This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File:                     bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier:          WnRg7dX2+e5HMYgRuZkjPsLkoGU02vuXOWRZa+T190o=
Subject key identifier:   1F:BF:8E:15:15:2A:D4:AC:9E:45:A3:EC:B0:E8:EC:26:A5:6F:76:9B
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer:       /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial:       019C42EB1C383E38321FDF1A8E9F1663C4B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number:          1266
Signing time:             Mon 09 Feb 2026 15:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:30 +0000
Files and hashes:         1: Nppx-_HytezaO7OOnUHi3r0aYuY.roa (hash: EooK0hyWHN5rfWystpxx1iBOSlykoNCoHvC6SpxnsDQ=)
                          2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: ygvNY5+LaQUhoAq/Ybn2bG2RRlg/oL9/uMRTvAXxOMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1c:38:3e:38:32:1f:df:1a:8e:9f:16:63:c4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
        Validity
            Not Before: Feb  9 15:00:30 2026 GMT
            Not After : Feb 10 15:00:30 2026 GMT
        Subject: CN=1fbf8e15152ad4ac9e45a3ecb0e8ec26a56f769b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:07:e4:ad:f2:ff:32:fa:1d:4f:2e:a8:2c:
                    1b:4f:23:ef:89:f3:22:66:d8:86:4b:1b:48:c4:d9:
                    08:7f:0b:69:38:68:38:74:a5:6b:6a:00:a5:bf:57:
                    f5:b0:d2:de:8a:27:a0:32:b5:96:6b:36:ae:33:bf:
                    21:ff:58:3b:7d:be:8e:c7:81:a1:9c:3a:5e:8e:41:
                    6d:5e:c0:14:e2:b7:90:c9:69:e2:63:9c:3f:08:d0:
                    2c:28:1d:b9:67:e7:57:3a:61:1c:6a:a8:55:b9:c6:
                    b4:82:74:68:84:70:b4:d5:1e:9f:33:99:de:27:da:
                    17:92:40:f1:b4:71:39:34:0f:58:c7:38:14:36:9e:
                    90:31:8f:ef:b4:01:9f:22:ad:fc:84:b3:86:eb:36:
                    73:f4:c2:40:18:54:86:06:a1:f6:87:d6:fe:0a:42:
                    00:6a:c9:65:61:4d:25:c6:10:e5:bc:1b:2d:15:34:
                    c4:c4:da:73:06:32:53:69:37:73:83:fd:6b:6a:40:
                    58:af:15:a2:06:df:c9:1a:1a:2f:85:df:5b:6b:ec:
                    47:c4:3d:e8:a3:8d:9b:47:4a:32:dc:7b:ef:56:65:
                    57:ae:28:ac:34:1a:bb:6e:ad:80:ab:36:a8:66:41:
                    cb:39:23:e2:86:49:da:a4:0d:ed:11:11:3d:2e:bf:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:8E:15:15:2A:D4:AC:9E:45:A3:EC:B0:E8:EC:26:A5:6F:76:9B
            X509v3 Authority Key Identifier:
                keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:66:d4:21:ff:11:92:4e:88:4a:3a:b0:f0:c1:2e:ed:b5:
         3c:0d:1b:ed:88:83:9b:ec:1c:48:32:f1:26:2b:da:ca:e5:bd:
         01:98:aa:f6:3a:30:40:52:d2:97:bc:02:b3:c0:12:05:7a:15:
         7d:fc:c7:13:9b:d2:8c:f3:e7:25:6d:28:2b:c6:6b:2f:db:1c:
         00:7c:57:8c:8d:c5:d3:0b:e5:da:98:6d:34:4b:80:d7:64:b2:
         23:c2:94:83:cc:f9:9b:0e:98:d2:91:b8:d4:bf:eb:ef:2b:00:
         84:68:cf:cd:b4:14:e1:b2:e1:3a:96:96:b7:59:31:d6:f3:cc:
         2b:d2:c0:6f:82:58:9b:95:a3:ac:73:dd:4b:fb:64:31:58:47:
         8c:63:47:51:5c:97:bc:08:1e:99:74:67:2d:5e:0c:16:39:9f:
         1e:86:57:34:8a:2c:42:27:cd:b3:49:d6:7e:e8:01:36:05:8e:
         39:89:ec:cf:8a:52:e0:48:e9:7d:4e:39:46:9d:93:b7:50:fc:
         c7:10:05:9d:e3:86:d9:3f:ac:62:1d:41:7f:e2:7f:b0:3d:09:
         2a:8c:81:39:06:26:6a:26:b6:db:a0:3a:51:c6:cc:1d:5e:5a:
         96:b9:eb:8f:81:37:30:a1:cd:0a:4f:3d:82:06:27:5f:b7:ba:
         54:96:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:17 2026 by rpki-client