This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File:                     _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier:          jZLrti1vI0ccWOWUkS71QvKMQDy2jppK43jXXoQit7s=
Subject key identifier:   FD:30:E6:9C:64:FB:73:66:E7:F1:AB:C8:63:9C:2A:44:E4:D0:D1:DF
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer:       /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial:       019C4623C67671A4DA38D7030D302185B768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number:          1515
Signing time:             Tue 10 Feb 2026 06:01:15 +0000
Manifest this update:     Tue 10 Feb 2026 06:01:15 +0000
Manifest next update:     Wed 11 Feb 2026 06:01:15 +0000
Files and hashes:         1: CCOsqAacrS8dBTl4tQBwpoCnadM.roa (hash: YYtqMm75d9ZnPheKTmSgCCjQh+tr4ThzJq28f22P15I=)
                          2: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: tm2Z/8MhAxA0IeA35N52ewlxSxM2FStm3rKhRCw3V6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:23:c6:76:71:a4:da:38:d7:03:0d:30:21:85:b7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
        Validity
            Not Before: Feb 10 06:01:15 2026 GMT
            Not After : Feb 11 06:01:15 2026 GMT
        Subject: CN=fd30e69c64fb7366e7f1abc8639c2a44e4d0d1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:f9:b4:6a:c9:89:e4:18:92:a6:d0:48:a5:
                    84:60:1f:2a:5e:ac:e4:2b:03:36:e1:89:7e:cd:7f:
                    2e:77:a6:35:07:81:49:fa:a1:62:a5:20:f7:a1:c2:
                    88:d4:07:68:fd:bd:2b:5b:13:91:ee:5c:82:33:0a:
                    67:c2:a4:6b:ad:44:f0:06:ee:34:3e:13:d1:e1:23:
                    28:99:20:0f:93:8b:83:56:52:9c:d7:a1:19:6d:36:
                    7a:23:68:04:b3:38:7f:8a:5f:a8:08:3a:d2:18:8c:
                    c5:f0:db:8f:8b:ef:d5:ae:5b:95:4b:a8:63:bc:3d:
                    29:7a:cb:b3:bb:93:7c:c6:2f:16:6c:b3:2d:e2:4a:
                    d7:20:06:03:77:97:8f:da:c5:a1:5c:b4:4e:5e:b6:
                    4a:d2:fd:e3:31:8c:be:88:4c:dd:70:86:40:b8:eb:
                    85:c3:49:69:d1:d4:5b:82:b8:1d:98:22:0f:3b:d9:
                    15:60:8d:50:fd:da:50:2e:99:ed:7c:8d:4d:c1:e0:
                    2d:0d:55:4b:65:33:98:78:3e:ef:db:d7:50:5c:e5:
                    39:97:99:e7:18:80:03:ca:e3:01:8b:71:9a:d9:e9:
                    00:40:51:1f:0c:48:84:fc:d8:fe:50:67:00:bc:95:
                    0a:b4:a6:56:c4:d0:a4:56:53:f5:9a:4c:01:50:91:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:E6:9C:64:FB:73:66:E7:F1:AB:C8:63:9C:2A:44:E4:D0:D1:DF
            X509v3 Authority Key Identifier:
                keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:49:5a:16:3e:a4:5d:01:c1:6e:6d:db:8b:e6:3f:b0:9b:
         48:a1:cd:29:ba:1c:46:c2:20:71:42:0d:37:be:7b:50:b8:f8:
         01:fe:38:8b:af:be:ee:64:60:9d:5a:1d:73:58:82:d4:17:65:
         99:b1:5f:ee:c4:5a:78:3c:e7:3e:dc:3b:f5:5d:a0:f7:3f:f2:
         c2:7b:1d:57:5b:cb:9d:9b:ee:41:d9:90:5f:4f:35:2f:02:11:
         3b:4d:23:0e:eb:99:3a:eb:36:63:1c:35:39:56:74:b5:9a:9e:
         df:9c:55:fe:3b:a8:f5:57:7f:40:a9:40:15:f6:d2:8c:f1:eb:
         85:e1:cc:30:f5:08:45:47:b6:18:1e:3b:6e:c8:d2:72:6d:69:
         f3:0c:ea:a1:7c:b3:55:c4:51:3c:70:7e:85:d3:6d:4c:37:f5:
         39:1e:d6:e4:d6:c3:23:46:64:a2:cb:f7:1c:06:62:78:ee:41:
         c9:38:20:0f:10:22:e9:11:ae:77:01:5f:e9:95:18:1f:68:e1:
         7a:8c:c0:3d:f1:56:7c:ab:b3:14:16:9e:52:bd:73:e5:d7:e9:
         0b:79:38:6a:34:4e:c0:08:04:22:41:b7:9f:24:5d:07:60:f8:
         b2:82:8e:cf:5a:df:3a:23:25:d5:b1:54:e3:14:79:50:f6:5e:
         32:cd:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 10:13:03 2026 by rpki-client