This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File:                     bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier:          cOSe4OsdeBpJvtYYPVbvgXGqiSJEu+YX2ZWF7Sm2wUc=
Subject key identifier:   E2:96:E5:02:58:60:BB:71:3A:69:37:E3:73:B3:02:6C:AD:21:3A:CB
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer:       /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial:       019C43909997EB92A0E772A5F6D122D8620B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:01:15 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:15 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:15 +0000
Files and hashes:         1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
                          2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: GauuTEvvRv1VT1FmIKbYbOmrUERRDvBMgYgIJa2nTK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:99:97:eb:92:a0:e7:72:a5:f6:d1:22:d8:62:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
        Validity
            Not Before: Feb  9 18:01:15 2026 GMT
            Not After : Feb 10 18:01:15 2026 GMT
        Subject: CN=e296e5025860bb713a6937e373b3026cad213acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:29:ba:c9:42:ba:92:f3:e5:0e:69:96:3b:
                    07:53:82:00:5a:a3:3f:fd:c9:33:c4:87:cf:7f:04:
                    04:d0:c4:5b:f4:d1:e4:a2:ef:ec:c9:6c:31:c6:e4:
                    23:68:7f:6b:e4:ef:85:59:55:e3:54:9e:3a:1a:5b:
                    22:82:0b:cc:62:e8:fb:76:e5:89:6d:3d:ef:63:e6:
                    55:12:ce:c2:97:c5:6d:f3:8e:70:0c:06:81:50:0f:
                    4e:8f:dc:c1:4b:a1:fd:2f:54:5a:ed:53:2a:a9:0a:
                    1e:d5:b5:cf:87:d3:57:93:27:2d:86:3e:b8:c5:10:
                    8e:cc:1b:43:1b:18:2b:61:81:6a:51:3c:58:e3:30:
                    b5:83:71:3a:35:55:e5:fb:9d:68:94:5d:1e:b5:02:
                    c9:73:9f:c2:59:22:c9:e5:59:4b:d3:45:c2:28:67:
                    1c:d5:58:23:e5:82:fd:78:41:33:86:80:48:a2:05:
                    6b:b4:ba:ca:ae:77:d4:17:ef:53:ae:f7:c9:59:aa:
                    9c:0f:a7:4b:75:45:33:c1:37:5f:52:66:c4:3a:93:
                    23:be:48:27:de:4b:a0:d4:02:e5:df:7b:e0:f1:5a:
                    44:0d:88:eb:49:78:f9:f3:f2:e3:5a:90:97:29:7b:
                    5e:bb:26:48:9e:91:3f:c2:c0:fe:43:f7:46:ad:11:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:E5:02:58:60:BB:71:3A:69:37:E3:73:B3:02:6C:AD:21:3A:CB
            X509v3 Authority Key Identifier:
                keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:45:66:c7:63:f4:df:f5:d7:3f:84:29:67:b7:12:92:e2:6c:
         00:97:80:5d:d4:cc:e7:5f:1f:d4:aa:6a:fb:57:1d:62:27:6c:
         fd:e3:6f:c7:37:3b:2c:5e:61:fb:15:7b:84:8b:93:52:f1:94:
         9b:c1:64:12:04:7e:59:6b:59:12:64:7a:a7:e2:ca:c3:6b:4d:
         00:74:15:9d:d3:66:c2:22:31:fc:3e:76:54:ec:27:94:51:6a:
         be:26:dd:70:f0:d2:e9:ea:ed:fd:f3:60:ff:31:24:25:78:56:
         a7:35:3d:9b:88:09:84:8e:f6:78:73:b3:1a:ab:84:92:f6:51:
         a8:65:07:34:b6:ef:a1:31:fa:63:81:82:a5:b1:15:a1:78:8f:
         e3:d3:a6:e5:db:72:94:2f:2b:9f:34:7f:7b:99:39:ba:d3:94:
         cc:d7:15:39:72:48:ee:c7:7b:92:bf:49:3c:c9:fb:5b:63:0b:
         61:dd:08:5a:fc:0d:2a:aa:01:2b:15:19:21:08:fc:4c:8a:5f:
         17:68:ce:53:71:be:03:6c:ab:a5:37:9d:12:82:0a:8b:c3:33:
         76:37:86:d8:83:0e:0e:43:ad:0f:a8:51:59:26:d1:8e:cc:35:
         3b:93:9e:ff:30:ef:17:da:b9:b4:9c:af:4e:59:f3:02:3a:27:
         6c:50:cf:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkJmX65Kg53Kl9tEi2GILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjNjZTdiMGMxMDA2OGZiYzQ0YzAyMTk0M2UzMzkwMTNm
MmFlZTAwHhcNMjYwMjA5MTgwMTE1WhcNMjYwMjEwMTgwMTE1WjAzMTEwLwYDVQQD
EyhlMjk2ZTUwMjU4NjBiYjcxM2E2OTM3ZTM3M2IzMDI2Y2FkMjEzYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTkpuslCupLz5Q5pljsHU4IAWqM/
/ckzxIfPfwQE0MRb9NHkou/syWwxxuQjaH9r5O+FWVXjVJ46GlsiggvMYuj7duWJ
bT3vY+ZVEs7Cl8Vt845wDAaBUA9Oj9zBS6H9L1Ra7VMqqQoe1bXPh9NXkycthj64
xRCOzBtDGxgrYYFqUTxY4zC1g3E6NVXl+51olF0etQLJc5/CWSLJ5VlL00XCKGcc
1Vgj5YL9eEEzhoBIogVrtLrKrnfUF+9TrvfJWaqcD6dLdUUzwTdfUmbEOpMjvkgn
3kug1ALl33vg8VpEDYjrSXj58/LjWpCXKXteuyZInpE/wsD+Q/dGrREnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKW5QJYYLtxOmk343OzAmytITrLMB8GA1UdIwQY
MBaAFG0jznsMEAaPvETAIZQ+M5AT8q7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYt
NDBjNWViYzZmNzM2LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYtNDBjNWViYzZmNzM2
LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUVmx2P0
3/XXP4QpZ7cSkuJsAJeAXdTM518f1Kpq+1cdYids/eNvxzc7LF5h+xV7hIuTUvGU
m8FkEgR+WWtZEmR6p+LKw2tNAHQVndNmwiIx/D52VOwnlFFqvibdcPDS6ert/fNg
/zEkJXhWpzU9m4gJhI72eHOzGquEkvZRqGUHNLbvoTH6Y4GCpbEVoXiP49Om5dty
lC8rnzR/e5k5utOUzNcVOXJI7sd7kr9JPMn7W2MLYd0IWvwNKqoBKxUZIQj8TIpf
F2jOU3G+A2yrpTedEoIKi8MzdjeG2IMODkOtD6hRWSbRjsw1O5Oe/zDvF9q5tJyv
TlnzAjonbFDPaw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:54 2026 by rpki-client