This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File:                     bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier:          YyCp5dw34dn0lrz+lLiWzE8/u09oF3ljhu2xuliC1Is=
Subject key identifier:   C4:3A:5D:B0:2E:FD:C5:F1:EC:33:AD:57:50:D9:29:2D:6B:1E:A1:5D
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer:       /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial:       019C43595FACA7BA86BDC9D42BE9926B854E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:56 +0000
Files and hashes:         1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
                          2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: vU9/j6Woe291nTzdj63K/pOxIbZ9QwtahSipaRh/Xh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:5f:ac:a7:ba:86:bd:c9:d4:2b:e9:92:6b:85:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
        Validity
            Not Before: Feb  9 17:00:56 2026 GMT
            Not After : Feb 10 17:00:56 2026 GMT
        Subject: CN=c43a5db02efdc5f1ec33ad5750d9292d6b1ea15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:15:73:db:38:44:7e:75:8d:27:c3:d6:62:e3:
                    d2:09:b1:a2:63:ba:e2:b6:57:84:c8:e3:62:8a:2b:
                    1e:a1:56:ed:69:07:0e:d9:a5:24:c1:55:5b:ed:d0:
                    34:93:47:6e:a4:81:4c:fd:8e:09:f6:a6:55:4a:63:
                    52:38:59:c5:47:7d:6c:9e:f1:12:67:10:91:71:57:
                    de:98:1b:30:9b:76:d9:54:82:f4:c6:2f:f5:07:26:
                    ec:73:6d:0a:db:97:8e:69:64:57:bc:31:c0:2a:af:
                    61:5c:99:23:1d:61:58:22:f0:c0:07:db:16:a8:34:
                    e6:bb:4d:31:f3:11:7b:1e:9d:ab:db:ab:c9:e8:82:
                    ff:7d:a9:22:e3:f2:b0:91:72:e5:96:27:45:45:81:
                    df:d1:16:e1:70:f1:53:b9:98:93:cc:f3:04:f3:83:
                    bb:f2:ae:cd:6b:6c:b5:8f:c4:fc:fc:e8:f0:2b:d8:
                    82:67:0d:f0:75:41:ce:20:e2:de:eb:ba:dd:1b:1c:
                    8f:62:24:a0:44:b0:1f:9c:98:8c:63:23:d0:36:86:
                    43:41:f0:4b:5f:ef:f0:4e:a2:ab:f2:c2:6a:ac:be:
                    04:f7:2e:ca:93:6a:ad:af:9d:37:23:d1:50:cc:31:
                    b0:ed:e4:07:20:f4:6a:23:f6:24:e3:50:33:66:b2:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:5D:B0:2E:FD:C5:F1:EC:33:AD:57:50:D9:29:2D:6B:1E:A1:5D
            X509v3 Authority Key Identifier:
                keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:af:33:53:e3:35:c3:b5:f9:70:e2:55:36:bc:f5:f6:a3:
         20:9d:68:be:87:c8:f3:85:8b:2b:36:8a:5a:36:0e:35:60:8e:
         38:f4:9a:c1:56:5b:35:db:45:8c:f8:45:9d:53:bc:29:51:c4:
         de:4d:6d:72:f3:ca:54:fc:fb:11:e9:af:e2:ff:ea:89:6a:03:
         a9:c0:b4:a7:3a:46:97:d5:ab:2b:18:2f:7c:42:92:49:a6:99:
         27:ca:de:8d:93:14:95:ea:2e:db:2c:ea:dd:42:07:9e:c6:1c:
         e3:89:2c:69:95:c9:4d:f6:32:c9:74:d5:06:3b:ed:43:5a:73:
         b7:42:fd:b4:7d:04:d8:14:cd:8c:b3:1f:cb:99:38:aa:0a:67:
         c6:3b:38:d5:20:ff:89:78:fe:c4:d1:0c:3c:84:2e:f2:68:60:
         b4:50:a0:87:ec:f7:16:8a:73:86:a1:f1:4c:f7:8b:be:84:06:
         c3:f8:91:c3:6b:1e:4e:b5:69:42:9f:66:4a:e4:fb:de:08:67:
         05:a5:65:1a:b2:3d:de:1f:ea:6f:50:4a:da:f1:31:eb:f1:85:
         20:23:23:c5:59:d9:91:e6:0b:da:7d:04:a8:c3:84:32:bf:95:
         51:54:1c:45:8c:4c:f4:5a:83:db:db:1c:8a:43:c5:7e:58:19:
         a1:bf:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:26 2026 by rpki-client