This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
File:                     _Bmp6bejYMnT_drVgPsSgllp7y0.mft (raw, json)
Hash identifier:          25yJVmVbH1CCxWhmQrycEiMkzDUP93W523uKBEKA8mE=
Subject key identifier:   C9:83:2C:1F:7C:72:95:4B:7F:A2:C8:8E:F3:6B:40:B1:F4:26:97:16
Authority key identifier: FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D
Certificate issuer:       /CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d
Certificate serial:       019C4322423E05A96F688E0AEE1F06A107C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
Manifest number:          0131
Signing time:             Mon 09 Feb 2026 16:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:44 +0000
Files and hashes:         1: _Bmp6bejYMnT_drVgPsSgllp7y0.crl (hash: 3+6BXKqv85er3VFcf6VZzHO+wemiCaYWtwPlybrYw+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:42:3e:05:a9:6f:68:8e:0a:ee:1f:06:a1:07:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d
        Validity
            Not Before: Feb  9 16:00:44 2026 GMT
            Not After : Feb 10 16:00:44 2026 GMT
        Subject: CN=c9832c1f7c72954b7fa2c88ef36b40b1f4269716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:30:63:1c:f9:32:94:9a:43:dc:1f:39:f1:
                    6d:77:84:84:f3:a3:c7:45:94:14:5b:67:9f:6b:c4:
                    e4:28:70:3d:44:bb:44:fd:09:fd:bb:af:05:76:bb:
                    0b:b9:58:d2:ca:a6:0c:56:f3:2d:a6:49:69:14:62:
                    40:c0:74:11:b2:e5:40:fe:4e:ee:11:44:51:d6:73:
                    6c:6a:4b:40:b5:f5:7e:75:c9:c3:12:38:f8:90:85:
                    df:0f:12:04:41:a7:c8:8b:86:a0:31:74:66:30:16:
                    9d:b7:38:ba:d8:84:07:a1:ff:fb:68:c7:9b:a8:38:
                    e9:7b:0c:52:49:24:8f:f1:9c:3f:39:72:c8:de:72:
                    e5:43:b6:95:b2:3d:85:17:07:67:57:75:58:81:a7:
                    89:09:5a:80:85:7c:79:32:08:02:9e:08:92:29:a7:
                    5f:e0:27:e7:5a:61:85:d7:6f:89:7f:84:80:bf:c8:
                    24:80:fa:bc:0e:6d:d4:34:5f:f2:a8:5e:3b:ef:a6:
                    78:28:8e:4f:60:e1:ae:00:65:f2:8e:30:5d:6c:c5:
                    2b:63:75:0f:d2:db:8e:03:2f:59:e5:e1:38:47:1c:
                    aa:e4:86:44:09:6f:83:e5:22:9a:56:85:74:8f:74:
                    42:4e:d7:7e:3b:40:89:c1:85:a5:6e:7f:8d:b4:d7:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:83:2C:1F:7C:72:95:4B:7F:A2:C8:8E:F3:6B:40:B1:F4:26:97:16
            X509v3 Authority Key Identifier:
                keyid:FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:dd:36:20:df:57:b4:00:5e:b3:57:f3:f2:e9:2f:d6:bc:
         1d:4f:9a:07:c2:b4:8b:53:f0:e5:ed:22:8e:4d:1a:cb:f3:e1:
         de:25:b0:e0:9e:93:69:f1:20:15:ea:2c:51:4d:7f:78:d2:fd:
         19:89:16:a4:c4:c4:40:d1:c3:ea:ce:32:a4:ac:68:7a:40:28:
         0f:08:74:23:61:56:8c:12:36:cd:16:6c:67:49:fa:fa:3c:9e:
         e2:a5:21:dd:a8:3b:07:e5:6d:e1:ca:66:8d:a6:94:28:3b:90:
         4a:93:64:10:06:45:a2:04:ae:29:b9:ac:10:2f:5f:71:0b:b1:
         9e:2a:c8:52:7a:1a:41:eb:a1:0a:3b:a8:94:0e:e4:51:a7:95:
         f5:1f:5c:da:32:7f:65:1c:ee:a6:4c:5a:d7:e7:bd:50:9c:17:
         e2:44:c5:a2:81:9d:91:37:04:bf:dd:2b:62:0f:2c:e2:45:da:
         b2:7d:53:71:6d:f3:86:8a:8d:a9:e2:25:4f:05:c0:7c:f0:87:
         3f:a6:dd:9d:97:3f:ca:ff:bf:b9:86:2a:58:ae:8d:ba:9d:d5:
         59:fc:fc:0f:d8:c6:d6:3e:5e:7d:3a:94:56:0f:49:ee:38:fc:
         2f:a2:52:e9:ca:74:74:1f:0f:65:36:09:8d:df:a1:91:9a:0a:
         57:53:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:12 2026 by rpki-client