This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File:                     buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier:          n0j0YUaBKY2U36rBHaq4gsfh5rZOdM0KJkupABcAks8=
Subject key identifier:   23:99:C7:09:90:88:24:AF:A6:FD:EC:E9:D3:58:66:20:E5:15:98:58
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer:       /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial:       019C41D833146C04CC48550489D13690D535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 10:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:13 +0000
Files and hashes:         1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: nwvY5VdfOMORR2HCz0A72LDL7UkWTTVmf4zKj1vXIYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:33:14:6c:04:cc:48:55:04:89:d1:36:90:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
        Validity
            Not Before: Feb  9 10:00:13 2026 GMT
            Not After : Feb 10 10:00:13 2026 GMT
        Subject: CN=2399c709908824afa6fdece9d3586620e5159858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:b1:f8:9b:76:f1:d7:9a:67:f2:4e:bc:65:
                    f1:22:37:43:5b:cf:20:b1:0e:ff:e5:8d:c6:f5:fa:
                    73:ac:83:fe:6c:9e:d8:d7:cf:b5:0a:76:c2:b8:53:
                    2d:f6:9f:1c:b8:71:20:3c:9f:c2:74:c1:3b:6d:9f:
                    d5:f9:11:ec:f1:99:9b:f9:9f:ad:f1:b3:b5:98:01:
                    73:01:04:01:a9:4d:31:d2:2a:72:53:46:78:21:09:
                    30:d7:9e:f3:c0:1e:85:24:d7:c6:26:0d:59:9e:fa:
                    ea:85:81:c6:44:bf:59:60:03:03:3f:1d:f6:bd:97:
                    8b:ae:6f:13:55:42:5f:7b:49:2d:48:e2:ad:e7:31:
                    f9:e4:36:4d:86:4b:62:45:51:36:cc:c7:bf:e5:28:
                    a2:7b:5f:68:fd:87:cb:79:e0:d4:1d:4f:ee:88:77:
                    b9:e1:2f:34:3c:14:b2:1a:dd:4f:8b:00:41:a7:22:
                    54:76:a5:66:17:29:cd:42:96:86:f8:f0:ab:18:bc:
                    62:5e:fb:80:ed:0f:d9:16:0d:99:d9:33:8a:db:f1:
                    13:55:da:36:45:c8:2b:0d:c6:00:ac:55:7c:72:94:
                    f6:83:25:d2:f2:27:2d:98:bb:1c:2d:2e:94:31:fd:
                    c8:a8:be:51:4b:17:81:9f:d1:19:3b:01:a4:42:b8:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:99:C7:09:90:88:24:AF:A6:FD:EC:E9:D3:58:66:20:E5:15:98:58
            X509v3 Authority Key Identifier:
                keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:8f:05:5d:06:d4:49:03:08:b6:7b:32:1f:c2:94:78:ee:
         b9:eb:c6:d7:41:db:56:f9:6b:7a:59:9a:b4:95:4b:fd:72:87:
         4b:88:a9:4f:a4:07:e6:85:71:a2:2c:de:1d:c0:de:10:92:07:
         e8:c9:09:62:ee:fb:48:64:3a:00:ea:ed:48:cd:1d:47:cc:e6:
         c4:9c:71:7e:13:fe:d2:cd:4a:e7:72:98:9e:e0:74:79:a8:50:
         a9:2f:49:b0:84:21:db:b3:34:81:de:34:3e:7a:54:a8:96:c7:
         0d:a2:f4:2c:cf:bc:02:f2:90:7f:22:b8:4d:d5:ac:b1:59:3c:
         46:b8:83:f8:72:0d:c9:55:2e:d8:a2:c8:bc:bf:13:8f:d1:70:
         a3:57:cd:13:7c:10:a7:8b:93:28:24:ee:0f:36:e1:c1:09:51:
         fb:73:79:4d:f2:08:3b:20:83:a5:1f:4e:c1:c4:61:24:5b:47:
         ac:87:f8:bd:d2:43:6a:ed:26:7c:03:bf:16:d8:62:a0:30:74:
         a7:af:f1:54:09:e2:92:ae:f6:11:21:cc:d2:d8:24:21:70:55:
         1a:52:58:9f:10:f6:58:5f:c3:e3:e1:b7:7c:60:47:65:56:38:
         58:d7:fa:bb:39:7e:0d:2e:73:47:2a:39:ad:63:c2:99:cf:b1:
         fd:42:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:55 2026 by rpki-client