This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
File:                     BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft (raw, json)
Hash identifier:          pGTBj7ewdKPpO3OA9swpTWiB1wmz+hZOZ30jsut3s0s=
Subject key identifier:   C4:0A:BC:06:ED:20:4A:E7:DC:8E:82:0C:4A:63:AB:82:AC:66:20:8A
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Certificate issuer:       /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial:       019C446C3D46A7DB2368FA46547B37B2A2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
Manifest number:          014D
Signing time:             Mon 09 Feb 2026 22:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:10 +0000
Files and hashes:         1: BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl (hash: 7GTgXajNr+ZeqW/jcMCtPsCvQQgCtDYThiERtduFEFQ=)
                          2: SHM8e5Xg0qhNz9SMmQfcefSeu0g.roa (hash: GCoJkdgRca4Rrppv2r1E0k+f0VE7P9HFtilI5l3TlKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:3d:46:a7:db:23:68:fa:46:54:7b:37:b2:a2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
        Validity
            Not Before: Feb  9 22:01:10 2026 GMT
            Not After : Feb 10 22:01:10 2026 GMT
        Subject: CN=c40abc06ed204ae7dc8e820c4a63ab82ac66208a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:ad:44:56:c8:c5:e6:4b:f2:d5:c2:34:cf:
                    8a:66:15:85:df:02:bb:54:06:06:c0:47:68:96:82:
                    02:77:4c:f0:ad:f0:02:20:00:d0:58:24:2b:06:dd:
                    52:35:cc:eb:3c:c9:75:95:da:61:a4:e2:1e:b8:ab:
                    72:14:b7:a8:dc:6c:ce:45:49:84:7e:59:bb:2c:d1:
                    01:d1:41:a1:ab:ea:98:ff:ef:72:7f:c9:d5:1a:a3:
                    b0:36:08:a5:6f:81:29:77:7b:8d:fb:87:a4:bd:bc:
                    fc:3f:09:ea:75:85:20:cd:64:d0:8d:ac:5e:67:07:
                    49:87:0e:d3:06:8d:b9:ca:c5:73:74:3a:06:14:c0:
                    33:97:02:10:2a:96:96:c8:96:1d:50:40:64:f4:0b:
                    cf:b0:2a:92:79:4e:9a:26:f2:5d:e4:93:8c:67:63:
                    0a:02:24:0a:6f:3d:96:20:87:c1:11:38:6a:fc:d8:
                    95:87:f2:d1:0c:c0:1a:b5:89:38:60:f2:c9:ec:fb:
                    73:ab:2b:8b:9e:1e:1c:bf:c4:06:35:db:d7:48:2a:
                    9a:3a:85:a5:85:e7:f0:62:fd:f6:4c:bd:c4:e5:bb:
                    e0:45:2e:b4:1c:b4:f0:6b:5d:0e:01:9c:b3:80:6f:
                    55:6c:89:1e:92:6b:14:8e:5e:3d:ef:45:85:c8:94:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0A:BC:06:ED:20:4A:E7:DC:8E:82:0C:4A:63:AB:82:AC:66:20:8A
            X509v3 Authority Key Identifier:
                keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:06:19:2f:24:3a:12:16:2b:e8:3e:8d:90:5a:6f:e7:c9:
         1b:22:f4:7e:b8:7e:e0:70:2d:ef:a0:03:6a:0c:c1:b1:d2:9d:
         64:b2:6e:0a:84:8e:fe:de:ff:93:f2:bd:34:3f:1c:dc:33:aa:
         0c:03:4c:3d:ee:88:b2:ef:1e:38:4f:5c:a3:12:62:19:0c:28:
         80:7f:6c:2f:c0:58:3f:95:4a:77:9e:1b:24:8f:c7:b5:d8:5a:
         be:f5:2d:3b:f4:5e:73:58:fb:21:6f:2d:e3:e3:9b:59:7e:8b:
         da:ed:b1:52:82:c6:a2:20:e6:05:1e:f1:77:1a:6d:26:a8:fd:
         f2:73:42:d5:c8:4c:04:e5:f8:b2:cd:9a:b2:87:4c:9c:c4:b9:
         ee:87:bb:ad:ae:df:9a:d4:9e:66:e3:53:7d:16:04:8c:59:94:
         98:01:e9:96:f3:d8:4c:a9:93:51:a9:16:d6:5d:f9:31:b2:33:
         25:f3:43:68:cf:d1:ba:6d:2d:7a:fe:5a:4e:78:a1:09:19:a1:
         54:62:4d:cb:e7:5d:f9:3e:7e:7d:b9:60:1a:d7:23:97:a8:a8:
         5f:84:7a:12:ef:39:3e:8b:8a:2f:38:35:cb:b8:d7:52:40:59:
         fa:da:3d:e1:f4:4d:69:2f:b5:77:45:57:bb:41:ca:af:4f:29:
         5f:bd:53:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbD1Gp9sjaPpGVHs3sqKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1
YWZiYWEwHhcNMjYwMjA5MjIwMTEwWhcNMjYwMjEwMjIwMTEwWjAzMTEwLwYDVQQD
EyhjNDBhYmMwNmVkMjA0YWU3ZGM4ZTgyMGM0YTYzYWI4MmFjNjYyMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7StRFbIxeZL8tXCNM+KZhWF3wK7
VAYGwEdoloICd0zwrfACIADQWCQrBt1SNczrPMl1ldphpOIeuKtyFLeo3GzORUmE
flm7LNEB0UGhq+qY/+9yf8nVGqOwNgilb4Epd3uN+4ekvbz8PwnqdYUgzWTQjaxe
ZwdJhw7TBo25ysVzdDoGFMAzlwIQKpaWyJYdUEBk9AvPsCqSeU6aJvJd5JOMZ2MK
AiQKbz2WIIfBEThq/NiVh/LRDMAatYk4YPLJ7PtzqyuLnh4cv8QGNdvXSCqaOoWl
hefwYv32TL3E5bvgRS60HLTwa10OAZyzgG9VbIkekmsUjl4970WFyJR4rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQKvAbtIErn3I6CDEpjq4KsZiCKMB8GA1UdIwQY
MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt
ZDJkYTUxN2E5NmZkLzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk
LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy8GGS8k
OhIWK+g+jZBab+fJGyL0frh+4HAt76ADagzBsdKdZLJuCoSO/t7/k/K9ND8c3DOq
DANMPe6Isu8eOE9coxJiGQwogH9sL8BYP5VKd54bJI/HtdhavvUtO/Rec1j7IW8t
4+ObWX6L2u2xUoLGoiDmBR7xdxptJqj98nNC1chMBOX4ss2asodMnMS57oe7ra7f
mtSeZuNTfRYEjFmUmAHplvPYTKmTUakW1l35MbIzJfNDaM/Rum0tev5aTnihCRmh
VGJNy+dd+T5+fblgGtcjl6ioX4R6Eu85PouKLzg1y7jXUkBZ+to94fRNaS+1d0VX
u0HKr08pX71TWQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:36 2026 by rpki-client