This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File:                     bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier:          zv+UWQ7bJr/6/w8A8OYccpvIttcXDlCRPeTMgwLyrIc=
Subject key identifier:   2B:FA:BE:6F:38:1D:81:B2:C0:BB:86:3A:2A:F5:56:75:6A:DB:BC:48
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer:       /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial:       019C42462FCB2782061E9EE43E1386BC779A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number:          0991
Signing time:             Mon 09 Feb 2026 12:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:21 +0000
Files and hashes:         1: 2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa (hash: qGAsY/mj+KUshvP9IGbzdbP+lJhmdQPEPt6/HveTaYk=)
                          2: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: qNQRz+YClAO3ZrI3ARQKwhVbaxXTWZ4gvkXW24IlFbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2f:cb:27:82:06:1e:9e:e4:3e:13:86:bc:77:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
        Validity
            Not Before: Feb  9 12:00:21 2026 GMT
            Not After : Feb 10 12:00:21 2026 GMT
        Subject: CN=2bfabe6f381d81b2c0bb863a2af556756adbbc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:2a:48:8d:1f:a1:e7:9f:b0:95:77:76:14:
                    9d:88:a6:37:0c:b6:01:84:ad:1f:ca:36:87:ab:be:
                    1a:5a:27:52:04:45:7c:28:c2:53:d3:74:c7:b1:06:
                    d9:e4:cc:93:6a:38:66:70:a7:4c:5f:11:d9:61:a7:
                    cb:7a:cb:06:5f:de:be:34:7b:8f:07:f0:d8:19:31:
                    a7:8e:d1:8c:1b:c6:e5:21:2b:b3:4d:5e:55:98:fa:
                    f2:be:e3:24:52:e2:9e:38:19:d3:43:34:ee:95:ac:
                    57:9d:00:38:83:c5:a4:6d:0e:2f:53:a6:24:d9:21:
                    6b:41:1b:c7:f8:5d:4b:c9:a7:34:75:f5:60:32:a4:
                    c3:69:15:44:76:f8:44:a1:c6:30:72:95:3e:aa:fb:
                    d7:43:f6:1b:d3:68:21:5f:2c:92:2a:e5:dd:cf:c0:
                    17:70:b9:8d:cd:0f:e6:de:18:3f:7f:46:24:06:2e:
                    06:fd:f8:06:b7:54:34:54:21:a5:6c:65:04:70:6c:
                    dc:3e:3e:e4:6e:81:b3:93:08:a7:c6:da:df:33:cf:
                    2f:ef:52:26:3b:ff:20:24:be:eb:ca:7e:27:5f:19:
                    53:6b:33:7b:77:48:1c:7b:da:47:7f:1c:64:0f:f4:
                    c5:46:a8:fe:2f:e4:76:05:c4:e5:43:a2:c5:e3:78:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:BE:6F:38:1D:81:B2:C0:BB:86:3A:2A:F5:56:75:6A:DB:BC:48
            X509v3 Authority Key Identifier:
                keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:79:8d:37:b5:14:41:5f:fd:b6:d7:b3:9e:a3:f0:b8:69:
         a9:c1:cf:cc:0b:a6:0e:3d:5c:95:f1:c0:89:8f:a9:22:47:ac:
         6a:f5:5b:51:fa:7a:59:73:f7:b3:19:7f:7b:cc:e2:80:ad:aa:
         4c:42:88:6f:3e:a1:f5:c9:fa:15:62:15:8a:34:c6:9b:ec:a8:
         01:9b:9e:a0:4b:9a:06:d6:b8:9f:67:ff:4e:16:0c:c6:a5:58:
         dc:55:10:f9:31:3e:9f:d1:0a:d8:48:6e:6e:ef:60:d3:19:81:
         e9:aa:57:3b:c8:34:d0:66:98:b6:89:7e:2a:15:27:53:85:61:
         03:1a:09:9f:b5:8d:91:38:4d:f4:7c:4e:a6:31:e4:ff:42:4c:
         81:aa:e0:be:e5:52:46:78:60:a2:95:37:40:9a:28:c4:2f:97:
         47:3b:95:96:6b:95:57:44:72:a8:50:ea:e8:26:8a:c2:02:03:
         ae:e4:b4:25:0f:3e:69:13:cf:a5:7b:6f:2f:4c:70:a0:c0:40:
         d8:51:13:cd:f6:3a:0d:47:18:d2:09:19:15:ee:b3:e7:4e:50:
         32:c0:50:47:e4:00:43:1c:0d:52:f7:27:35:2c:b5:9b:19:f5:
         0c:bb:f6:b2:89:34:cd:13:d7:8d:05:db:a3:36:05:9a:ba:1c:
         15:87:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:55 2026 by rpki-client