This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File:                     BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier:          Jx7OcnP7m8P1hopdffrISQvXcByQR235dkZNJAzM1gU=
Subject key identifier:   F6:3A:F6:0D:A9:ED:E2:BE:07:A0:81:0B:9E:B0:DE:C7:56:08:97:50
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer:       /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial:       019C4133CAA11208D16CE431185AC5625490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number:          1528
Signing time:             Mon 09 Feb 2026 07:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:39 +0000
Files and hashes:         1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: HAk6xdc+/51I8h2s3UKrTMNEC7KbdLurjx1YA16jWGU=)
                          2: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (hash: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:ca:a1:12:08:d1:6c:e4:31:18:5a:c5:62:54:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
        Validity
            Not Before: Feb  9 07:00:39 2026 GMT
            Not After : Feb 10 07:00:39 2026 GMT
        Subject: CN=f63af60da9ede2be07a0810b9eb0dec756089750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:b1:c6:7b:af:87:e5:f0:4e:1c:a8:fe:f2:
                    04:c1:63:e5:46:01:8e:76:2d:66:a7:2d:f0:ff:cd:
                    b6:8f:c3:1d:9e:ac:f6:d6:55:65:aa:35:b0:b6:92:
                    f9:d6:e5:15:32:7f:78:22:6d:43:08:cb:5d:7e:fd:
                    42:06:4d:5a:81:48:dc:06:4a:4d:92:17:86:e6:53:
                    44:f1:5d:c1:1e:bf:c4:3c:bd:99:4a:e3:37:b6:26:
                    cc:d2:ac:b1:00:c2:6d:ea:8e:a9:63:b7:b3:3e:3c:
                    4a:15:98:1f:a9:5c:f5:25:c7:0e:ac:08:8e:f1:d3:
                    23:c2:30:35:4b:d0:30:77:a4:50:9b:69:10:b7:c8:
                    fb:16:47:1e:61:1f:39:16:2a:9e:2c:b9:93:14:3b:
                    1a:14:31:6e:b6:d0:0e:38:02:de:9f:db:e0:9a:dc:
                    95:d2:e4:af:ac:92:d4:17:5e:99:61:5b:1b:2a:f9:
                    20:1a:bf:ee:0b:2c:d1:98:5b:3a:d1:d2:e4:9b:70:
                    b5:72:c6:ae:a9:7e:31:90:ed:82:94:61:01:c4:45:
                    63:07:09:73:71:c2:59:04:3a:be:c9:d0:1d:62:dd:
                    fb:26:45:b2:c9:66:89:a7:1b:9a:72:9b:19:81:26:
                    28:d6:15:3e:0d:88:bc:5f:31:29:12:5c:72:58:22:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3A:F6:0D:A9:ED:E2:BE:07:A0:81:0B:9E:B0:DE:C7:56:08:97:50
            X509v3 Authority Key Identifier:
                keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:e5:ba:70:80:3c:22:18:7a:70:50:99:02:ee:da:25:d2:
         51:98:76:44:9e:f4:4f:f4:47:a9:8e:cf:7a:53:25:21:bf:56:
         b9:dd:e4:0c:89:b4:d0:40:af:8f:11:86:7d:9b:7d:a8:dc:67:
         00:1b:66:dd:00:4e:cd:af:bf:8c:89:43:9e:38:ee:2e:c1:d8:
         8c:37:aa:64:a0:2b:e9:cf:48:48:91:1d:a6:62:06:42:80:e6:
         17:34:31:4d:69:6d:04:e7:84:2b:71:68:3f:3f:54:d8:60:c9:
         10:15:85:6f:70:d2:a7:76:92:70:c1:c9:6d:e5:77:f8:eb:7f:
         79:01:53:30:dc:4f:ae:4a:53:7a:43:85:9e:84:4c:c3:3c:21:
         d0:00:a0:38:48:e8:7c:11:45:a9:e6:9c:d1:74:88:f3:5b:c1:
         82:21:39:71:f5:e3:c2:44:cb:ab:5c:c9:3b:f5:21:bf:16:02:
         91:24:d6:ed:91:56:f4:a9:48:da:5b:b5:7a:f7:99:0e:c0:c6:
         b9:c5:30:94:a7:08:aa:aa:d0:b3:1b:b2:b7:3b:58:01:ec:e3:
         81:6a:f9:ff:79:b7:23:39:dd:66:08:5e:43:c8:82:14:1b:2c:
         b2:5d:00:d0:6c:e9:c0:92:ed:6d:0f:ab:3b:02:61:50:de:cd:
         1c:1a:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:32 2026 by rpki-client