This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File:                     BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier:          oxVV72vG7CRtzXhwRX+GdpXl1pxD0m2g05sCeQjxsok=
Subject key identifier:   11:87:E6:BD:7C:FA:CB:FC:8F:94:F3:46:A8:76:9F:4A:3C:AA:EE:BC
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer:       /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial:       019B9FD8525746FCF6F39C8FD77F047727C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number:          0E28
Signing time:             Thu 08 Jan 2026 23:01:52 +0000
Manifest this update:     Thu 08 Jan 2026 23:01:52 +0000
Manifest next update:     Fri 09 Jan 2026 23:01:52 +0000
Files and hashes:         1: AB8umA8bjPgJltKkIRne6IfYP0Y.roa (hash: bEK6Pc0xzgpCyMevab0GP8GntCpJtnUMRsRnsemYpvg=)
                          2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: oQD4C28ixHJqOqtZ3HcxvkqEJFpTFnzWql6Bx2wrkKc=)
                          3: Ef2mz8xqhrKj3SB5AKH3hlrhTzU.roa (hash: 3/Mu4QjcxxnSUOoxL+4VfjaGTMXn9INAMEpjV6ScrKI=)
                          4: sNWqTxun9B8T5a1nVHtvNEr4TKw.roa (hash: z/D95gZg33TdNSMDHOhYm62OJIqU2YgKuCi7L08cx3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:d8:52:57:46:fc:f6:f3:9c:8f:d7:7f:04:77:27:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
        Validity
            Not Before: Jan  8 23:01:52 2026 GMT
            Not After : Jan  9 23:01:52 2026 GMT
        Subject: CN=1187e6bd7cfacbfc8f94f346a8769f4a3caaeebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:87:6b:eb:22:8b:98:b3:2b:11:17:ac:43:
                    86:43:f6:f5:c5:1e:63:5a:7c:f5:ff:bd:09:1c:39:
                    0d:16:a6:f8:30:fc:84:87:a2:52:1b:3e:8f:d2:63:
                    30:45:9c:c9:8d:f0:54:f3:6d:20:19:bb:77:2a:16:
                    2d:99:47:4f:3f:d8:9e:73:e3:58:4f:4e:35:66:1a:
                    49:00:58:ac:8e:d1:87:64:d1:48:13:13:0f:9a:b0:
                    56:b0:28:43:1b:90:f5:b6:fd:5a:d5:72:2e:1c:b1:
                    9e:12:a5:0c:d1:fd:71:2d:33:dc:c3:e2:e6:17:82:
                    ba:eb:85:98:31:c1:71:e5:b7:68:83:fe:39:6a:58:
                    ef:1b:1a:e5:24:1d:29:bc:20:7b:ca:44:4e:c0:50:
                    14:69:9a:5c:78:ff:8b:db:fc:ac:3d:5d:e7:f1:a0:
                    b2:ab:13:1b:13:63:cd:bb:34:cc:6d:48:8a:a4:c0:
                    b6:ed:f7:59:c3:f9:e6:75:da:89:85:48:b1:be:3c:
                    e3:18:76:71:8a:de:65:ad:4a:df:48:9b:0c:ec:82:
                    1b:ad:19:f7:4e:61:b8:66:11:f8:2f:0d:7c:00:a3:
                    ce:31:25:44:9d:64:e1:03:b8:e6:d3:f1:55:dc:82:
                    c4:5d:99:7d:5f:f7:e4:05:f4:e5:33:73:6a:e5:db:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:87:E6:BD:7C:FA:CB:FC:8F:94:F3:46:A8:76:9F:4A:3C:AA:EE:BC
            X509v3 Authority Key Identifier:
                keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:9e:f2:c3:97:47:51:35:7b:dd:1b:17:a9:aa:42:79:a9:
         e6:78:c7:81:1c:23:12:d9:84:f7:08:d5:15:a3:97:70:91:e8:
         3f:ba:5e:4d:8b:ed:ff:55:70:82:ff:7f:e5:9a:54:3b:dc:55:
         3d:5d:b9:6a:08:38:31:a7:96:18:0d:5d:06:bd:ab:9f:dd:5e:
         82:ea:25:8c:e5:a1:04:84:20:2c:8c:5c:36:31:68:2e:b6:48:
         e1:ae:ca:39:2b:77:5c:30:9a:ee:f6:47:39:65:90:cc:73:ee:
         62:d5:bd:34:38:79:35:aa:34:8e:80:82:43:27:c3:c2:97:13:
         2e:7f:a4:f2:43:25:20:80:99:50:c1:f2:ed:09:cc:62:22:55:
         d3:90:6e:10:1f:8e:d9:d6:9f:ac:82:25:58:eb:9a:fe:c1:de:
         1b:12:a9:db:75:aa:d6:af:64:1b:f2:b4:41:91:ff:98:ae:7b:
         01:1f:8b:c6:46:73:56:f4:fb:53:78:ce:61:57:bd:b5:e3:27:
         5b:04:a0:16:b1:b4:c2:45:c4:58:ea:50:b2:68:f1:95:b5:bd:
         6d:6a:7f:93:7c:ca:44:4f:f8:ea:46:4f:5e:51:ee:1b:99:42:
         11:23:2e:8f:da:46:8e:2d:ab:34:ce:08:ad:5d:ae:ce:17:c9:
         c5:37:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:54:01 2026 by rpki-client