This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          IG32e6nDhUmejAr/OmQNnwo+R0eQps9NzS868Iz+Cz4=
Subject key identifier:   5B:B4:A5:6C:72:5C:FF:D3:B9:10:80:AA:3F:B8:B0:59:CE:B4:94:E6
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       019C43226A328C8CD2C9E641BB2ECBC322B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          04C9
Signing time:             Mon 09 Feb 2026 16:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:54 +0000
Files and hashes:         1: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: KY4aF2BOdxlGbTB4GxWr1ydRHSie1eOjbA0Mrmx1BdI=)
                          2: BtnTg3UVtCotLWbUTHeLsZgdhVE.roa (hash: Sz+ixKVwiOEIj7coiYEtqiN5kz/+2rKd3V8d+a0dElE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6a:32:8c:8c:d2:c9:e6:41:bb:2e:cb:c3:22:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Feb  9 16:00:54 2026 GMT
            Not After : Feb 10 16:00:54 2026 GMT
        Subject: CN=5bb4a56c725cffd3b91080aa3fb8b059ceb494e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:c8:d4:9b:ab:43:22:d4:4b:57:2c:d9:46:
                    10:6c:7d:ac:b8:2b:45:39:d6:3e:1e:30:23:38:56:
                    56:2d:3e:ae:22:91:6b:71:df:39:1b:52:a5:b0:a4:
                    5d:3c:d8:ef:e5:dd:a6:78:d3:62:8a:35:ed:c8:80:
                    61:5a:d9:af:80:e8:bf:24:c9:84:27:66:0d:75:fa:
                    05:d1:b1:b0:d0:db:ea:5f:57:85:da:4a:f0:c4:25:
                    19:45:df:f6:e4:c8:78:b3:e2:e1:fd:1c:96:fb:ff:
                    8f:6b:89:3f:15:e4:13:a1:35:19:e5:19:35:b1:42:
                    b2:92:35:23:35:87:ce:da:f8:74:34:7e:7a:8a:74:
                    cb:5c:4d:54:05:a5:cd:25:f3:f7:04:6b:3f:ab:45:
                    5f:66:7b:ba:1e:4b:21:7a:ac:16:37:1c:97:14:da:
                    c0:5e:0b:bc:1b:43:9c:f5:36:5e:75:14:35:56:ed:
                    94:f2:9d:3c:4d:19:72:54:21:52:da:85:f5:48:4d:
                    52:7b:e9:88:75:c6:85:46:10:af:7f:3f:59:b3:94:
                    f2:a7:53:b4:83:44:24:91:dd:c0:8b:87:8b:15:4f:
                    c5:08:ab:00:54:f1:d6:c0:00:e0:31:5d:11:db:ed:
                    a1:a6:61:24:84:12:9c:69:b3:4b:59:93:23:38:4a:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:A5:6C:72:5C:FF:D3:B9:10:80:AA:3F:B8:B0:59:CE:B4:94:E6
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:35:4d:a1:e5:c3:0c:72:33:de:b7:e7:8b:88:8b:63:c9:9b:
         97:c2:41:73:27:15:07:82:db:71:67:51:4c:95:ef:ba:61:ab:
         85:d5:e2:98:10:78:48:bc:b5:02:01:83:02:74:5a:62:04:8f:
         a6:5c:cb:ee:d5:a0:b8:a7:f8:0a:b2:25:0c:c7:93:ca:69:61:
         24:81:ec:eb:e9:f5:37:71:de:27:35:cc:37:e6:0b:bd:1f:9a:
         24:d5:ec:cd:31:46:13:f5:17:f8:05:b1:d5:6c:a6:f1:04:6a:
         b2:1b:3f:d5:d0:83:c4:fd:79:83:50:64:3b:a0:62:dc:0a:7e:
         50:39:cd:21:1f:c8:22:8a:a1:9d:0e:f9:b4:5c:2f:a1:66:b6:
         a3:c5:fd:78:fd:c2:22:5e:92:f9:82:53:30:86:2d:87:46:bf:
         84:94:02:bc:30:d6:14:c5:0d:cb:69:7e:40:b8:b2:49:75:f2:
         98:f8:e7:0a:a8:c8:94:61:31:c4:0d:27:6b:56:d3:b5:d8:f8:
         65:3a:3b:d2:1d:bf:f6:53:f4:dc:a6:6a:76:65:ab:cb:3a:b9:
         26:92:83:45:20:56:81:c4:23:9d:b5:47:79:b3:53:9d:1e:ee:
         b9:9a:40:9b:aa:c9:52:c3:3e:fe:15:76:32:1c:08:ba:ff:b5:
         b2:ab:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:52 2026 by rpki-client