This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File:                     bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier:          wqmot9jN5eprmFBtjqhZwialWtnKibzhJkRi2a05S+I=
Subject key identifier:   AF:25:73:9B:83:8B:10:74:3D:98:18:CE:94:50:9A:51:AA:BF:BC:D0
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer:       /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial:       019C420F4693B91BB8F6F0600516203F0475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 11:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:23 +0000
Files and hashes:         1: YZsSqZ83PZHqITH4YFpFHp-CbNM.roa (hash: QbeDQPWAdsSWd1GvVVV8Ck8/JfIxsYeUNlUaYQgvu98=)
                          2: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: sEpI6WjZWi5XoUGpNQKawfV8OlVWQSynXJXMZ2GS6Ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:46:93:b9:1b:b8:f6:f0:60:05:16:20:3f:04:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
        Validity
            Not Before: Feb  9 11:00:23 2026 GMT
            Not After : Feb 10 11:00:23 2026 GMT
        Subject: CN=af25739b838b10743d9818ce94509a51aabfbcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:dd:8b:da:09:f6:c5:a7:a6:e0:83:77:f2:
                    60:5a:1e:02:20:7a:48:9a:dd:5d:f7:ea:bb:27:dc:
                    58:d1:32:50:6d:cc:4a:ed:f5:9f:ca:11:86:9e:3c:
                    5a:ba:e1:65:65:7b:1d:7c:e4:38:3b:66:ca:1a:ab:
                    76:90:5e:65:2c:24:43:ab:f4:3c:59:5d:d9:d2:1f:
                    83:f7:db:e5:c2:19:2c:76:7b:0b:0e:29:95:d4:4e:
                    07:a3:bf:9d:99:e1:a2:82:81:64:03:9c:8f:3d:12:
                    ae:68:45:d0:e9:e2:2e:db:86:40:a8:b6:ee:d6:1d:
                    1b:4c:0c:d0:b1:80:ce:cd:d3:b8:3c:44:ed:8a:ed:
                    ae:f5:9d:fd:dc:98:23:19:72:d2:ac:57:1c:60:a4:
                    78:88:51:f7:54:83:cb:75:93:53:b3:f5:ff:ec:d4:
                    7b:09:c4:b7:7f:f7:29:43:fd:e8:e8:7c:8e:5d:35:
                    3e:5e:74:75:49:c9:d3:db:40:35:12:9b:52:be:a8:
                    0f:a6:21:5d:55:1e:5a:20:e5:4d:ca:5f:41:8f:b5:
                    4b:31:66:95:50:58:9e:a0:2d:fc:f8:c7:f6:c5:22:
                    ac:17:a4:f5:76:90:e6:50:45:22:e9:28:21:b7:c1:
                    e8:40:69:cc:e1:a2:be:c7:69:49:f4:86:78:85:47:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:73:9B:83:8B:10:74:3D:98:18:CE:94:50:9A:51:AA:BF:BC:D0
            X509v3 Authority Key Identifier:
                keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:e4:5a:63:aa:0a:3b:62:0d:44:e3:2b:97:3c:8d:63:3d:
         86:b2:5e:6c:5b:39:93:35:99:7e:89:f4:21:71:54:60:31:f0:
         58:5c:a6:80:e0:63:80:4c:8a:e0:7e:18:86:db:85:43:12:c8:
         ad:87:f0:bf:eb:1a:37:19:4c:6b:b6:c4:54:6f:74:0f:28:b2:
         9c:7b:04:07:85:ee:08:84:9c:39:cb:e8:8d:29:63:92:4b:0a:
         eb:d9:8c:e6:d5:26:58:80:67:58:a5:17:8d:85:b2:cf:43:71:
         14:76:3b:5e:86:14:0b:c0:fc:d8:a2:e0:88:8d:91:38:6e:75:
         d1:b5:ca:80:ea:91:c0:9b:e7:51:1e:30:15:93:54:c4:4d:76:
         93:8a:b3:4f:ed:b7:f7:67:d0:22:32:18:11:37:49:89:68:57:
         7b:89:03:34:2a:34:58:63:03:02:a9:69:48:96:e5:dd:f4:91:
         e5:b6:59:fd:d1:1a:45:91:90:4a:db:7b:62:55:9a:76:e9:0f:
         cd:7c:f7:d6:a5:fc:d9:d0:62:1d:e9:2a:ee:85:19:d7:d8:a5:
         e1:bc:69:ac:b9:13:7d:b9:e2:3b:21:0d:be:6a:7e:bf:52:9c:
         a0:34:5b:26:58:28:ff:1c:ba:f6:94:83:5f:29:a3:28:66:d3:
         44:b0:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:50 2026 by rpki-client