This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File:                     bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier:          25vGxEP08w/Sc3xZngbtgKNpH+4NnzvCF0GjEzoMj5U=
Subject key identifier:   79:70:2F:64:94:22:74:5F:25:32:11:E1:2C:44:D2:68:CE:35:D8:92
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer:       /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial:       019C42103F098E296478CAC2DFFABFE5F021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:26 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:26 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:26 +0000
Files and hashes:         1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: CS36G4lnRr9d/0TczlZjiyCDFSWVeAMlvFAUTQtW6Yk=)
                          2: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:3f:09:8e:29:64:78:ca:c2:df:fa:bf:e5:f0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
        Validity
            Not Before: Feb  9 11:01:26 2026 GMT
            Not After : Feb 10 11:01:26 2026 GMT
        Subject: CN=79702f649422745f253211e12c44d268ce35d892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:de:10:fd:e3:41:fd:5c:b3:b4:56:47:9c:
                    16:b3:04:84:a5:38:ff:fb:32:91:b7:42:7e:6f:ef:
                    39:72:20:e4:a6:1d:1d:f4:06:0e:e7:7f:53:3a:ea:
                    a4:e7:ee:74:16:84:19:5b:b1:92:23:c3:81:c5:b5:
                    44:18:4a:c4:80:0b:56:ad:2e:1d:eb:21:ae:bc:62:
                    cd:9d:02:74:40:8c:16:de:60:e8:e2:21:d0:60:5a:
                    da:3b:e3:28:c5:f5:b5:bb:45:12:ab:9b:ad:9f:fc:
                    4f:46:f1:4e:68:d7:53:f7:8b:61:90:81:08:3f:ce:
                    7f:da:48:7e:27:f3:fc:c3:c0:37:7f:78:f2:05:e6:
                    04:3b:70:3d:c1:3a:ad:14:e0:3f:f5:04:23:0f:a9:
                    ad:7b:4d:63:f1:e3:38:2a:1c:30:0f:5f:fd:4b:66:
                    ff:f1:cb:cf:85:2c:f7:eb:5d:bd:41:10:0c:0f:1c:
                    eb:74:ca:7f:90:42:a4:53:ec:7c:85:d6:1d:14:ec:
                    33:ab:f4:95:ff:b0:24:5f:ed:5c:4a:b7:29:d4:c9:
                    ac:7c:a2:20:f6:5c:8c:36:74:2a:88:7d:c3:72:88:
                    d9:6e:cd:85:74:6d:35:89:cd:fe:b5:22:8c:99:d6:
                    d2:fc:f9:15:2d:38:b0:9d:60:8f:f1:10:fc:6b:7d:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:70:2F:64:94:22:74:5F:25:32:11:E1:2C:44:D2:68:CE:35:D8:92
            X509v3 Authority Key Identifier:
                keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:38:ca:2c:dc:f7:33:db:fc:8b:e2:f8:8a:0c:23:a2:e5:
         b4:fd:f8:5c:d4:e1:85:f7:7e:98:6c:a5:b4:ef:fe:57:58:f8:
         e8:d8:01:63:99:78:a1:6f:e2:79:bb:88:d0:cc:f8:15:61:d9:
         da:70:80:74:c1:79:d1:80:f5:e8:a1:0c:64:c8:41:83:08:cc:
         f3:f3:f7:89:6e:68:3f:3d:90:ac:d8:c9:62:46:b8:8e:cd:4b:
         7c:cb:46:17:f9:11:65:5d:2d:04:aa:ab:48:1d:52:46:4c:6f:
         3b:0a:6f:3d:69:b8:40:9d:57:87:dd:cf:8f:46:3d:19:fc:0e:
         4d:8a:18:46:66:43:d1:c1:1b:87:83:50:53:35:0c:9d:9c:e8:
         59:a4:9d:c2:56:57:7a:44:14:24:21:73:10:05:a0:72:3e:c3:
         88:94:2f:fe:ab:59:eb:00:68:e2:03:30:22:72:12:3b:4f:59:
         8d:06:8e:ad:0b:6c:ef:23:f7:bb:08:df:41:33:aa:75:43:0a:
         7d:a5:7f:90:d7:84:46:ba:7f:8e:5e:9a:18:2c:aa:fc:22:fd:
         1f:e9:41:a6:cb:cf:83:bd:87:54:c6:77:6f:92:76:ea:6a:03:
         9c:90:68:d7:d2:b6:eb:65:f7:1b:65:26:7b:50:28:3f:e5:cd:
         d6:ef:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:54 2026 by rpki-client