This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File:                     BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier:          RrMEJArYY5wYbM05EXN1w4Xm/69NEQjQ0vFzZUT7ACQ=
Subject key identifier:   38:CB:E6:28:73:A9:27:C7:E5:3F:DD:6A:91:3B:68:CE:9E:5F:6A:25
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer:       /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial:       019C42EBB185CAEE08F21767B582325280F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:08 +0000
Files and hashes:         1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
                          2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: 5d8p76OWZszNc6KN1X9rp5zSFZsubuUM4y3P+swxrrk=)
                          3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b1:85:ca:ee:08:f2:17:67:b5:82:32:52:80:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
        Validity
            Not Before: Feb  9 15:01:08 2026 GMT
            Not After : Feb 10 15:01:08 2026 GMT
        Subject: CN=38cbe62873a927c7e53fdd6a913b68ce9e5f6a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:36:65:2c:11:87:f9:a0:75:aa:d9:13:7b:
                    4c:82:6e:e0:f1:f4:ef:48:12:51:1b:82:a0:c2:80:
                    b8:e3:e0:8f:83:fe:d8:61:d5:59:07:f9:e1:c8:90:
                    1a:54:6f:c0:b8:a2:31:5c:b2:34:ea:b9:62:28:b4:
                    53:70:22:51:5e:b0:b1:07:58:c4:54:9d:07:ff:fe:
                    b0:fe:f8:71:12:37:11:ab:c1:a0:4e:36:05:6c:82:
                    e3:fb:39:0f:7b:50:1f:75:d8:5b:c0:8f:44:c8:be:
                    9c:64:74:95:d3:80:6f:f3:a1:d7:ea:a3:21:37:ae:
                    fd:cf:f9:0b:68:c3:c8:58:8b:ed:c0:38:34:be:34:
                    f5:de:cd:ec:ca:e3:1a:3d:c8:a6:81:19:2a:0d:29:
                    96:b0:8b:1e:06:22:e0:ff:4a:53:51:d2:22:06:89:
                    6f:9c:69:f9:c2:67:64:a8:e1:68:e4:26:c3:69:87:
                    33:47:b1:56:14:72:57:91:57:ae:bd:fa:5b:ed:62:
                    73:d2:ab:db:b7:8c:bb:e1:71:24:6c:12:52:82:20:
                    1f:bd:55:93:3f:bd:86:36:a6:e0:4d:74:65:8a:66:
                    f7:88:b5:25:12:b2:d5:e7:bd:3f:76:fc:f9:e0:e0:
                    c5:45:fd:21:c5:d5:fd:bd:6c:1c:e3:b3:b2:1d:76:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:E6:28:73:A9:27:C7:E5:3F:DD:6A:91:3B:68:CE:9E:5F:6A:25
            X509v3 Authority Key Identifier:
                keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:e8:5d:f2:a8:1c:09:69:af:0a:a9:e8:f9:a2:e1:29:40:
         2c:1a:5d:33:06:be:29:9b:34:4d:72:55:be:38:e4:f8:34:4b:
         e6:3a:81:ee:bc:1e:aa:b7:63:fa:ca:25:04:8b:04:a2:13:73:
         45:b1:25:ca:46:c3:ab:a1:d6:3b:16:8f:35:35:c1:97:da:be:
         c3:34:78:32:14:58:cc:2b:61:aa:01:df:e6:72:17:90:84:97:
         99:8c:46:9d:f1:9f:0f:5c:cd:fa:29:15:a4:23:7b:16:27:a6:
         93:22:88:fb:a9:9b:0f:60:0c:c7:2d:51:4a:06:be:80:a5:a4:
         24:3e:42:38:21:99:e4:99:1c:16:bf:fe:e9:d2:31:0e:1b:37:
         e4:fd:ef:b3:df:16:4f:6f:0c:1d:d1:b4:ad:df:3e:4b:4c:89:
         8e:a7:d9:10:67:1d:9d:47:63:b2:ab:16:a5:ad:16:bf:25:dd:
         57:a9:9c:49:74:b8:72:a3:41:59:8a:92:f8:c3:44:2a:c7:68:
         1b:b3:c1:9f:57:f0:60:c4:a8:22:37:84:b6:b6:1e:4e:a5:db:
         45:b8:cd:34:9f:9d:32:de:f8:98:6a:3e:7f:d5:43:07:9a:11:
         71:12:7c:b5:5e:56:85:36:35:56:6c:a6:d9:0c:ce:ff:ba:76:
         5c:88:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:50 2026 by rpki-client