This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          t5/TpTpeInCy3AERiqlsFfXAE7DXMe8BgRbyck2ctwo=
Subject key identifier:   B1:F9:8C:FA:1F:78:4B:FD:34:C1:E4:85:29:E8:8D:F0:D5:2B:21:9B
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       019C4321E9373FDEA8A6E0D345B642A6FA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          16C0
Signing time:             Mon 09 Feb 2026 16:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:21 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: jMA8gtnJGRmkbqD+/TW3+RIF2cIe5Yueqt9v4EBWNE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e9:37:3f:de:a8:a6:e0:d3:45:b6:42:a6:fa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Feb  9 16:00:21 2026 GMT
            Not After : Feb 10 16:00:21 2026 GMT
        Subject: CN=b1f98cfa1f784bfd34c1e48529e88df0d52b219b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:ec:0a:ce:d5:09:a4:7d:a1:08:f7:65:be:
                    be:c5:d3:72:01:bb:f7:66:29:13:85:71:54:35:96:
                    2a:88:c8:82:b6:1c:99:2b:c8:e2:34:17:17:9e:1f:
                    09:c1:5c:54:4a:98:57:be:a4:61:9e:29:ed:99:cb:
                    c3:c6:05:fa:b9:e1:a4:db:ad:02:30:3d:c4:a6:fc:
                    f1:10:ea:c2:2d:32:12:74:d1:da:8c:a0:07:e1:d8:
                    86:0d:a2:da:ce:94:9f:81:c8:2d:00:b1:90:02:56:
                    16:6d:d7:b1:6e:a8:5d:f9:f7:c6:60:f3:55:4f:d3:
                    e5:d3:42:69:b2:7a:62:ef:f6:42:8c:22:25:26:1c:
                    3f:35:a7:26:b1:92:cf:95:52:9d:cf:7b:d2:c5:48:
                    9b:a9:8e:77:28:32:f7:50:9b:17:02:b6:94:89:3a:
                    77:16:ad:50:de:94:35:4b:9b:b1:c8:ae:0d:bc:a1:
                    db:93:22:c3:cb:5c:e4:ce:f6:72:3b:d1:b4:d1:b3:
                    59:0d:99:7b:42:23:0b:9a:fe:8e:24:68:68:1d:26:
                    cd:4b:98:63:4d:3f:ae:bf:2a:a9:75:a9:53:b5:a9:
                    73:28:af:59:9d:07:35:dd:11:ae:9a:38:82:5e:b9:
                    82:fc:03:f0:dc:11:3d:c5:2f:b4:2f:39:23:1a:4a:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:8C:FA:1F:78:4B:FD:34:C1:E4:85:29:E8:8D:F0:D5:2B:21:9B
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:b5:a2:57:91:dc:54:6a:ec:cc:98:0f:94:42:4c:cf:62:
         95:20:fb:51:8a:9f:4d:c3:e4:2c:bb:0a:61:ae:f2:20:be:f3:
         ca:16:6e:90:3e:a4:48:6c:7d:bb:2f:65:f3:fa:fe:4c:dd:0a:
         ec:4a:30:06:e7:d3:31:b7:57:91:35:34:80:5d:54:f6:95:c1:
         51:1a:93:dd:58:ae:bb:2d:e4:da:89:27:62:60:00:24:9e:95:
         c4:43:cb:05:7e:67:a3:be:c4:2b:0b:e3:20:1c:d1:3d:26:d0:
         d3:c7:7d:d8:db:2e:75:0d:28:df:f6:3d:f2:fb:07:42:9c:08:
         15:04:06:db:64:87:19:f9:a7:6f:23:f2:5d:f8:78:85:88:46:
         1d:97:be:27:70:96:a4:2c:db:ed:f7:b6:97:f3:26:45:ca:72:
         4e:f1:5e:d4:2a:9e:db:60:70:3b:94:86:1d:a0:78:95:9e:4b:
         83:c4:f3:b7:3b:b0:b1:0d:de:e3:a3:68:de:bf:f6:08:d4:70:
         ea:04:71:a2:0b:67:81:5a:82:ae:18:b2:d5:93:a0:de:b9:44:
         c6:36:aa:d9:51:3d:ae:2d:89:2c:06:c6:82:4e:47:71:42:1c:
         e0:69:5b:f1:48:90:a6:37:d3:79:5e:d0:2f:51:dc:af:3d:6a:
         e8:e6:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:24 2026 by rpki-client