This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File:                     BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier:          osryDT5NbMoE9J2HP++JlUNwqTnnt8T5nBTRLB2FOzw=
Subject key identifier:   6E:F4:12:C2:B2:3B:41:AB:5E:ED:0B:59:41:B6:62:EB:EE:F9:A8:B3
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer:       /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial:       019C42B3F847DD8D5C5EF219992A1324C271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number:          0F2D
Signing time:             Mon 09 Feb 2026 14:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:16 +0000
Files and hashes:         1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: CDVjp/oSNf1eiI7N+09nClXnKxSKOVbtVK2WKRBpnWM=)
                          2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f8:47:dd:8d:5c:5e:f2:19:99:2a:13:24:c2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
        Validity
            Not Before: Feb  9 14:00:16 2026 GMT
            Not After : Feb 10 14:00:16 2026 GMT
        Subject: CN=6ef412c2b23b41ab5eed0b5941b662ebeef9a8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:b8:ce:ab:e9:a6:b7:45:73:4b:ed:fa:0b:
                    76:01:97:0c:46:9f:35:1f:97:6b:a4:d3:87:f2:d6:
                    b0:b8:28:84:09:e0:17:fc:0f:3c:b9:55:4d:5a:cb:
                    bf:0a:a6:ba:c5:02:43:c8:a9:ae:95:f5:93:36:c3:
                    f2:6b:d5:76:3f:41:fd:fd:af:bf:9f:02:3d:02:28:
                    94:1b:5a:41:16:f9:d7:22:9c:ab:c5:dd:29:84:99:
                    de:43:c9:3d:50:dc:01:d5:57:cb:c3:01:4b:18:c6:
                    b9:ff:04:f4:7f:69:ae:5f:f1:34:c3:f4:c4:94:4c:
                    ce:ac:47:dd:b4:42:ba:52:f9:a2:7b:dc:6d:0a:6c:
                    d2:15:01:3c:01:cb:fe:3f:cc:76:6e:a2:4f:a0:4a:
                    0b:a4:2d:db:ae:ff:4e:91:ba:fe:dd:c8:b6:fb:6b:
                    5a:f0:1a:ab:32:26:3f:9c:86:19:43:98:62:c5:67:
                    ce:c3:d2:de:ad:24:f3:a8:43:a8:f9:3a:b7:ca:cd:
                    42:41:65:16:a6:57:88:ef:81:ab:f7:36:4d:e7:5b:
                    9b:1b:b8:ea:37:e4:79:b2:e4:02:b9:eb:69:05:3b:
                    c8:4c:c1:0f:6d:7a:e4:9f:07:8f:d4:29:cb:4f:fb:
                    b1:4a:5e:4e:30:8c:db:64:8e:fe:03:c9:e8:81:13:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:12:C2:B2:3B:41:AB:5E:ED:0B:59:41:B6:62:EB:EE:F9:A8:B3
            X509v3 Authority Key Identifier:
                keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:70:b4:de:95:8f:ed:d1:d5:75:f9:f4:8d:62:5f:6e:74:
         84:99:75:8e:9c:b3:45:7e:70:e9:15:63:d2:07:44:c8:30:5a:
         6b:c1:a7:34:7e:a6:31:54:53:68:76:9c:59:c9:47:ed:d5:42:
         0b:46:81:92:a1:de:7d:63:6f:97:06:68:27:9c:b0:c2:e8:18:
         1c:6e:87:04:83:10:39:03:1f:a1:77:22:f9:61:64:ea:e7:98:
         f5:f0:cf:6b:76:0a:8b:8e:e2:85:c4:cb:ec:11:6b:7e:3b:4d:
         a1:03:f8:16:5b:d3:54:d8:e2:3c:0e:75:6c:13:23:01:c6:cd:
         17:92:9a:a1:7b:07:92:a4:5e:d2:07:6a:d8:4d:b7:54:bb:22:
         a3:f7:e7:ea:e3:1c:c9:3c:4d:42:b8:fd:1a:2f:d1:e2:2e:1c:
         04:df:4b:d5:7f:e5:24:a4:3b:30:34:dd:b8:84:e7:f6:f5:d9:
         42:fc:f0:fb:f7:07:73:d8:9c:a8:e2:38:45:fc:bc:4f:ec:53:
         49:1f:16:5c:06:54:a2:15:3d:4c:85:92:85:bc:a9:bf:98:a3:
         09:c2:d9:a8:57:1a:b9:35:c3:19:6c:cf:ed:29:49:fd:7c:b4:
         56:b1:ed:27:22:8f:2c:0e:3c:36:b4:3b:64:4b:32:e9:70:22:
         93:ef:75:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCs/hH3Y1cXvIZmSoTJMJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTY1YjgzZDIxMzE1ZjhiYTc1NzhlODhiZGYzODEzMjk1
ZGRlMGEwHhcNMjYwMjA5MTQwMDE2WhcNMjYwMjEwMTQwMDE2WjAzMTEwLwYDVQQD
Eyg2ZWY0MTJjMmIyM2I0MWFiNWVlZDBiNTk0MWI2NjJlYmVlZjlhOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq24zqvpprdFc0vt+gt2AZcMRp81
H5drpNOH8tawuCiECeAX/A88uVVNWsu/Cqa6xQJDyKmulfWTNsPya9V2P0H9/a+/
nwI9AiiUG1pBFvnXIpyrxd0phJneQ8k9UNwB1VfLwwFLGMa5/wT0f2muX/E0w/TE
lEzOrEfdtEK6Uvmie9xtCmzSFQE8Acv+P8x2bqJPoEoLpC3brv9Okbr+3ci2+2ta
8BqrMiY/nIYZQ5hixWfOw9LerSTzqEOo+Tq3ys1CQWUWpleI74Gr9zZN51ubG7jq
N+R5suQCuetpBTvITMEPbXrknweP1CnLT/uxSl5OMIzbZI7+A8nogRNYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG70EsKyO0GrXu0LWUG2Yuvu+aizMB8GA1UdIwQY
MBaAFATmW4PSExX4unV46IvfOBMpXd4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjct
M2U3ODFkYzFlN2U5LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjctM2U3ODFkYzFlN2U5
LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDpwtN6V
j+3R1XX59I1iX250hJl1jpyzRX5w6RVj0gdEyDBaa8GnNH6mMVRTaHacWclH7dVC
C0aBkqHefWNvlwZoJ5ywwugYHG6HBIMQOQMfoXci+WFk6ueY9fDPa3YKi47ihcTL
7BFrfjtNoQP4FlvTVNjiPA51bBMjAcbNF5KaoXsHkqRe0gdq2E23VLsio/fn6uMc
yTxNQrj9Gi/R4i4cBN9L1X/lJKQ7MDTduITn9vXZQvzw+/cHc9icqOI4Rfy8T+xT
SR8WXAZUohU9TIWShbypv5ijCcLZqFcauTXDGWzP7SlJ/Xy0VrHtJyKPLA48NrQ7
ZEsy6XAik+911Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:30 2026 by rpki-client