This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File:                     BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier:          7vIVWVwvG9IHHosyALNp3IsNzpLhsfBgYdBk12Jp0zs=
Subject key identifier:   76:F7:32:CA:1A:34:EC:0C:46:D1:8B:A7:00:36:85:C3:28:0E:AF:F9
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer:       /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial:       019C42EB34E49E85D791128902BB13C9E8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:36 +0000
Files and hashes:         1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: 9/U1p0/ozpav2OeTpmlA5xO36GMwowC2oDpHdzS/wVc=)
                          2: L5QyDq4nzLcpQLfWU1prA656nOQ.roa (hash: hEvHaOQM6citq23iRIkG5Vhd08rav1O71/Vw2lS4G94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:34:e4:9e:85:d7:91:12:89:02:bb:13:c9:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
        Validity
            Not Before: Feb  9 15:00:36 2026 GMT
            Not After : Feb 10 15:00:36 2026 GMT
        Subject: CN=76f732ca1a34ec0c46d18ba7003685c3280eaff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:bc:7d:11:e4:5f:78:24:4c:55:5d:a5:f3:
                    55:44:88:d8:9c:22:59:80:a3:5d:10:de:d9:f8:c7:
                    fd:36:7e:63:0d:c4:06:05:8d:34:ec:4b:e2:8d:35:
                    78:b7:54:fd:c0:1c:cf:ed:68:3f:cf:52:d0:c5:33:
                    a8:94:5a:ec:4c:43:6a:af:23:be:e5:5f:a9:1b:68:
                    eb:b4:14:31:36:76:43:c5:88:dd:11:a0:2d:45:b3:
                    d5:1a:80:2c:4e:63:93:24:6b:90:7e:5e:72:ea:ef:
                    cd:b6:6a:e4:a7:ee:9f:e9:99:b0:06:b2:ee:47:5b:
                    34:94:f7:93:9a:b8:fb:8b:36:84:e6:95:dc:06:08:
                    7b:0d:31:b5:6e:37:ac:86:31:38:66:1a:7d:a1:7e:
                    e7:c4:03:0c:6f:ba:26:2b:84:e4:58:96:87:4f:f3:
                    7e:15:df:b2:0c:30:81:ad:9a:d9:4b:a9:f9:ed:01:
                    66:bc:a1:99:e0:aa:76:78:6a:31:8c:a2:18:7f:98:
                    09:2b:9f:b2:01:ca:bb:f5:93:87:73:18:a4:f2:84:
                    22:12:85:70:bb:1b:d7:a6:23:4f:24:b9:67:5f:94:
                    d6:c8:83:6a:18:8f:28:10:1f:1d:74:5f:b8:98:53:
                    e9:af:d6:41:a4:3c:5b:e1:33:e4:ae:52:ea:e5:9f:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F7:32:CA:1A:34:EC:0C:46:D1:8B:A7:00:36:85:C3:28:0E:AF:F9
            X509v3 Authority Key Identifier:
                keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:27:56:9b:78:9b:73:63:64:15:ab:49:ee:a4:f7:c9:06:1c:
         46:12:e5:47:36:22:fb:8b:a7:80:ff:83:09:a1:64:b7:8b:2e:
         c4:b9:6c:1f:bb:20:45:7b:ca:f1:92:55:8e:46:b5:52:86:a8:
         b6:06:4f:59:25:95:67:22:fe:a9:77:a0:5c:28:f6:87:a9:9c:
         1d:04:73:22:5e:93:57:8a:f7:41:12:04:0c:b2:9c:5d:e6:2f:
         37:50:da:89:15:c0:96:f3:00:1d:fc:0d:64:50:56:da:e9:b5:
         9b:0c:79:33:b6:57:e2:e4:07:e0:d5:a6:46:1d:39:6c:fd:d0:
         be:8a:24:61:9b:05:87:c0:41:5e:52:80:2c:bb:91:93:25:39:
         57:c2:52:fd:6a:f5:0c:97:23:40:64:47:37:0d:84:56:a4:d5:
         32:f6:1e:2a:30:fc:ea:fa:8f:08:3d:92:24:21:46:90:e6:45:
         64:97:8e:d8:a5:2f:40:7a:b5:0c:7e:70:05:43:e4:1c:aa:e9:
         30:3b:37:96:34:67:61:f3:60:ba:ff:1c:15:53:87:ee:44:f1:
         c0:58:7c:20:55:d8:dd:dd:0e:a5:cd:34:a2:14:72:cb:13:98:
         e7:48:33:33:53:53:85:ca:de:53:11:53:35:a8:f3:88:93:0f:
         bc:75:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:25 2026 by rpki-client