This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File:                     BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier:          wWqxj/PFzNNLEn6rQIki0MPA6yJdJye0JOJcLdfn5M4=
Subject key identifier:   C1:82:95:B3:EC:6F:89:E2:A2:00:63:64:68:7B:1C:07:DD:38:8A:FB
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer:       /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial:       019C41A1868E3EE0602C2D6926A5A13B4EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number:          05E1
Signing time:             Mon 09 Feb 2026 09:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:30 +0000
Files and hashes:         1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: IQYWI3Zjdo8HPp5X0cJrbiKkY6P5vPcRf0VtD31jxFM=)
                          2: CNtUCdbHYVJYM90-O1mKKO2CEmA.roa (hash: obwLgv1NBdrIy8lfJRJyvaXbfk0zSRfq9qV7ZZ7iDjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:86:8e:3e:e0:60:2c:2d:69:26:a5:a1:3b:4e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
        Validity
            Not Before: Feb  9 09:00:30 2026 GMT
            Not After : Feb 10 09:00:30 2026 GMT
        Subject: CN=c18295b3ec6f89e2a2006364687b1c07dd388afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2a:6e:95:c6:6b:28:21:8c:63:5a:85:71:aa:
                    a9:4e:9d:55:8b:88:7e:7c:9a:b3:0e:c9:18:0f:ea:
                    55:97:83:79:1b:5f:9e:5d:0a:76:09:37:11:85:da:
                    de:0a:5c:eb:c5:88:90:63:ff:ed:20:d3:d6:64:0b:
                    66:6c:05:2b:b5:fb:9e:be:bd:5c:27:ba:41:33:01:
                    24:6d:d4:59:53:48:6a:2d:a0:fb:e3:8b:ce:0b:21:
                    fa:ad:59:b5:00:e0:63:48:a3:e7:75:4f:43:ca:1f:
                    08:0d:80:1e:09:75:80:0c:42:02:97:60:b0:e9:d3:
                    43:bb:a1:1e:1d:1d:66:b7:9b:57:94:4c:45:13:b7:
                    af:be:a0:26:f9:d7:6c:d0:61:c4:56:7f:28:79:f4:
                    03:cf:32:df:cf:04:07:92:df:44:44:0e:b6:a4:19:
                    3e:cb:b5:65:53:8b:5b:88:1b:6e:18:e8:d3:28:d1:
                    54:c0:fc:fa:ed:68:96:7f:d2:95:18:ae:18:62:2d:
                    f7:e6:33:26:d9:4f:19:19:05:71:db:36:03:6a:f9:
                    75:c3:1f:9f:05:20:c6:96:74:57:2a:8c:38:e5:b2:
                    2d:a7:91:a4:d7:0b:d7:d9:60:5a:e4:52:a4:ab:e1:
                    ec:e6:51:15:cc:03:88:04:9c:db:3d:3d:8c:ce:0d:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:82:95:B3:EC:6F:89:E2:A2:00:63:64:68:7B:1C:07:DD:38:8A:FB
            X509v3 Authority Key Identifier:
                keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:94:0d:e3:ec:f2:b5:09:71:36:9a:30:23:55:a9:8e:c1:95:
         32:75:40:72:ef:21:d4:a8:d5:38:e9:da:f8:d2:0a:f8:6b:ad:
         73:65:7f:49:f8:d1:2e:db:cc:09:67:29:8d:b8:40:65:4f:0d:
         21:25:d2:b0:e8:04:64:9b:85:50:ba:72:fb:19:7a:49:56:90:
         5a:65:b4:a4:b7:31:dd:5f:ec:76:00:08:2a:47:fa:fb:59:41:
         be:91:ff:35:66:b4:6f:0f:11:0a:d7:ea:55:6d:1a:bc:9c:2a:
         89:88:bb:21:9a:7d:66:a2:d0:bf:05:00:f0:1b:35:ad:1e:b1:
         07:ee:12:f4:39:95:be:bb:18:2f:b5:01:85:97:d8:3b:25:67:
         7e:45:43:50:af:f9:0e:c7:c7:3f:1e:dc:dd:06:04:68:cf:db:
         94:06:bc:44:6a:51:60:42:8c:14:ab:4b:5e:51:11:0b:f3:a4:
         c2:20:e7:58:96:dd:af:b0:ed:20:69:a0:5e:f8:ab:f5:ef:c3:
         ee:a0:97:45:13:42:41:d7:a9:cc:b6:08:10:c7:96:02:12:57:
         69:ce:1b:46:39:9a:e8:f2:e6:77:e1:ee:d5:30:a3:42:80:09:
         75:74:41:9a:be:5e:81:bb:07:2f:a7:05:0d:7b:f8:19:7c:d5:
         cc:f0:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:11 2026 by rpki-client