This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File:                     BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier:          bg5TfLynjRMHSvRQfKpFI8AUkjdoeqzFBE5618amdvs=
Subject key identifier:   24:2B:CE:72:17:E5:CA:E7:AE:5A:9B:70:05:76:F7:7A:6B:33:25:F5
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer:       /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial:       019C420F5C7E2545B5925E667749471814F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number:          07AE
Signing time:             Mon 09 Feb 2026 11:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:28 +0000
Files and hashes:         1: 5TJtAqULg4ja_LAfVChOHrVcRIc.roa (hash: EAVBfXjuLVfxp6BBuit9OSxy31gzavG/9emVaX+/nqM=)
                          2: A3bEVCjxQvPLMxQoQRFrfr3LYCE.roa (hash: AV5Q/UsHYUl+wYyKfubmLjYkNKAlrWiQN+uv4NMNSSI=)
                          3: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: iayeXzy1GtPAUJJChQ8mofFH2APUcqlbR5AO/Z/AO4o=)
                          4: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (hash: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:5c:7e:25:45:b5:92:5e:66:77:49:47:18:14:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
        Validity
            Not Before: Feb  9 11:00:28 2026 GMT
            Not After : Feb 10 11:00:28 2026 GMT
        Subject: CN=242bce7217e5cae7ae5a9b700576f77a6b3325f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:c9:79:25:26:f5:52:88:2a:fb:16:be:13:
                    dd:0c:b8:1c:de:7e:5f:d0:a0:a0:8d:b9:7b:fe:8f:
                    9d:11:be:b8:b0:fa:7a:e1:3b:98:ae:04:ec:f0:a9:
                    fc:46:eb:87:db:bd:cb:b3:7b:88:aa:20:ab:29:6c:
                    f7:f0:e6:ef:46:dd:d1:0f:49:10:48:59:4e:c4:5a:
                    97:1b:1e:a0:97:ca:28:7d:09:f8:58:f1:ed:fc:93:
                    47:bb:20:5d:ce:42:03:1c:d1:1d:95:77:2e:7d:9b:
                    8c:e2:18:90:b9:36:13:80:c2:93:b3:a9:c0:44:0a:
                    e0:60:f4:5f:ca:b4:0a:2a:c6:74:b1:8e:6e:61:e2:
                    60:52:6f:7a:ba:2c:ca:cb:d3:a0:fb:67:19:f9:cc:
                    d0:98:30:45:54:8f:bb:55:1e:34:05:a3:38:78:f3:
                    5b:e6:66:78:12:bf:b7:4e:5c:c6:e9:13:16:22:56:
                    8a:d4:7b:6f:93:b8:80:40:c0:18:2d:d5:a5:56:9a:
                    7e:a9:f9:55:9f:df:e7:97:ab:5c:0a:a5:2f:15:72:
                    0b:8f:45:49:f8:3c:11:05:0f:70:47:8d:e2:5c:78:
                    c7:48:ba:42:6e:fa:56:c8:64:e8:59:9f:53:c7:da:
                    47:43:29:b3:01:2d:a3:71:40:41:a4:63:90:ed:5e:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:CE:72:17:E5:CA:E7:AE:5A:9B:70:05:76:F7:7A:6B:33:25:F5
            X509v3 Authority Key Identifier:
                keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:39:c8:cc:2d:f0:6c:c1:e1:7d:c7:90:fc:35:5d:33:37:
         f7:70:8b:d4:f4:77:87:ba:e9:44:e5:ef:2d:b4:6a:8d:5d:2d:
         1a:ef:8f:85:c6:e5:30:e2:65:91:fb:10:ca:65:99:a6:ab:3f:
         60:d2:72:29:d6:61:0c:b9:cc:32:c4:30:d3:df:60:73:5a:72:
         73:75:c7:ea:65:54:2b:a8:2e:99:05:96:63:91:2c:fe:b6:28:
         19:49:ca:2a:59:f9:5f:a0:72:b0:41:3a:50:c4:dc:b9:88:0e:
         d6:a7:ab:15:31:c3:f6:7e:81:c4:fa:69:93:34:a2:37:c1:3b:
         12:08:cd:90:16:30:d6:91:fa:41:fb:04:41:db:bd:4f:ed:46:
         0b:62:5f:d0:e1:2e:8c:bf:3d:ce:94:17:9f:91:17:ea:36:fa:
         67:9f:5c:a7:66:96:1e:75:d4:c0:74:90:dd:87:ef:7b:77:f7:
         20:ad:48:c8:f4:dd:fa:73:f8:09:0b:74:84:82:6a:71:dd:1d:
         95:7a:b7:b9:5a:5f:a5:bf:c2:6c:a9:a0:57:0f:96:3e:2c:49:
         bc:69:c7:1c:04:88:a5:19:3f:cc:9d:ae:6f:60:f8:cd:9b:fb:
         46:1b:a9:ce:77:b4:18:87:08:43:49:64:cb:fd:cb:10:a2:db:
         f9:80:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:20 2026 by rpki-client