This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          piLKcPLFwrgujNpf0CoFeZkENjI4WKPmJqtPOnSoSnE=
Subject key identifier:   E5:3C:2B:60:9C:BA:DD:0E:96:C9:E0:D5:78:7A:42:22:ED:6D:7A:67
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       019C3B698A8245FA8A0212C76DFCB8B1676A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          180D
Signing time:             Sun 08 Feb 2026 04:01:38 +0000
Manifest this update:     Sun 08 Feb 2026 04:01:38 +0000
Manifest next update:     Mon 09 Feb 2026 04:01:38 +0000
Files and hashes:         1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: lKFq8QON0CyqwzpWtyjI6s9Q8PpgKItUbZWaSJbXUlU=)
                          2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
                          3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
                          4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
                          5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
                          6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3b:69:8a:82:45:fa:8a:02:12:c7:6d:fc:b8:b1:67:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Feb  8 04:01:38 2026 GMT
            Not After : Feb  9 04:01:38 2026 GMT
        Subject: CN=e53c2b609cbadd0e96c9e0d5787a4222ed6d7a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:ef:9f:98:9b:12:fa:c0:a3:70:56:1a:f4:
                    27:09:39:c9:d2:bf:bc:f4:cb:20:1d:65:9a:a6:5a:
                    34:19:c8:0b:78:31:3e:b8:eb:2a:37:35:51:a5:25:
                    bc:7a:0a:81:51:69:bf:e6:9f:3c:8c:41:76:fe:d4:
                    2f:8e:7e:a3:e5:de:0a:f4:c8:8b:d3:8c:47:b0:67:
                    57:84:ec:6e:0e:79:c9:7c:19:0f:2e:66:f2:f5:19:
                    98:eb:ef:4f:0d:0f:16:e0:ea:51:45:9d:a9:57:d5:
                    7d:d7:f4:60:c4:c9:9a:97:16:32:9e:3c:84:c4:43:
                    1b:e8:a3:ab:f3:aa:46:62:f1:cf:48:f0:bf:a9:ac:
                    07:59:c8:c7:35:2c:15:7d:99:e2:94:53:76:cf:9e:
                    95:64:9c:58:ff:d5:f1:7e:e1:0e:ba:39:2e:59:ef:
                    9f:5d:95:61:4e:8e:e7:b7:ea:b9:01:2f:72:77:16:
                    fa:e8:4c:0b:1e:18:e9:bb:a2:42:01:81:12:6a:3c:
                    a6:bc:2e:34:07:79:c7:5f:85:c9:c7:2a:b7:0b:92:
                    4e:62:e6:11:38:c0:f2:3e:99:cf:b5:a3:07:7d:e1:
                    ee:c2:0b:f9:86:89:47:40:65:6a:c6:32:70:fe:80:
                    3d:ce:1f:da:c4:08:55:66:ae:59:f7:1d:4b:8c:94:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3C:2B:60:9C:BA:DD:0E:96:C9:E0:D5:78:7A:42:22:ED:6D:7A:67
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:10:c9:5a:b1:b6:2a:19:8a:3e:7c:5b:3e:b8:de:6f:9d:7b:
         28:b0:33:db:40:7e:d5:c6:b8:52:a7:1f:2f:6b:7b:bd:be:48:
         fa:51:c2:fa:17:fd:f3:64:1e:b7:aa:4a:7f:91:2c:ae:23:80:
         6c:1e:6b:ce:66:7d:ea:b0:f2:45:86:1d:a4:2a:ec:9d:ae:eb:
         42:b0:88:68:a9:50:7c:46:0a:50:e1:3b:98:fc:81:6a:4f:9f:
         44:19:8d:81:bf:a3:aa:e9:39:22:f6:cd:d9:30:f6:e0:b1:73:
         0a:a6:8d:44:9e:5f:3c:eb:9f:35:1e:ed:d6:15:97:57:39:3a:
         35:af:68:53:25:dd:67:df:56:12:2e:61:bc:39:c1:56:48:3b:
         14:21:14:c3:57:6b:2d:55:ab:17:1e:3b:6a:cc:85:6b:d2:5a:
         60:19:aa:83:58:1c:6b:6c:40:a2:62:39:50:5e:65:97:29:39:
         c3:a5:ef:d5:00:ba:93:be:5c:d9:51:b9:3f:66:0f:58:ec:ef:
         bd:b1:3b:50:c9:34:b7:36:bf:88:00:16:32:8c:e4:6c:1a:6a:
         ac:94:69:1f:48:8e:f3:d3:11:58:5d:1c:83:10:f1:14:77:a9:
         77:ca:61:0b:92:44:3e:5f:20:2f:7f:dc:23:b7:01:4d:a6:57:
         c3:ab:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 06:53:15 2026 by rpki-client