This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          RukWDyOMrIkXS5m+IiB+bKBp476qBpnpOWsrqGJS9DQ=
Subject key identifier:   7E:78:27:73:D5:2D:42:DD:5E:71:9C:18:15:00:D4:B7:F4:70:C6:E0
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       019C42EB51CCAC08D706D78839C340E87D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          1025
Signing time:             Mon 09 Feb 2026 15:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:44 +0000
Files and hashes:         1: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: iG51J0BgAXtK3wyvWSRwQTAKj/kSZRGM5VW+IKaWysM=)
                          2: iFx733veg3ipe2CPmZh-NgC00sw.roa (hash: ARVPN7QhpTy4ny+iZlR3c2ozBbWmapoyIfsnLbx+goA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:51:cc:ac:08:d7:06:d7:88:39:c3:40:e8:7d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Feb  9 15:00:44 2026 GMT
            Not After : Feb 10 15:00:44 2026 GMT
        Subject: CN=7e782773d52d42dd5e719c181500d4b7f470c6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c1:79:fb:a6:1a:18:eb:09:d3:e7:c5:43:60:
                    6c:5e:e0:a3:35:c0:e1:ae:13:f8:6a:3b:de:df:5f:
                    3d:4d:1a:57:c4:4e:1a:01:7b:69:2f:87:e3:49:50:
                    83:d7:ec:e0:45:65:1a:15:25:df:53:ae:8d:b6:d2:
                    f8:97:58:c2:61:c3:1f:83:d9:09:8f:cd:3f:b2:59:
                    0e:19:fb:6e:0a:e1:a3:8e:d9:a5:22:5d:e7:73:b5:
                    63:6c:28:1b:92:ea:85:fa:ec:5f:3c:15:27:7f:31:
                    5b:76:b6:52:b7:8a:7d:06:b3:40:34:4d:81:43:02:
                    fc:1a:4b:9b:71:64:ef:80:6f:40:6c:28:e4:8f:b6:
                    3c:e6:6e:24:e6:8e:3d:ff:9c:14:74:75:ea:f5:95:
                    2e:26:c5:8b:0d:65:51:83:27:f4:ba:e9:2b:1d:59:
                    de:77:51:cd:12:5e:80:c2:c2:e9:a4:f1:19:8d:d5:
                    8b:1a:49:b3:33:6f:26:a6:d7:e1:fa:d7:1e:17:17:
                    8e:34:6c:85:c8:f3:bd:f8:48:da:08:d5:e7:7a:48:
                    eb:ad:6d:db:9e:99:e8:5f:72:08:89:b5:ba:7c:17:
                    8b:96:b7:5c:d7:2d:f6:95:62:da:71:c6:ba:8b:24:
                    d2:a2:d0:46:66:57:8b:6f:ee:a7:8f:12:21:f9:05:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:78:27:73:D5:2D:42:DD:5E:71:9C:18:15:00:D4:B7:F4:70:C6:E0
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:94:84:14:8d:f1:4f:1a:bb:97:88:5f:b2:4f:9e:27:0f:96:
         48:b3:f4:3f:23:6f:9b:ad:b8:0d:a1:04:d3:64:3f:9e:57:83:
         17:bb:ad:fe:be:21:d9:53:c3:96:de:12:ca:f6:cf:81:96:3e:
         4d:be:9c:60:23:ab:ab:a7:a0:1c:05:e1:64:8f:79:84:53:ca:
         2b:d1:56:74:f0:0c:30:1b:fc:b4:b6:1c:7a:80:3f:b4:3b:66:
         0d:7c:84:57:3c:1a:37:5b:62:b1:31:02:67:e4:81:a0:0e:42:
         00:4b:df:8e:d7:e2:7b:75:e6:20:4a:a8:9c:66:a3:4f:a3:14:
         1e:6e:86:94:05:42:1e:b5:60:cf:1c:50:4f:60:3d:ea:6a:66:
         8a:02:b2:c4:91:b4:bb:4b:be:cf:b2:1d:32:42:b8:fb:ac:44:
         aa:90:98:3a:68:fb:37:82:07:20:10:34:01:52:0f:96:d6:a5:
         fa:f6:e0:70:b2:f3:44:1a:88:55:4e:bb:a0:c2:d2:9d:eb:7d:
         21:b6:42:1b:50:78:f1:17:1b:25:41:40:d1:a5:6d:90:6a:9d:
         be:6d:f8:87:84:45:c8:b5:69:c7:f2:69:30:b0:ff:08:78:37:
         ba:70:60:bf:1f:9a:0b:ad:b3:3a:3e:da:36:9a:bc:20:8e:16:
         9b:08:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:21 2026 by rpki-client