This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          wTdrmwem9Qkbp2Prjmbx/4r1/P5csQ0Blnw9UvC8jyg=
Subject key identifier:   54:29:47:29:7E:AB:17:29:2B:4E:B9:5F:F3:7B:DD:9A:DD:DC:FF:22
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       019C44DA18B4854240A5FCB59CB71F6A5686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          1814
Signing time:             Tue 10 Feb 2026 00:01:09 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:09 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:09 +0000
Files and hashes:         1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
                          2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: C4XT3zYkP4G/Xp2wSwOaPa2uwEkZ+wX5SE/iZs++3Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:18:b4:85:42:40:a5:fc:b5:9c:b7:1f:6a:56:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Feb 10 00:01:09 2026 GMT
            Not After : Feb 11 00:01:09 2026 GMT
        Subject: CN=542947297eab17292b4eb95ff37bdd9adddcff22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:bc:c4:dc:18:a4:fc:40:32:03:eb:aa:38:
                    11:cf:83:80:36:8f:3e:aa:ab:b5:2e:44:b1:96:d3:
                    57:45:4e:55:3c:5f:74:8b:7d:dd:c0:63:d5:46:07:
                    1c:83:ca:37:fc:77:20:28:68:5b:b8:00:7c:20:4d:
                    4b:92:64:88:69:7f:a1:9f:3e:b0:e7:df:64:c0:d6:
                    49:c1:3b:38:75:9a:e8:da:bb:f3:67:af:b0:02:68:
                    e1:38:e8:4d:5f:d4:06:51:19:6b:9a:1b:c4:a9:71:
                    d1:54:d3:60:b0:6a:43:42:32:c7:38:07:eb:c6:6f:
                    f1:9b:bb:06:a8:93:d2:7c:b5:6d:aa:49:7f:60:83:
                    0f:5e:7a:8a:36:57:66:fc:70:d0:41:17:3e:82:78:
                    11:83:22:b1:d3:0b:9d:2b:f9:d6:a4:92:22:fc:30:
                    7a:58:91:2b:b9:17:6a:b7:bf:8d:8c:65:8e:bd:24:
                    dc:4a:54:f6:49:eb:ec:77:65:48:27:ee:fd:8d:9a:
                    78:7b:60:e8:96:5f:13:aa:24:25:32:7d:73:16:1d:
                    07:c5:c2:f2:ac:f4:81:66:50:4c:c3:9c:98:8d:61:
                    d2:cf:73:55:bd:b5:11:db:38:b5:6c:c8:ac:b6:e3:
                    18:b8:d0:5b:d7:ce:ea:aa:59:be:a6:c9:5f:62:47:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:47:29:7E:AB:17:29:2B:4E:B9:5F:F3:7B:DD:9A:DD:DC:FF:22
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:de:7b:b2:23:26:05:6b:51:80:1c:ef:12:fd:4f:96:d0:
         0c:92:d3:59:8a:2d:0f:91:df:e4:7e:62:3a:5f:3b:57:76:68:
         92:84:a4:14:e3:39:79:9b:bb:34:3a:95:5d:cc:38:36:b4:7d:
         be:2f:96:ee:cc:70:0d:f9:60:b5:02:f7:81:8a:60:0d:48:17:
         6b:f1:89:ea:c3:11:7c:ea:dc:e7:dc:99:34:27:25:e5:aa:53:
         da:49:3d:50:f6:3d:34:7d:e7:21:43:90:d0:47:04:b1:5a:13:
         64:af:5a:ff:5a:33:09:c9:2a:db:1b:2f:bc:39:ed:24:8e:e4:
         e7:f8:22:da:04:17:85:83:37:1f:0d:0c:0c:34:11:be:e1:d3:
         ff:ed:10:99:1d:bb:b1:36:2b:cc:27:7e:88:4b:b6:f6:bf:75:
         c3:83:96:2c:3f:70:d1:9e:a3:97:3a:9c:be:05:a9:7e:e8:ee:
         aa:9c:43:24:83:8a:ca:64:bd:be:49:aa:80:b9:0f:69:66:48:
         91:6d:1f:76:df:51:f8:09:df:f6:d8:31:a5:37:76:e4:d5:e5:
         1b:f8:ef:0d:31:1d:c2:a9:15:81:9a:9a:fc:8a:be:91:54:28:
         69:21:59:c2:13:f9:d0:4f:79:2c:a3:73:34:11:8e:cd:a5:1e:
         ff:5b:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:48 2026 by rpki-client