This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
File:                     BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json)
Hash identifier:          NCVUYZzkXUL+KsQRuhLP6SR54EVPbe9XD/HEKGK6dc0=
Subject key identifier:   B0:DC:AE:0D:65:4D:5F:0E:52:E9:63:A0:D0:E3:89:38:A9:7A:46:19
Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D
Certificate issuer:       /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
Certificate serial:       019C1D27FE2710C26AD122C132513F319964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
Manifest number:          B7
Signing time:             Mon 02 Feb 2026 07:01:26 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:26 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:26 +0000
Files and hashes:         1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=)
                          2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: MraIaTofkLJ4FmwFHng8Jt9DVuSnCqezNgQXKprVD+M=)
                          3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:fe:27:10:c2:6a:d1:22:c1:32:51:3f:31:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d
        Validity
            Not Before: Feb  2 07:01:26 2026 GMT
            Not After : Feb  3 07:01:26 2026 GMT
        Subject: CN=b0dcae0d654d5f0e52e963a0d0e38938a97a4619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:fa:90:2b:4a:74:e9:12:d4:4d:03:ed:8b:
                    e1:4e:24:2a:5e:cd:4d:a7:5a:24:90:fa:bb:e4:2b:
                    8d:2e:64:59:87:06:86:41:9e:b0:d7:d8:99:e9:5d:
                    67:be:54:5c:92:11:42:e8:1f:e6:e3:72:cb:b0:28:
                    57:ea:ec:43:b7:c8:11:30:77:df:9c:97:c8:9a:16:
                    73:ac:f0:b0:c2:68:5a:db:91:de:51:22:43:c8:e2:
                    73:34:fa:f9:00:b4:ec:03:91:ba:a3:0d:52:bb:b2:
                    26:39:3f:dd:81:b0:34:f4:31:a1:67:82:f3:2e:98:
                    cd:30:64:d2:b2:0f:25:2a:ec:91:40:1d:79:df:3a:
                    66:46:94:29:90:0e:1f:d1:2b:cc:1f:a4:b6:e3:0c:
                    1b:29:2f:24:3f:ea:99:cf:ae:38:53:18:13:34:bb:
                    87:d7:4d:f9:ca:b2:ed:8a:82:73:f8:c1:6b:a1:a5:
                    06:8f:d5:02:92:79:43:92:e3:4b:18:0a:86:ac:01:
                    7e:61:61:2c:75:11:fd:5f:80:7a:90:9c:bf:31:68:
                    10:b9:1f:46:2b:6d:38:1b:8d:ea:1e:10:a5:71:3b:
                    88:68:aa:a7:cb:c8:c9:0e:bf:f5:dc:ea:27:9d:64:
                    27:cb:36:d7:2d:97:43:89:cd:69:44:be:33:f7:08:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:AE:0D:65:4D:5F:0E:52:E9:63:A0:D0:E3:89:38:A9:7A:46:19
            X509v3 Authority Key Identifier:
                keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:f8:1b:e4:ed:40:11:a7:ae:7f:54:8d:4f:6b:c7:04:1b:
         2d:4d:88:ee:25:a4:bb:37:2e:5c:25:85:af:a6:85:1c:08:ce:
         ea:ec:cf:3b:6c:7e:a6:ae:5a:8c:b4:ca:96:49:5d:eb:a8:65:
         71:44:9f:a3:66:ae:61:2a:5c:5f:03:de:3d:75:79:0a:5b:09:
         72:26:3d:03:d3:a5:f6:e9:29:25:ae:c7:7f:19:ab:3e:3d:f9:
         6b:af:fb:2e:83:15:33:de:11:75:d7:df:e4:d1:c5:72:e6:0c:
         30:03:fa:15:76:c2:78:03:3e:8b:63:c5:0f:fe:a4:89:46:cc:
         20:c9:c7:62:db:ee:bf:90:bd:d4:6c:23:04:53:15:64:2b:24:
         b0:4e:33:44:bd:7a:2c:c9:e5:ed:c6:36:89:6d:c2:99:27:2a:
         71:d7:6d:60:84:87:f5:32:4e:1e:5c:28:70:ec:e7:4b:de:e3:
         a4:46:b7:e7:e5:e2:bc:ea:b3:d4:d4:8e:6a:a1:59:16:cd:f4:
         20:71:aa:f5:ca:f0:f2:e1:7f:d2:38:f8:52:83:31:ea:89:af:
         eb:a5:8b:05:1f:81:69:c0:74:48:bf:2a:1d:33:ac:1e:e8:74:
         a0:5f:16:3a:52:c0:1f:be:23:96:b0:36:85:0f:bc:fa:1f:66:
         b3:6f:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:52 2026 by rpki-client