This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          N+m84yYjkofXHzvVWfEqhHNL1LKtfvUcLVm1l4yedG8=
Subject key identifier:   C6:0B:F3:07:12:60:03:48:5F:5E:C1:8E:30:B8:00:29:DE:56:D4:6F
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       019C43C703CA1EC876C4BF6C59E2396853E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          066C
Signing time:             Mon 09 Feb 2026 19:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:41 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: LzxadfW/0jeQp30vkQ7HldhlqPpYdS0QdRsaho8BUsQ=)
                          2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:03:ca:1e:c8:76:c4:bf:6c:59:e2:39:68:53:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Feb  9 19:00:41 2026 GMT
            Not After : Feb 10 19:00:41 2026 GMT
        Subject: CN=c60bf307126003485f5ec18e30b80029de56d46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:6a:ba:45:8d:78:bd:6b:4a:c1:ed:00:4a:
                    00:76:a0:75:c9:db:10:3c:67:90:2f:38:9c:0e:71:
                    c5:aa:d4:b9:b4:f6:04:51:71:ea:73:fa:d8:08:06:
                    44:43:40:72:a8:a2:c8:1e:ad:84:5d:d6:b1:ad:d5:
                    20:ec:3d:11:1e:bb:ed:8f:61:c2:6a:2e:25:ca:45:
                    27:a3:c9:6f:e1:b7:28:bc:41:36:dc:fd:37:73:1b:
                    a5:14:f8:ea:d3:13:54:6f:a1:ca:68:bd:d5:dc:34:
                    2b:b2:78:f0:84:1f:32:c5:49:6c:a2:7c:07:76:a0:
                    d4:a8:fb:7c:77:77:b8:4d:8c:66:f9:c8:99:8a:c4:
                    30:42:54:f6:0e:b6:87:e9:58:fa:de:51:18:10:4d:
                    ad:ee:42:7d:e9:19:49:0f:34:ab:f6:4e:89:e3:08:
                    e7:ac:93:0d:74:14:69:df:31:d8:52:a5:6c:cc:0f:
                    77:97:78:fc:49:e2:e6:83:53:0e:ca:55:1a:05:68:
                    bb:3d:1a:9a:03:f4:65:72:c6:ca:ec:28:b6:73:6c:
                    9b:86:af:1b:4f:59:5d:05:13:da:7e:ee:ad:46:fd:
                    6c:d3:23:bd:3f:3f:07:fd:58:7d:6e:52:eb:8f:3f:
                    1b:3e:ab:ef:0a:ef:92:c4:c0:4c:e3:08:4d:0d:ff:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0B:F3:07:12:60:03:48:5F:5E:C1:8E:30:B8:00:29:DE:56:D4:6F
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:af:8f:f0:24:13:ec:01:2e:0e:83:59:d3:38:31:94:1e:a5:
         e7:7b:9e:4a:c8:cb:a9:5a:f3:60:86:21:c1:f1:f0:23:95:57:
         fb:21:ad:84:ec:37:8e:1f:3d:59:a2:b6:b4:af:1c:2c:ba:2f:
         76:d0:d4:81:16:a2:8a:f2:b4:e7:dd:41:ed:2c:ad:07:8c:92:
         53:43:ec:6b:9a:f2:31:0d:c4:c2:08:b0:f4:06:71:37:44:ff:
         14:49:22:55:ce:91:ec:73:0b:d2:96:9d:c1:35:0e:d7:5b:c4:
         ba:d0:5b:af:a4:20:10:db:fd:43:61:d2:6d:7c:5c:fa:c3:cd:
         53:a1:1b:50:cb:a1:b4:e9:65:fe:38:67:24:11:8a:5d:3f:97:
         49:2b:ee:98:19:12:55:4a:a1:84:fc:e6:2c:bd:06:b0:13:31:
         87:ec:98:ff:82:15:1e:af:19:34:05:9a:fb:5a:15:4e:3b:6c:
         89:ca:5e:82:98:3d:c4:81:52:54:8b:c5:2c:fe:7b:a7:d1:f1:
         43:9c:ad:2f:b7:d2:db:ea:52:16:16:bc:50:6b:a2:4e:91:d0:
         ba:e1:43:61:42:0e:16:d2:e9:bd:b8:24:e5:0c:75:5f:1c:3b:
         6f:40:ee:d5:eb:4e:e6:f4:e3:75:0a:77:31:e9:a3:d8:f5:4a:
         df:c9:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:38 2026 by rpki-client