6acdae31fac9d42c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:64:0f:b0:32:2b:3e:05:b5:7b:6a:9c:0a:ba:
                    65:40:1e:94:8d:67:e3:46:ef:09:17:cc:08:01:0a:
                    c7:9a:ab:de:73:11:a2:e9:ef:85:f4:0d:b9:55:26:
                    79:58:59:ac:3d:13:9b:c7:3c:b8:8c:05:60:f0:6b:
                    5f:cf:5f:80:4c:4d:73:35:ee:dc:ae:cc:43:12:21:
                    6b:af:4a:00:a7:97:3b:ef:67:0c:61:30:62:da:63:
                    e2:6a:78:b2:e6:44:28:2f:69:10:87:cf:af:64:3e:
                    f0:05:82:0d:c7:37:78:85:37:df:f6:c1:40:81:23:
                    f9:8b:59:ea:1b:30:19:0e:80:65:49:c7:f4:f1:03:
                    ce:56:14:ad:0a:97:b5:fb:a4:e9:77:57:9b:b3:97:
                    20:61:f5:d7:14:00:02:ac:26:92:5b:63:2e:43:02:
                    7e:b1:36:59:ea:6a:59:be:27:26:9a:d8:f4:c2:e9:
                    d3:17:55:17:d8:91:0d:38:71:48:16:86:dd:34:b8:
                    af:7f:23:10:2a:4a:81:77:13:77:52:db:dc:47:86:
                    7a:1f:dd:93:dd:24:17:2f:ec:8e:31:92:ed:38:77:
                    d3:34:4a:72:4f:bd:ea:f1:66:61:2c:1b:76:81:86:
                    13:0c:5a:c1:32:29:db:74:6c:00:9f:9b:24:32:fd:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:73:AF:F4:4C:82:5A:94:48:DC:93:D6:AC:DA:E3:1F:AC:9D:42:C7
            X509v3 Authority Key Identifier:
                keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:ce:fe:a9:d8:43:fe:b7:de:7c:8f:21:79:40:50:8f:25:
         11:60:b3:dd:0b:7b:8b:7a:cc:e7:84:68:19:b8:e5:29:8f:c0:
         64:da:35:76:8f:e2:7b:eb:35:80:46:fd:80:2f:a6:cf:e1:f9:
         e2:55:8d:d3:66:7d:4f:6c:df:31:a6:4f:86:44:47:a3:f8:01:
         96:5d:7a:3b:45:3e:11:64:2f:5f:3c:be:e3:d2:1a:7f:b3:fd:
         de:4a:57:f5:d3:08:cf:c7:41:41:07:5b:4b:83:20:4b:41:31:
         dc:29:da:e2:b0:62:a6:ea:71:15:53:43:95:aa:40:c8:04:cf:
         f0:0c:74:76:ff:7a:8c:cb:50:fa:18:96:1d:0c:5e:8a:32:e6:
         6a:71:49:dc:c5:37:10:97:c9:f2:53:5a:f5:ee:1a:24:a1:4f:
         c3:6b:3f:15:8f:36:76:5e:a1:05:c7:31:b0:6c:7e:10:6a:51:
         39:04:84:cf:4a:84:5a:b5:60:d8:67:a3:a4:9a:31:8f:30:ca:
         67:34:8e:05:a6:9d:99:d5:85:e9:86:57:ad:10:c8:aa:e5:c1:
         b1:65:c5:6a:8f:b7:53:6e:3e:3e:6d:ab:ab:20:ad:42:c9:4c:
         d3:74:0d:3b:db:13:30:a6:0b:1f:2d:62:54:86:0a:b3:cd:ee:
         76:f3:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:43 2026 by rpki-client