This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File:                     bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier:          Vu+WRVWiisGJNrdqr3t7t/OyXaWEsr3/zFQSj82Icac=
Subject key identifier:   34:B0:43:B3:D5:C1:E2:F0:95:B0:06:F1:60:F4:AF:9B:CD:70:35:DA
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer:       /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial:       019C41D8D4F78D1B034268F4B1842D1CA9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number:          0B54
Signing time:             Mon 09 Feb 2026 10:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:55 +0000
Files and hashes:         1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: oHZAbwRLrfWNarc0z1rkVO2Uece8Su7i+FWmvjGoOtU=)
                          2: u2DoRyUakqrjwSyZA3BmkWIxCdY.roa (hash: ysQW56gBC1VncDg2ReMXXp9OOHCKYs21ZfB3qLDw5IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d4:f7:8d:1b:03:42:68:f4:b1:84:2d:1c:a9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
        Validity
            Not Before: Feb  9 10:00:55 2026 GMT
            Not After : Feb 10 10:00:55 2026 GMT
        Subject: CN=34b043b3d5c1e2f095b006f160f4af9bcd7035da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:a8:0c:cf:0e:83:e0:82:ed:8e:5a:cb:10:
                    14:e3:38:0c:d2:17:2d:2d:5d:ec:45:29:f5:e5:58:
                    ed:56:db:3d:5c:f6:91:ae:ac:fd:4c:0f:16:38:9f:
                    f0:d4:01:f7:82:6e:3b:d0:a0:15:e1:dc:72:47:61:
                    5d:4c:60:50:f8:dc:61:d1:60:48:e6:a6:2f:8a:0e:
                    4d:ff:6b:de:64:cd:36:d6:c6:af:d9:90:7b:0d:51:
                    a7:49:e4:1d:bd:de:1f:a1:e9:76:f9:d8:e9:e6:04:
                    3a:87:9d:ff:de:f5:a5:79:e3:b5:da:14:82:77:04:
                    fd:65:9c:c5:50:2b:bb:99:40:7e:4b:d9:fe:47:5c:
                    ea:02:c4:b8:34:56:f1:d5:13:47:38:ff:34:18:93:
                    97:68:18:4e:8e:93:aa:af:e9:c5:b8:2c:61:21:c0:
                    d1:f7:57:1b:97:e8:db:82:c1:ae:9b:9d:14:2d:a1:
                    e5:e8:18:78:62:7e:7d:96:44:26:f4:55:66:a8:8a:
                    f0:3a:de:c3:58:da:58:76:25:cd:ee:41:31:8e:12:
                    1c:8a:57:8b:7f:5d:a8:72:76:88:75:ca:e7:4b:8d:
                    6f:79:03:f7:32:98:1e:48:2c:13:64:3a:59:1a:26:
                    cc:56:ce:b0:8b:34:bc:45:6d:06:a4:de:f2:2a:4b:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B0:43:B3:D5:C1:E2:F0:95:B0:06:F1:60:F4:AF:9B:CD:70:35:DA
            X509v3 Authority Key Identifier:
                keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:f9:4e:8f:1d:d4:d9:4b:b0:4d:fe:79:4d:59:dc:37:3d:
         15:aa:6b:1a:57:c8:93:7c:e5:7c:0b:e0:bc:c2:bd:4d:53:15:
         e2:26:1d:5b:aa:3d:2a:03:68:74:50:d2:04:28:3c:8e:fb:b6:
         b6:f7:b9:d4:0a:9b:1c:04:0e:63:9c:7b:fc:69:1d:7e:e0:48:
         82:18:b2:ce:36:8e:41:81:c5:a8:55:b2:b1:4d:09:db:15:a8:
         67:25:f4:0e:f1:a1:4c:53:ed:98:3d:f6:e3:c8:a2:cf:89:ce:
         79:d7:79:34:5c:ea:ac:08:2a:4c:bf:2b:32:03:31:6d:d7:5f:
         78:08:93:5d:f7:27:7a:14:f4:bf:c8:b1:a5:c4:c2:00:c0:1a:
         e8:ac:dd:04:8c:95:4d:ef:63:54:fa:41:df:f7:28:dd:84:73:
         af:11:99:18:df:0c:35:40:dc:43:5b:fe:d4:37:f7:a3:d4:33:
         2a:dd:69:96:93:ad:1e:e9:e8:51:fc:3b:a8:3a:c3:35:99:98:
         80:b8:ea:48:65:01:26:d6:a2:6b:2c:9a:e6:c1:09:ce:ae:64:
         9c:75:8c:e9:4c:7d:95:12:86:d3:2f:96:84:d4:58:9c:c4:75:
         e4:97:2c:bd:3a:5b:ef:68:59:84:1c:ad:83:b2:5f:9f:73:ba:
         15:1c:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:31 2026 by rpki-client