This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File:                     buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier:          UtXqp37uR16P9nxiLtZYbD4gX2LNFalM0NnLOwnhJDU=
Subject key identifier:   72:CF:86:A0:1F:EC:D8:6E:F4:D7:F6:38:CD:AC:EF:BB:02:76:DE:7C
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       019C427E2A0ADDAD0CB2CB2EA964ABF48EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:30 +0000
Files and hashes:         1: 7JIJlTfBX4PS77oE0Mx0OejSM24.roa (hash: fNa36vATsrsor3PYEeM7hTNfoNAesQKtpUagqEla5bc=)
                          2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: X2WuhL8YcQ0F5703FY16JXuPnI2b7iUxzRlvkLRj0pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:2a:0a:dd:ad:0c:b2:cb:2e:a9:64:ab:f4:8e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: Feb  9 13:01:30 2026 GMT
            Not After : Feb 10 13:01:30 2026 GMT
        Subject: CN=72cf86a01fecd86ef4d7f638cdacefbb0276de7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:cd:29:9e:21:70:ae:a6:ce:23:3a:43:e0:
                    b2:a0:a7:63:6d:ec:e3:92:8b:d3:c8:ad:3e:dc:72:
                    87:2a:f8:cc:6c:29:53:c1:f2:57:c7:1d:5a:ca:96:
                    7c:74:45:3b:8a:85:46:c0:b1:22:c9:19:8b:34:21:
                    00:e0:f5:18:8a:87:b4:12:80:2f:88:a1:f2:0a:b8:
                    0e:5f:ac:7c:45:d4:29:e8:1d:2a:0b:9b:e5:91:f6:
                    6d:8f:9e:fd:0c:21:da:44:9d:05:2b:9b:e2:97:26:
                    99:3d:24:90:24:05:db:8a:be:8a:ad:88:c7:9b:8a:
                    fa:55:85:79:b7:4c:29:7e:07:63:75:0d:a8:b3:bc:
                    75:54:e6:1a:c8:1f:73:ae:f5:88:08:ee:fa:c5:41:
                    19:50:71:f7:43:54:8e:fd:57:71:88:87:5e:ec:57:
                    52:3d:31:0a:b6:71:91:d4:3c:be:1b:cb:18:eb:e5:
                    bd:bf:65:80:73:7b:1d:c4:9c:da:89:02:18:6c:20:
                    33:dd:4f:f1:d4:25:b9:4d:cf:d6:37:11:d4:e7:b4:
                    54:ac:26:52:11:bc:91:99:21:d5:24:87:e6:61:24:
                    39:a8:11:cf:b5:be:37:97:06:f7:fb:f3:3c:c3:cd:
                    7c:f8:80:ed:e7:71:58:d3:d2:91:71:d9:c2:0e:c8:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:86:A0:1F:EC:D8:6E:F4:D7:F6:38:CD:AC:EF:BB:02:76:DE:7C
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:a0:5a:a9:c8:8c:76:de:b0:a5:64:4b:6c:98:ae:87:c3:
         b1:c2:e7:04:30:76:a8:80:99:13:8c:a1:d3:36:e6:b3:29:e1:
         45:0a:16:0c:92:b6:f3:b2:28:db:f2:11:eb:b2:0f:58:47:fd:
         00:5e:35:04:9f:04:77:84:53:5c:dc:6f:fa:19:b8:52:1b:94:
         fa:ab:fa:3c:8f:41:bd:00:ce:27:60:f9:90:6b:f2:30:55:ea:
         49:bd:a8:b8:ba:53:39:06:78:eb:57:99:81:85:80:a2:15:2e:
         6d:07:f0:fc:d7:9b:38:72:e6:8a:21:2f:9d:ce:01:7d:99:33:
         57:ac:0d:f1:47:c0:92:1c:78:df:68:1b:66:5a:43:e4:7e:77:
         46:63:1c:61:8c:29:0d:56:8f:f1:58:4a:34:b9:8c:a1:5e:81:
         26:5d:9c:d2:9a:b6:d5:e1:35:b3:fe:3a:f0:66:e7:5e:1f:dd:
         88:39:02:5c:1b:ad:fc:c4:ce:29:28:a5:d0:e9:af:de:2a:c2:
         22:58:b2:a6:f4:06:81:2e:61:1f:00:1f:a1:31:4c:ed:5a:22:
         4e:3a:ae:4c:92:be:f3:ea:b7:f5:ce:57:c3:5f:6d:95:67:bf:
         05:46:b9:07:51:4b:50:f4:36:37:59:a2:df:5f:0b:4b:4a:98:
         26:ee:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:36 2026 by rpki-client