This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File:                     bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier:          KJTAKkqJJRYaIx8KlVzfapkxoNCsTk4ZWeMTSVSCa2s=
Subject key identifier:   C0:E2:92:15:D1:AB:69:FF:12:03:A3:76:86:79:E6:FF:77:9F:E3:94
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer:       /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial:       019C41A272AFF25EE61DFBD109BC941443E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number:          27
Signing time:             Mon 09 Feb 2026 09:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:30 +0000
Files and hashes:         1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: W1SBU3U5jmIVWW4hpBsVWMMMyGjl+jlvVRRpOm8cQTg=)
                          2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:72:af:f2:5e:e6:1d:fb:d1:09:bc:94:14:43:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
        Validity
            Not Before: Feb  9 09:01:30 2026 GMT
            Not After : Feb 10 09:01:30 2026 GMT
        Subject: CN=c0e29215d1ab69ff1203a3768679e6ff779fe394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:0c:32:37:d6:22:09:d8:53:22:76:88:f0:
                    ed:2e:53:62:71:ba:fb:31:3a:7e:1f:ee:08:53:0a:
                    27:e9:d6:a8:a5:24:c8:20:48:06:8a:08:dc:02:ce:
                    64:77:72:75:ad:e9:38:2d:9c:7f:60:e6:d8:19:70:
                    67:22:c3:e3:bf:89:16:22:2f:d1:43:57:00:f8:4e:
                    01:79:1c:3e:8d:c9:ba:e3:e1:e9:f1:9f:d2:c5:dc:
                    17:f6:be:47:3f:2e:70:87:03:6b:44:89:7b:94:0c:
                    9b:2d:b9:3b:25:cd:37:05:1a:22:27:90:47:94:b7:
                    42:e6:41:c7:49:4d:d5:db:5e:42:ea:f3:0f:1c:c4:
                    3f:02:bb:08:4c:e1:81:63:22:11:bf:76:c2:56:c6:
                    9c:1f:10:73:5a:73:a3:ee:ce:48:d9:11:9c:1f:c2:
                    91:6c:78:fd:dd:77:ec:bc:c5:40:5f:11:67:54:7a:
                    09:d7:2a:c8:e7:71:7d:59:f6:25:10:bf:37:4e:a2:
                    10:c3:d6:a3:9b:32:55:69:26:b9:f2:29:9a:d7:11:
                    92:74:ac:87:ca:ed:7b:50:5f:4b:ca:d3:d5:df:11:
                    7b:15:dd:a9:c6:8a:b2:b6:fb:e4:8b:85:f9:2b:2f:
                    6d:e0:1c:b3:ef:c4:1c:9b:18:e5:7b:63:eb:82:57:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:92:15:D1:AB:69:FF:12:03:A3:76:86:79:E6:FF:77:9F:E3:94
            X509v3 Authority Key Identifier:
                keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:be:90:9a:70:a1:9c:9c:5c:2f:fa:c0:8d:fe:75:f2:a5:14:
         91:b3:8e:61:23:ea:5d:cd:a5:56:72:30:ee:2f:52:90:6c:ec:
         18:69:58:af:fb:1a:fd:b9:5f:56:f4:1f:94:d3:97:c0:40:f5:
         09:84:bf:46:36:4f:99:ec:27:1f:43:cc:04:a0:5b:62:34:2c:
         90:95:d8:d5:21:a9:d1:c2:7d:f7:1e:09:9a:8d:4c:16:f1:ea:
         c1:29:79:b4:96:1e:21:25:1f:4e:69:60:3d:c1:f8:fc:e0:12:
         5f:4d:fe:24:32:c6:f3:f6:8e:ea:4a:ae:31:08:9b:22:1c:b4:
         6b:0d:07:1e:14:cb:b3:53:a8:6d:22:ca:6f:f8:99:18:be:7a:
         9b:cb:2f:f5:86:59:b9:e1:da:b2:c5:8b:a2:74:b0:ec:37:e2:
         b1:f4:34:8d:97:e4:ba:2e:64:4a:b8:4d:88:08:3d:4c:24:b0:
         48:fc:40:25:1c:30:a8:88:7a:14:02:33:7f:b5:69:c1:40:70:
         08:bb:6a:7a:78:0a:7f:ab:82:8d:20:fc:23:5e:51:6d:12:f2:
         3f:35:e3:b5:75:e6:2e:84:0f:9f:6c:62:52:83:a7:5d:e2:10:
         72:32:18:57:95:cf:0c:60:0a:89:d8:fc:81:fc:5c:cb:29:70:
         93:cd:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:24 2026 by rpki-client