This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File:                     bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier:          QshcXTj0rg4A/bfSdvSEWnxIw6fWTq88bmF0khI0JWM=
Subject key identifier:   66:FA:AC:F5:31:50:FD:9F:1B:B5:9A:26:48:CE:EC:30:BB:1D:41:69
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer:       /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial:       019C43228058075A020DCE70D83E23F962CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:00 +0000
Files and hashes:         1: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: cPs8jF/z4SgIF8i9UkQ8npqt6VFT/rbSKdl86Mz+cmA=)
                          2: p7Zx4z15h2rwCPWQo8voZZd_wjI.roa (hash: BFscIk+0smXBa3HZBMbzUtXRmH73v7OJ+r4F7QoLTTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:80:58:07:5a:02:0d:ce:70:d8:3e:23:f9:62:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
        Validity
            Not Before: Feb  9 16:01:00 2026 GMT
            Not After : Feb 10 16:01:00 2026 GMT
        Subject: CN=66faacf53150fd9f1bb59a2648ceec30bb1d4169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:5a:a3:72:7a:db:f9:97:53:59:d7:81:d9:
                    78:b2:77:fc:2c:e6:e1:a0:7d:cc:26:97:03:00:aa:
                    c5:8d:17:d6:98:03:27:4c:ff:f5:4f:03:c1:53:82:
                    35:b4:3d:72:8f:6f:e3:b0:71:38:e8:6e:48:a6:83:
                    e3:26:ac:5d:65:0f:25:8d:2c:15:ac:8e:2b:30:b9:
                    64:03:f9:57:eb:65:ba:2d:32:69:aa:1a:93:a9:3e:
                    df:f2:92:65:ab:79:6e:ea:31:ef:ea:cf:0c:d4:54:
                    38:2e:2d:0c:38:cb:88:88:50:db:57:1b:ff:12:e0:
                    2b:66:08:28:9e:9e:57:c9:10:f1:7b:e2:ea:2d:61:
                    85:55:27:99:15:00:8f:81:dc:99:84:2a:2f:f1:0e:
                    ca:03:49:70:6e:fc:b9:fd:82:08:6a:19:14:5e:9f:
                    61:0b:34:da:8e:29:38:fe:5c:11:27:e3:a6:70:8c:
                    24:42:1e:a5:dd:ac:06:40:a3:d3:10:a3:6b:1d:f9:
                    15:e9:72:fc:54:ba:4b:68:18:65:e8:8a:f9:c4:59:
                    05:f2:0a:f3:5b:e5:f4:8f:cf:94:ee:5b:40:67:ea:
                    3c:cd:1b:9b:d9:f4:a9:34:44:51:3e:a1:cd:d3:b5:
                    53:8a:4b:6a:b2:7f:b8:e1:cf:26:ff:19:6f:ef:33:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FA:AC:F5:31:50:FD:9F:1B:B5:9A:26:48:CE:EC:30:BB:1D:41:69
            X509v3 Authority Key Identifier:
                keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a2:9a:24:b1:89:0b:09:4a:88:f1:41:63:ca:84:b8:db:ac:
         09:d7:cf:b5:38:15:70:ed:9c:fb:89:5f:95:c6:7f:41:77:4f:
         f4:63:1a:ee:c4:a0:a1:a9:78:da:aa:93:5b:78:20:81:13:e9:
         1f:33:e9:a4:2d:ba:07:e9:da:9c:ec:87:31:ec:ad:2b:38:88:
         b9:92:c7:1e:c4:f0:59:7d:75:12:8b:6a:ed:8d:36:22:23:af:
         65:76:5c:b4:80:21:fa:bd:a4:bf:45:20:73:10:42:26:d4:0b:
         25:64:2f:44:10:f3:2a:d3:bd:46:b7:ae:92:bd:f6:2a:4a:8d:
         de:01:41:a7:a4:6b:4d:a6:8a:05:19:7d:41:0b:fc:6e:82:e9:
         e3:03:7d:2c:81:bc:3c:ee:c8:4f:22:42:4c:b0:3e:48:17:db:
         97:cf:80:f8:60:45:a1:e8:b8:1b:b6:86:f2:57:b0:88:60:3c:
         64:72:ad:b6:19:ab:9b:29:ad:4f:51:34:cb:5e:c8:99:92:d2:
         a0:5d:a0:c6:a3:1b:9b:2a:6e:94:6a:20:16:a5:4f:6a:d7:6d:
         ae:77:b4:b7:36:62:e4:da:f2:e9:1f:ab:3a:58:ed:ec:bb:9c:
         06:65:8d:0e:28:bc:0c:40:85:5b:6e:99:3d:0f:2b:01:38:cc:
         9b:66:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:05 2026 by rpki-client