This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          Fio5tU2jKncFIJkdV0l+ot4CR0+ilA44EHUKUwNwRIA=
Subject key identifier:   7B:E4:8A:BC:75:65:EF:E2:47:B0:5F:C2:57:34:2B:61:AB:E4:4B:DC
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       019C42466EE27F19022E38FC568828258748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          14EF
Signing time:             Mon 09 Feb 2026 12:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:37 +0000
Files and hashes:         1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: ExxJo4HSvcYDU64XfoaSQUrTPUtiIt1Dwunlfwf4ikE=)
                          2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6e:e2:7f:19:02:2e:38:fc:56:88:28:25:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Feb  9 12:00:37 2026 GMT
            Not After : Feb 10 12:00:37 2026 GMT
        Subject: CN=7be48abc7565efe247b05fc257342b61abe44bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3b:00:e9:a6:68:c9:0b:f5:3a:49:12:9e:e6:
                    1d:0e:d8:ae:7a:b4:3f:9e:69:32:7a:60:c5:0d:92:
                    9d:66:41:53:fe:ec:ef:70:1b:54:46:1d:83:d4:f2:
                    87:a3:a2:6e:51:67:2d:a2:be:30:52:90:9f:45:84:
                    c1:72:2c:c9:8a:29:82:43:f6:51:0e:84:15:f0:4c:
                    66:9e:74:d4:ba:cd:c8:d5:c5:fd:21:8c:a6:87:0e:
                    54:98:ab:bd:5c:7d:e1:d2:b1:04:06:27:e7:f1:1f:
                    29:c1:00:3e:fd:da:fe:09:36:b3:23:a4:ee:94:91:
                    20:05:75:1e:68:8e:7c:0f:ea:6a:1f:7f:32:81:4e:
                    7d:c3:44:a0:b3:73:36:8d:49:a9:66:1f:b2:ab:7d:
                    57:74:45:4f:f8:b0:00:a2:2f:54:7e:6f:24:63:c4:
                    d7:50:34:64:18:d5:8d:f0:7b:07:73:4b:fc:2f:c6:
                    63:dc:05:fa:c1:66:f3:73:e1:5c:bb:38:f5:13:0d:
                    f2:fe:5e:73:d6:f7:2a:12:c9:4d:bb:44:17:a3:28:
                    62:32:c7:f1:11:24:59:1a:b6:c8:9a:4b:c6:2b:81:
                    56:06:54:82:6c:21:98:e4:48:98:94:1b:8c:e9:c3:
                    33:5d:ed:bf:58:ad:3f:51:1b:3b:70:72:d5:f1:a3:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:8A:BC:75:65:EF:E2:47:B0:5F:C2:57:34:2B:61:AB:E4:4B:DC
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:31:00:8c:bb:30:00:a2:33:03:29:1a:4a:3f:61:59:b8:
         6e:84:00:49:ee:34:7f:c5:c9:58:dd:7e:2b:a1:d1:d1:48:2d:
         33:89:c9:61:17:57:9c:99:48:79:73:c9:9f:80:97:dd:33:e8:
         6b:77:2c:9c:9b:54:26:60:57:25:7f:ac:dd:d7:8f:e5:2d:17:
         14:6b:ea:51:2b:2a:a8:ac:be:43:66:ca:ea:e9:f8:76:13:be:
         c5:2b:9d:c0:85:af:b8:95:35:05:9b:10:41:06:5c:2c:75:0f:
         b8:70:5f:91:1b:b3:dd:a0:2d:3f:c0:7e:90:85:0e:43:96:a9:
         9b:cb:14:cd:46:54:80:92:a7:4d:db:6f:3b:c1:c9:62:b7:b5:
         90:de:44:78:01:5e:85:95:b9:51:32:50:f0:e2:59:2c:00:1a:
         ae:8c:df:0b:8d:07:7f:54:83:4b:cc:0a:f8:cd:42:f1:60:ac:
         3e:ec:2a:52:b5:48:34:7d:45:44:bf:a3:29:09:21:ff:fe:00:
         00:d8:9a:4b:a1:dd:57:dd:d5:f3:44:3c:97:73:b8:d0:0b:06:
         1f:88:df:17:12:9d:bc:de:ef:a0:f3:f8:f0:83:8a:cf:78:b8:
         b5:6d:0f:d0:8a:9b:74:d8:79:18:99:54:cc:aa:c7:f7:5d:cd:
         33:b5:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:22 2026 by rpki-client