This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          Z7nQ4olEr/oOiMsRb1jU4QaLeM8+A8kwgd+19F4qMVk=
Subject key identifier:   7F:82:C7:7C:FA:48:AF:59:1F:F1:8A:9C:B2:B4:C2:D2:FB:6D:4C:DC
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       019C44DA57039AA1D65EB1CC0D8B00D63F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0503
Signing time:             Tue 10 Feb 2026 00:01:25 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:25 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:25 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: x69/Q/UXzvgfnWUB9vDCWbenKR+ujPZKdLegGHk0OHM=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:57:03:9a:a1:d6:5e:b1:cc:0d:8b:00:d6:3f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Feb 10 00:01:25 2026 GMT
            Not After : Feb 11 00:01:25 2026 GMT
        Subject: CN=7f82c77cfa48af591ff18a9cb2b4c2d2fb6d4cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:30:d0:db:b3:62:4a:cc:ad:40:f5:26:36:
                    e9:a0:1b:55:4f:92:77:56:a4:05:4e:41:3f:9f:fe:
                    e3:78:0c:53:0c:6b:a5:49:3f:e3:df:8b:a4:46:b2:
                    df:6a:69:6f:30:18:a3:f9:c4:0c:a9:76:1d:42:b0:
                    32:1d:f0:aa:21:a5:cf:51:af:af:aa:08:ab:02:8a:
                    aa:36:4d:12:b8:1d:3c:40:21:f6:45:21:97:17:b8:
                    ba:3d:ed:29:95:0a:39:b4:ad:29:a9:86:da:5b:17:
                    22:b7:a0:db:5f:b3:4b:fa:ad:fc:ac:64:83:44:ee:
                    ff:42:31:69:ac:bb:b2:d1:09:89:b7:74:7d:51:89:
                    f7:51:6d:42:3a:b4:47:fc:df:7d:a9:e9:87:4a:21:
                    71:ef:ea:9f:4a:d8:3d:7d:e3:9f:00:ea:f8:cb:ff:
                    3b:d2:1d:12:d6:64:00:a8:26:09:41:99:27:e1:a1:
                    53:2e:d5:4f:4b:10:00:6a:45:36:f1:2d:19:78:1d:
                    a8:5f:6c:51:0a:42:4c:8b:78:57:15:ef:29:3b:a9:
                    7d:cf:bc:50:66:c2:d5:d1:5f:f6:6a:40:cc:db:b1:
                    f7:f5:f9:1e:78:fe:ea:07:d6:a9:f5:dc:c9:f1:66:
                    73:94:4f:2d:99:17:12:cc:cb:a5:f0:95:ba:33:de:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:C7:7C:FA:48:AF:59:1F:F1:8A:9C:B2:B4:C2:D2:FB:6D:4C:DC
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:36:ad:f4:07:33:a7:10:41:5f:9c:b2:c6:e6:e9:85:c9:43:
         b3:81:91:f9:61:0e:4c:c4:d2:f3:d4:eb:73:b2:b6:f4:4f:82:
         69:de:80:cb:e2:b5:3d:13:c9:cb:21:4d:7b:87:59:87:71:f0:
         fa:97:da:bc:01:e2:c7:44:3d:13:b4:a7:98:29:f4:2c:b3:db:
         6c:71:cf:70:ab:6e:22:d9:be:f7:fc:66:46:3e:cd:71:0a:5d:
         1d:17:39:6f:11:77:a3:c2:4a:20:6f:92:c5:16:d7:70:4b:95:
         68:d5:1e:a1:c3:98:3a:c8:cc:89:34:a8:f0:8d:88:82:a2:b2:
         dd:e7:76:a4:bf:af:69:c3:a8:ca:16:47:7d:bc:33:9a:6b:6d:
         7b:4a:c0:ea:ef:da:c6:6a:2a:15:6a:61:6c:99:b3:bc:41:9f:
         1a:aa:d3:18:3e:db:06:9f:da:f7:04:1c:70:dd:95:06:ff:6c:
         c7:9c:25:11:bf:c4:d2:90:10:e2:1e:b3:a7:aa:08:29:00:c5:
         6b:02:33:1a:91:b4:91:d5:38:1c:f6:af:ac:03:39:b5:1d:18:
         8d:88:3e:fb:d4:2c:b3:36:f2:f1:0e:53:2a:4c:16:e5:36:6f:
         f6:ba:30:a3:54:a5:ff:2e:6e:a6:ae:16:8b:2c:e4:6c:93:97:
         22:e8:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:41:17 2026 by rpki-client