This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File:                     boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier:          bpxzPFsgKQXCakxjcpDikAXEJUHXopitHakLfvPfzoI=
Subject key identifier:   B8:5A:11:D3:C1:C2:2C:34:C3:89:45:04:18:10:25:C5:C8:1C:94:DD
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer:       /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial:       019C43906DBDD83F1AD3C1A68D4C63325053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:04 +0000
Files and hashes:         1: KmFH08iC5J-95oBTnRmMORdBhYQ.roa (hash: jxzbdMpWjw66b8Fw1Ba2LpATegGadHxvfHdlKL67I8A=)
                          2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: 07Cfs71RGq46ti5y2q1ZRhGW1RAOfbYolwdiW6nC8Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:6d:bd:d8:3f:1a:d3:c1:a6:8d:4c:63:32:50:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
        Validity
            Not Before: Feb  9 18:01:04 2026 GMT
            Not After : Feb 10 18:01:04 2026 GMT
        Subject: CN=b85a11d3c1c22c34c3894504181025c5c81c94dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:c3:20:e1:88:c1:89:e1:4c:e1:93:3a:02:
                    ec:06:13:3e:68:f6:73:dc:7a:d5:f0:f0:1e:a0:7f:
                    26:46:68:cd:6a:89:c6:d0:8e:31:d3:fb:b5:74:f1:
                    af:fc:2f:2e:2d:1b:a7:71:da:98:b1:56:20:42:e3:
                    d6:b1:7f:97:17:f3:e4:a0:3c:dd:e4:87:78:ca:1b:
                    a3:0a:63:2b:8d:dc:75:9d:06:24:06:29:2f:53:b4:
                    22:4b:f3:4f:cf:ce:d8:14:fb:84:3f:e6:6f:00:c5:
                    a1:7e:a2:c8:19:f6:c6:14:cf:eb:aa:85:7a:65:ad:
                    13:c0:bb:b7:7e:86:4c:4d:6d:a4:33:1b:29:73:39:
                    de:b9:25:06:db:23:d2:bf:bf:ec:85:16:82:f4:e1:
                    ac:0d:20:2a:d3:5d:55:cc:48:41:0c:43:23:b1:94:
                    39:69:1c:3d:2c:c1:0e:9e:86:c1:5e:6e:6c:4c:b2:
                    c0:40:bc:b2:1c:b0:cd:be:34:6f:15:19:70:b1:db:
                    5c:3c:9a:ac:7a:9f:e7:a6:ce:b5:c4:b1:16:40:18:
                    03:dc:bb:f3:f7:d8:7a:00:a2:2d:c2:84:25:2d:71:
                    78:ef:e8:c9:22:44:35:2f:df:32:f7:91:41:c1:53:
                    86:7e:d8:6b:b5:35:88:98:b3:7d:a9:f1:5a:32:19:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5A:11:D3:C1:C2:2C:34:C3:89:45:04:18:10:25:C5:C8:1C:94:DD
            X509v3 Authority Key Identifier:
                keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ce:36:4d:5b:9e:61:84:31:43:4b:31:8a:40:6b:4c:9b:a1:
         cf:72:cb:4e:a9:ea:6c:5c:ef:fd:90:18:d6:89:fc:e1:ef:bb:
         0c:26:32:14:43:3a:bd:9e:0e:03:ee:3a:fb:a1:8d:8d:3c:49:
         c0:dd:5d:1e:08:34:c5:3f:22:d2:a9:3d:8e:31:cb:27:74:bf:
         9f:87:8c:31:f3:7e:af:91:8f:18:11:89:31:82:3c:d4:e9:87:
         8f:dd:a7:15:1d:21:af:e6:ac:1f:7e:dc:f6:17:ac:84:04:e0:
         9b:04:6b:7d:19:68:cd:dd:05:35:de:d6:a4:ae:08:67:8b:64:
         ce:6c:a9:97:7c:0a:14:67:9f:84:4b:4e:53:bc:f0:e4:81:26:
         a3:01:12:0e:79:62:12:f1:d7:0d:35:ac:bd:56:d5:62:49:6a:
         22:b4:63:5b:00:77:c2:69:9e:c8:0b:9a:a5:10:5e:67:82:71:
         87:76:54:29:6c:47:37:e4:1a:0f:7f:bd:d9:d2:74:0d:e7:a7:
         47:2c:96:06:80:ce:34:16:bc:fe:00:12:a9:85:d2:c5:a2:00:
         ec:ef:af:3c:84:fd:46:2b:00:7f:c8:72:88:9a:0f:bc:09:a0:
         79:8f:b7:b9:c7:a1:41:96:f6:7a:9e:74:05:28:bd:15:39:bd:
         fa:b7:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:31 2026 by rpki-client