This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File:                     BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier:          SpAtW8CWVeWpGnBzur4bZ0XxPL/pgKN4QbWfmPyqSgA=
Subject key identifier:   5F:F4:62:D5:5E:9D:12:49:E9:9E:95:2D:D7:ED:82:CE:75:0B:9C:DE
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer:       /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial:       019C43FE6E48BF4EF919F57691D8963CDC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 20:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:13 +0000
Files and hashes:         1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: R/+hfufcmaJiCHnQfSQDLoUbXTKl0V5zjEoFlaYGyrU=)
                          2: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (hash: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8=)
                          3: fFg7BMRzleH625x9WdiXPcleSgg.roa (hash: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:6e:48:bf:4e:f9:19:f5:76:91:d8:96:3c:dc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
        Validity
            Not Before: Feb  9 20:01:13 2026 GMT
            Not After : Feb 10 20:01:13 2026 GMT
        Subject: CN=5ff462d55e9d1249e99e952dd7ed82ce750b9cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:48:f7:04:27:9d:02:97:30:24:88:09:28:
                    d3:84:82:c3:e3:cc:df:98:35:e4:cf:72:f5:6d:cf:
                    6d:12:2d:c6:cb:99:2b:9a:5b:99:f1:c3:62:26:3c:
                    e4:88:6d:d4:87:a7:1e:58:ca:a1:d6:de:7a:a7:1e:
                    a5:de:32:ab:bc:33:ba:cc:5c:39:fb:a3:f9:83:b6:
                    55:cc:6a:92:1e:42:1d:83:a0:91:bc:e7:d1:d8:2e:
                    89:aa:98:56:da:3e:24:2b:ce:fb:9e:4c:41:ce:f2:
                    be:a8:5e:2b:98:51:28:a4:72:f6:bf:ed:1e:83:47:
                    83:ec:7b:c5:8f:dc:68:d9:8f:23:2d:80:9e:e0:af:
                    be:33:1d:e5:d1:33:38:ab:ba:f2:40:6f:c4:ed:8e:
                    59:af:33:8b:b6:97:33:2f:80:dd:1d:05:53:05:50:
                    b9:fa:2c:16:46:3f:74:88:17:d1:cf:bf:4e:b4:5b:
                    1b:65:47:a9:60:c4:da:01:58:37:29:4d:af:43:11:
                    5d:c0:33:34:ff:b7:a8:8f:ab:d8:c9:a4:29:d4:70:
                    82:3c:c8:3b:ab:db:a7:8e:cb:64:24:5e:fb:1b:5c:
                    e6:dd:b1:48:c7:40:29:5b:7c:2c:9f:3a:8a:f6:d2:
                    b7:79:0d:2c:5b:3a:f1:a3:3f:eb:fb:a9:f7:b7:3a:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:62:D5:5E:9D:12:49:E9:9E:95:2D:D7:ED:82:CE:75:0B:9C:DE
            X509v3 Authority Key Identifier:
                keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:6e:7c:f7:d0:83:55:e3:03:55:96:97:4b:c5:93:2b:0f:
         8a:df:99:b0:8b:dd:c9:74:1e:ac:19:dc:be:03:22:ce:06:72:
         ca:40:91:f2:79:2a:f4:80:5f:1d:17:ee:bc:f4:79:cf:ae:02:
         77:6b:cc:d6:7b:36:b3:44:78:c6:0a:b5:43:78:bd:51:c7:4d:
         c6:17:b1:92:12:24:e9:1a:af:99:2c:b8:29:96:91:ff:3f:ef:
         9b:bd:e7:06:57:17:6c:ab:e7:f7:83:fc:dd:37:25:23:95:12:
         e8:c7:94:83:f4:ff:7d:69:1a:83:47:a2:a2:cd:0b:64:ad:07:
         2e:10:a6:4a:aa:f3:ab:9e:58:16:0e:d9:d5:89:21:1d:a6:7f:
         be:ce:2b:97:f6:b8:0d:92:39:22:63:8e:11:20:65:9f:3e:6f:
         0f:82:20:ba:9f:cd:cd:c2:48:b4:c9:04:73:d8:22:63:5a:3f:
         d8:54:de:a3:b8:cf:6b:b2:53:eb:0a:f1:d2:a8:3e:68:69:e6:
         58:0b:84:f1:55:09:a1:db:4d:f3:41:50:f2:aa:db:aa:52:e2:
         ed:b9:d1:94:0a:42:f2:f5:c5:29:cf:f8:cc:76:33:24:ca:6d:
         fd:b6:44:a6:c7:d2:c2:dc:5b:e8:79:f4:a6:0e:2a:06:36:d4:
         f2:b0:8c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/m5Iv075GfV2kdiWPNw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4
NDE3NmIwHhcNMjYwMjA5MjAwMTEzWhcNMjYwMjEwMjAwMTEzWjAzMTEwLwYDVQQD
Eyg1ZmY0NjJkNTVlOWQxMjQ5ZTk5ZTk1MmRkN2VkODJjZTc1MGI5Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZdI9wQnnQKXMCSICSjThILD48zf
mDXkz3L1bc9tEi3Gy5krmluZ8cNiJjzkiG3Uh6ceWMqh1t56px6l3jKrvDO6zFw5
+6P5g7ZVzGqSHkIdg6CRvOfR2C6JqphW2j4kK877nkxBzvK+qF4rmFEopHL2v+0e
g0eD7HvFj9xo2Y8jLYCe4K++Mx3l0TM4q7ryQG/E7Y5ZrzOLtpczL4DdHQVTBVC5
+iwWRj90iBfRz79OtFsbZUepYMTaAVg3KU2vQxFdwDM0/7eoj6vYyaQp1HCCPMg7
q9unjstkJF77G1zm3bFIx0ApW3wsnzqK9tK3eQ0sWzrxoz/r+6n3tzrYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/0YtVenRJJ6Z6VLdftgs51C5zeMB8GA1UdIwQY
MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt
ZTFhY2EwMTA2MmZmLzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm
LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHtufPfQ
g1XjA1WWl0vFkysPit+ZsIvdyXQerBncvgMizgZyykCR8nkq9IBfHRfuvPR5z64C
d2vM1ns2s0R4xgq1Q3i9UcdNxhexkhIk6RqvmSy4KZaR/z/vm73nBlcXbKvn94P8
3TclI5US6MeUg/T/fWkag0eios0LZK0HLhCmSqrzq55YFg7Z1YkhHaZ/vs4rl/a4
DZI5ImOOESBlnz5vD4Igup/NzcJItMkEc9giY1o/2FTeo7jPa7JT6wrx0qg+aGnm
WAuE8VUJodtN80FQ8qrbqlLi7bnRlApC8vXFKc/4zHYzJMpt/bZEpsfSwtxb6Hn0
pg4qBjbU8rCMWg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:53 2026 by rpki-client