This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File:                     BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier:          HMBNTiL7Vez7OIBTNN7C3g52scZRtiYS3Ua8rH+0P1o=
Subject key identifier:   3E:29:5F:AC:57:0E:D0:66:04:62:C4:A5:AA:0E:E6:3D:B8:8B:0F:80
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer:       /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial:       019C438FF123437EECED59489876B71E4C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:32 +0000
Files and hashes:         1: 0k6yeX0L5XdNUvHFP70s6xMMn5M.roa (hash: WcJmVDT/EJf9CPgLP7/H/uUbqnwpeSXGEJKY3KaRY/o=)
                          2: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: eozKXhIpj0hWVsQP4BAS6WF4pHnhMUyNSKbbjLaPjb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:f1:23:43:7e:ec:ed:59:48:98:76:b7:1e:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
        Validity
            Not Before: Feb  9 18:00:32 2026 GMT
            Not After : Feb 10 18:00:32 2026 GMT
        Subject: CN=3e295fac570ed0660462c4a5aa0ee63db88b0f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:d6:b2:c0:cc:5f:ab:3c:64:6b:97:b6:0a:
                    73:e3:38:21:46:0d:0c:0b:41:9b:9e:63:ab:30:ea:
                    7d:76:89:12:de:9b:34:db:a9:62:79:f3:35:91:e9:
                    a8:1c:7d:35:9a:06:31:1e:f4:44:f0:11:90:30:3a:
                    de:1b:96:94:66:3b:e8:e8:92:70:cf:f9:36:11:e7:
                    68:12:25:ff:2b:70:3b:4f:3c:8c:37:c3:af:9b:dc:
                    95:87:c7:17:11:c8:c4:92:0a:84:89:92:f1:2d:98:
                    62:0d:37:b5:e8:d1:57:cc:95:db:73:9d:cb:0b:a9:
                    b6:f3:90:b9:38:7e:a8:be:ad:01:6a:ff:3a:d0:ce:
                    71:5b:46:88:7c:e1:02:f7:4d:a2:00:f2:06:04:6d:
                    6f:34:d6:04:6d:84:2f:92:b3:38:27:69:62:89:a3:
                    18:8b:33:98:6e:e4:f4:0d:9b:4e:11:4d:b8:6e:9f:
                    a7:4c:bc:4f:bb:e0:a1:0f:af:8a:11:2f:fb:ae:2b:
                    7d:2b:12:0f:bd:e9:76:c3:02:3b:d2:67:3b:83:6f:
                    0c:7b:66:c6:38:82:b1:2f:a8:78:6f:22:d6:72:7d:
                    7c:4f:22:9b:50:ef:02:e5:40:0f:ad:df:46:7d:d7:
                    d7:76:02:70:fa:67:08:42:b5:44:5f:f4:2e:d1:2e:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:29:5F:AC:57:0E:D0:66:04:62:C4:A5:AA:0E:E6:3D:B8:8B:0F:80
            X509v3 Authority Key Identifier:
                keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:cc:b8:ad:48:a0:cf:ca:12:1f:0e:ca:c0:dd:6c:29:a8:
         82:b2:b4:01:10:83:4b:78:83:b4:f7:25:b6:0c:75:06:62:47:
         af:73:b3:80:cb:94:1f:66:3b:2e:eb:f1:fe:6c:95:8a:bd:f0:
         cf:c7:7e:54:45:62:64:c5:5d:5e:89:7a:f4:51:ad:c2:e9:8c:
         6e:9b:4f:67:5a:a1:9a:c4:f8:f3:85:12:b1:6f:6c:a2:b9:21:
         4e:c9:b1:32:6c:a3:d4:92:73:2c:5e:fa:2b:6b:66:1a:6a:4b:
         9b:9d:2e:1c:1f:4a:d9:1e:05:ea:d3:af:31:fa:b0:53:f1:50:
         3a:95:13:55:5f:6d:9f:db:0d:c1:0f:9c:8e:bf:7f:1e:78:21:
         5c:29:67:5b:f2:da:67:09:21:2d:9a:a5:16:b9:f8:cb:ed:db:
         8f:e4:11:00:cd:7b:2f:73:82:5d:c3:69:48:3a:c0:db:e4:83:
         7e:68:79:eb:a4:20:0e:83:67:55:fc:6d:c9:f9:c1:51:b2:39:
         ad:a3:ba:0e:ba:09:a2:c7:90:22:90:b4:2e:26:46:b2:f1:ee:
         3c:33:39:82:0f:63:dc:f2:75:00:af:d1:35:84:94:f2:f1:6a:
         02:2c:74:ae:f7:eb:95:04:a5:3d:8e:47:db:72:42:e6:54:45:
         27:c2:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:29 2026 by rpki-client