This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File:                     BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier:          GRr+omYBYsVPRyK+WQg9LAWxZ8dCTeUjbM03L/oofAQ=
Subject key identifier:   A8:95:2D:62:B8:83:31:47:A7:76:F5:EC:1F:30:A3:A5:13:30:6E:A9
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer:       /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial:       019C4390CBC6755C54B2D089689FD0F4A548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number:          0396
Signing time:             Mon 09 Feb 2026 18:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:28 +0000
Files and hashes:         1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: qs4hwlOdZv+vjgU2JoOypsCNioCWFgRlzWsL1UXIFi8=)
                          2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:cb:c6:75:5c:54:b2:d0:89:68:9f:d0:f4:a5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
        Validity
            Not Before: Feb  9 18:01:28 2026 GMT
            Not After : Feb 10 18:01:28 2026 GMT
        Subject: CN=a8952d62b8833147a776f5ec1f30a3a513306ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:0f:2c:23:7c:c8:2c:06:83:67:6f:ac:1e:
                    91:70:cb:d8:e1:9b:45:f7:c4:f6:bc:81:2c:98:2a:
                    88:81:45:1a:cd:c3:3a:9c:cd:4e:74:8e:92:08:90:
                    8b:5a:a5:60:b1:92:c1:20:dc:1f:e5:9c:d1:24:f4:
                    f3:f9:82:f7:4a:7b:8d:a8:cb:07:c4:f3:71:b2:ff:
                    1c:1e:58:35:c5:1c:9c:eb:46:cc:e5:09:75:ac:81:
                    68:e5:58:e8:7e:d1:b0:bb:37:9f:80:96:a0:48:27:
                    9e:69:c0:2b:39:ee:a6:fb:9a:bb:3b:42:e5:22:82:
                    ca:ec:55:6b:9d:3d:21:7d:58:ff:fd:7b:5b:58:46:
                    31:a9:97:e3:13:07:f1:0e:75:fb:5b:ef:90:47:f5:
                    d6:0d:dd:b2:5f:1e:1b:70:ec:f3:99:6d:bb:bc:c6:
                    e1:c2:f6:22:9a:92:9a:ef:bf:fb:03:00:16:44:6b:
                    39:6f:29:00:92:51:f7:77:19:b7:47:8b:23:fe:a6:
                    d6:67:5e:e8:c5:91:87:55:0a:4a:24:8d:5b:a9:f6:
                    3c:2f:a8:c0:a9:4a:c9:19:1e:d0:52:7a:86:5b:7d:
                    17:0c:b5:f5:35:0b:d3:a9:2e:7c:31:b5:0a:22:d4:
                    3e:a4:9b:91:4a:3a:9f:b8:76:66:4d:30:36:e7:67:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:95:2D:62:B8:83:31:47:A7:76:F5:EC:1F:30:A3:A5:13:30:6E:A9
            X509v3 Authority Key Identifier:
                keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:6a:62:a9:7b:2a:e1:bc:cc:66:71:3e:c2:1e:3a:6a:e6:
         07:5a:1b:e7:17:c4:26:9f:9a:bd:07:4a:7c:2e:cf:fe:b9:16:
         69:73:0f:98:a9:ff:d4:f8:b8:0b:4c:62:38:1d:4f:af:b5:d3:
         fe:8d:ad:6a:a2:bc:da:0d:ed:34:f6:e3:30:8b:e0:95:24:c8:
         3f:40:11:6d:e0:ab:c4:c9:2e:5a:33:05:78:27:ad:64:77:cc:
         1b:83:ac:15:95:6c:67:c7:0c:6d:cb:e8:18:e3:89:76:bd:68:
         9d:79:ee:66:a8:14:94:24:1e:54:b0:3d:17:9e:f1:d1:92:a9:
         de:2d:1d:91:0c:07:cc:0b:72:ed:c8:de:85:d3:ff:f9:a2:8f:
         a8:15:6c:e4:55:67:bb:c3:c5:da:ae:a8:85:82:5d:2c:9a:0d:
         71:bb:f1:e7:66:88:0a:2f:41:ce:cc:08:7c:19:8f:98:a0:b1:
         49:7c:6a:b8:96:83:0e:0c:5e:f8:69:84:fe:16:0c:2d:5d:5c:
         36:02:09:0a:7a:5b:0b:0a:0e:76:d5:20:ab:3a:ae:54:01:f4:
         81:af:a1:b1:e1:84:41:94:e1:0e:d3:c0:03:11:54:44:23:46:
         1d:af:a5:d4:9c:f6:e1:ef:b9:e4:5c:b9:05:7f:87:a8:08:98:
         24:da:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:46 2026 by rpki-client