This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File:                     BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier:          hYlH899LXG7axpIWZiTzB3F4vxAnN9dwdZLbSOrfhyk=
Subject key identifier:   E4:00:A1:A7:86:57:59:22:D0:85:E6:FB:05:46:B9:C5:BD:17:27:98
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer:       /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial:       019C427D97D5EEDD34F11217B8D85C0202C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 13:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:52 +0000
Files and hashes:         1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
                          2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: Kr6w74KzDBqfV1vHuNJCQuafsAd2Qx7un7qtwd6gaBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:97:d5:ee:dd:34:f1:12:17:b8:d8:5c:02:02:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
        Validity
            Not Before: Feb  9 13:00:52 2026 GMT
            Not After : Feb 10 13:00:52 2026 GMT
        Subject: CN=e400a1a786575922d085e6fb0546b9c5bd172798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:93:68:e4:7d:09:a0:f1:84:43:d7:b0:77:
                    ae:82:22:e2:fe:43:5b:37:8a:f9:fc:8e:3a:d0:a9:
                    57:7f:99:c6:d4:c5:d4:50:f7:f3:d9:06:7c:bb:b9:
                    b5:37:3e:9d:fd:90:fa:46:0d:36:80:bb:30:fb:a1:
                    3a:cf:8e:18:3f:a1:47:c0:04:e0:98:fb:0f:7c:90:
                    fe:5d:c9:18:99:e3:e1:e5:a6:3f:42:cc:3a:85:c0:
                    23:25:4f:7e:7d:68:ff:89:04:06:4e:42:dc:77:9c:
                    76:4c:b2:d4:22:5a:62:ed:4f:9d:bb:14:98:0c:b7:
                    5e:0b:99:8a:9a:5b:4e:8c:31:7e:1f:d1:99:d1:c2:
                    46:e9:dd:a8:c0:01:91:2f:44:94:aa:1e:48:eb:ee:
                    97:ec:92:ca:c3:16:5b:bf:0c:ef:e8:c5:2c:48:08:
                    38:83:ff:c9:74:33:0f:01:c5:0a:2c:8d:23:b7:31:
                    10:c0:eb:82:9b:cd:7a:55:be:38:6a:92:88:ee:1b:
                    46:48:38:c8:8f:ad:ea:59:dc:69:20:55:77:48:13:
                    42:4e:f1:e4:da:26:d8:ae:61:70:d7:93:67:57:f7:
                    5f:02:4b:27:68:59:ee:f3:73:3e:8e:61:b0:35:78:
                    c6:29:4e:df:86:86:75:bb:7f:61:ea:ae:0e:81:52:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:A1:A7:86:57:59:22:D0:85:E6:FB:05:46:B9:C5:BD:17:27:98
            X509v3 Authority Key Identifier:
                keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:dd:26:50:70:39:2f:b1:5d:23:15:c6:bb:48:db:e1:d9:
         d6:52:46:ba:a4:e9:58:76:01:16:62:fb:b1:11:ab:69:17:4a:
         61:b3:be:e3:95:e2:0d:74:27:cc:b8:0c:35:57:ad:78:ad:3b:
         b7:11:fc:cb:63:bd:06:ac:31:31:40:88:8d:2f:28:cc:ae:2c:
         55:d4:b5:c0:d5:79:88:65:53:fc:f8:c2:a2:0f:e8:3f:7d:f8:
         96:3e:ed:c6:57:7a:a7:a1:75:44:ba:77:62:be:fe:34:93:4d:
         52:b0:44:ce:f2:5a:37:6a:91:1d:9e:81:88:0b:e4:eb:33:9c:
         7f:3a:3c:ba:79:91:63:1e:f3:54:ab:25:3e:f7:e7:7b:63:6b:
         60:36:67:b5:56:89:7f:4c:64:27:0f:78:7d:21:41:31:24:d6:
         2b:8f:18:22:60:52:07:0d:a4:5e:d5:94:bf:b2:52:99:6d:b6:
         11:87:66:59:b8:37:bc:4e:e0:75:47:46:07:82:d3:91:90:98:
         26:41:d1:48:16:f6:9c:cc:49:d0:2a:23:fc:d2:12:d7:31:1b:
         92:6e:b2:f1:68:94:a0:eb:8f:08:ad:8e:3a:4a:e0:ef:0b:f8:
         13:88:3b:d2:07:d2:a3:bf:37:8c:0c:36:5e:f6:ac:de:11:ed:
         6d:a6:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:40 2026 by rpki-client