This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          BxWESJ6E2Bja2NolL59rlCdH7JV4L57GfLedQkmAYb0=
Subject key identifier:   25:FD:E7:83:12:F8:C9:99:04:42:CB:E6:2B:CF:62:22:CB:78:E5:05
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       019C41A2179756657190504DA45A34E33687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          0E62
Signing time:             Mon 09 Feb 2026 09:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:07 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: exp/6czEKTuTED19/3cycmC21OGT6QQJyambxWdQcuM=)
                          2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:17:97:56:65:71:90:50:4d:a4:5a:34:e3:36:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Feb  9 09:01:07 2026 GMT
            Not After : Feb 10 09:01:07 2026 GMT
        Subject: CN=25fde78312f8c9990442cbe62bcf6222cb78e505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b1:27:7a:0f:15:29:d0:c4:0c:14:2e:7a:6b:
                    90:d5:45:3b:7f:ef:c0:c4:34:42:3b:35:a9:15:ff:
                    2a:89:b0:05:c3:fb:c4:e6:d6:6e:a5:47:9a:f5:b5:
                    31:2e:cd:65:a5:84:97:68:a8:a5:d9:62:e4:1d:ea:
                    48:26:0d:e5:78:80:f4:1a:3e:d8:f5:34:34:92:40:
                    f2:49:65:ea:f3:a7:5a:85:01:c8:95:ed:e0:36:ab:
                    43:e5:b6:bd:5b:bd:66:c9:ca:7f:26:b0:43:06:0b:
                    26:33:30:aa:c7:8f:1c:09:fb:c1:37:6b:21:08:b2:
                    ad:3d:9b:ad:15:fd:4c:3e:c2:5f:53:70:49:5d:fe:
                    95:7f:ba:a7:d4:ac:23:7d:6d:30:a8:31:d1:f7:ff:
                    47:2c:d8:83:a9:a6:33:5d:e4:90:d9:37:53:b5:da:
                    f0:66:d4:72:b6:ce:19:bd:42:43:1f:5c:2e:2f:d7:
                    92:6d:85:ce:a8:97:e1:d1:ef:b6:3d:0b:0d:be:20:
                    b4:76:16:ef:0f:51:fd:9c:98:59:d0:1e:bd:98:bd:
                    87:48:dc:18:b8:ad:55:95:22:41:a3:1c:4e:a7:e5:
                    e0:c6:71:0d:7d:2a:0a:c4:3b:6e:84:0b:27:4a:42:
                    13:38:ab:5e:06:b2:00:2a:a5:e2:c4:63:a3:58:d6:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FD:E7:83:12:F8:C9:99:04:42:CB:E6:2B:CF:62:22:CB:78:E5:05
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:c4:f2:18:a2:13:e5:27:24:ed:f0:57:b0:6a:fc:0f:1e:
         e2:18:c9:21:9e:da:88:97:74:e5:bd:10:2d:00:19:51:f9:24:
         89:48:f0:78:8a:da:f0:90:ab:c5:cc:14:9d:ca:d5:8e:e9:aa:
         3c:ac:ad:59:d1:c1:63:29:23:a8:0e:c7:51:cb:60:d8:1f:23:
         0c:a2:eb:59:4a:c8:98:52:77:2a:51:28:21:d0:4d:89:a1:53:
         22:38:e2:16:63:06:99:29:d6:eb:35:d3:78:47:22:83:97:5c:
         3e:dd:65:d3:3f:67:a2:a1:ca:b8:14:16:81:01:0a:89:19:f1:
         ff:a0:92:27:47:12:5d:c7:d3:b2:7d:9f:bf:13:5f:df:68:a1:
         4a:f8:1f:77:35:2e:4e:19:56:86:3a:be:f8:2b:f7:ca:68:a4:
         0a:c5:44:4c:8f:d2:4d:6d:98:5b:27:9f:d7:4f:1e:0a:9f:5d:
         8f:6a:02:83:4c:6f:71:a7:b9:c7:69:b1:da:0a:91:2f:d6:ab:
         d5:20:18:31:80:1c:a8:41:af:88:b7:28:75:1a:1b:f7:81:67:
         90:46:7f:0b:f9:b3:0e:ce:85:cb:1e:98:8c:49:00:32:7d:9d:
         3a:7b:2b:37:c5:18:bd:20:6b:a2:d9:d0:f4:3d:00:67:4b:4e:
         28:54:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:57 2026 by rpki-client