This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
File:                     B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json)
Hash identifier:          S5PtR2Klwh8Z52u3Ca1F/E8BwayUBdaGqzD6gT9U4vg=
Subject key identifier:   B2:98:69:BB:95:6D:22:34:BF:93:63:F4:38:57:58:49:F3:28:FA:1F
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Certificate issuer:       /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial:       019C4435193750173630426303CC947E0E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 21:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:56 +0000
Files and hashes:         1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: T9ldCxkupFKCJAL3uJGjiOW/YlOew5cd+ONvS4bDFTA=)
                          2: vWaSI97YDOehiwDX9EtCVi1TGr8.roa (hash: qObHiQ/zhXEaIaP9YgXMKfb5GBmcR4gdeH2I3WxGujw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:19:37:50:17:36:30:42:63:03:cc:94:7e:0e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
        Validity
            Not Before: Feb  9 21:00:56 2026 GMT
            Not After : Feb 10 21:00:56 2026 GMT
        Subject: CN=b29869bb956d2234bf9363f438575849f328fa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:23:2d:42:ff:39:a2:f5:5e:b4:71:b8:16:15:
                    00:9b:9c:e2:4f:20:b6:b1:bd:06:3b:31:f4:f4:4f:
                    fb:2d:35:bb:c0:a9:63:6d:c8:64:9c:7e:13:c4:f4:
                    ce:fe:ff:b2:00:9e:3f:80:2e:d9:c5:66:99:96:0b:
                    b9:1b:20:68:e2:67:7d:54:d3:12:9b:89:93:3f:1f:
                    6e:a5:ff:44:4a:de:ff:de:67:1b:88:f1:7f:0c:bd:
                    7c:56:0c:18:33:71:8f:22:6f:0b:dc:0f:a9:09:89:
                    a2:65:a3:15:3f:56:c9:ee:68:b6:44:61:e2:14:5a:
                    93:6e:79:72:7a:f4:5d:e6:5d:e2:0e:1f:16:73:90:
                    ef:0a:08:09:5b:93:6a:b6:e8:83:ea:2d:40:2e:36:
                    90:ad:5f:c2:ad:6e:40:ad:b0:6f:1b:09:70:23:e1:
                    3f:dd:c5:41:39:ba:f8:ee:de:5c:ee:56:b6:f8:44:
                    bd:b2:59:a1:f2:cc:4a:28:f4:81:ae:47:cb:23:0e:
                    8b:ba:48:e3:ce:1c:93:f7:ef:dc:1b:08:76:32:95:
                    28:7b:b7:29:a5:21:f7:82:4d:39:ad:72:29:11:09:
                    34:35:6f:60:f6:a2:69:b0:fe:bb:81:ee:00:9a:c3:
                    59:df:40:c4:5b:de:c1:b8:f1:50:4c:07:80:92:35:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:98:69:BB:95:6D:22:34:BF:93:63:F4:38:57:58:49:F3:28:FA:1F
            X509v3 Authority Key Identifier:
                keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:cf:98:a2:c5:bc:02:6b:90:43:cb:94:59:e0:32:b2:d6:
         3b:13:e6:4d:53:23:60:b5:79:8d:22:fc:11:0b:eb:a0:0c:ca:
         c9:ef:ce:f6:fd:75:ef:4b:67:42:bd:51:26:07:81:89:97:50:
         46:fc:2f:24:3f:2a:2a:4f:7a:e7:f5:5f:98:37:63:ee:23:7e:
         f8:87:1d:40:e0:47:b7:3c:85:a5:e8:64:b7:ab:6a:06:c5:6b:
         5d:91:ba:54:32:9c:03:bb:95:9e:25:b1:4d:ec:0f:b1:ba:29:
         82:fd:49:25:a5:fa:93:cf:f5:be:e0:28:66:99:af:d0:40:6b:
         29:b3:89:e0:81:0d:9a:47:e5:bb:79:66:0f:b6:67:e1:40:e7:
         4a:57:3a:7c:b1:95:af:cb:23:00:6e:75:9d:f1:5c:3a:8e:f4:
         ba:01:37:eb:25:a1:19:3a:cb:16:bc:cf:86:63:53:48:97:11:
         c9:e1:3a:3e:af:fb:bf:82:05:16:99:ee:e7:57:f9:a5:38:f4:
         54:37:5f:b4:0e:17:f9:48:ef:6b:81:e6:1a:be:03:be:2e:bb:
         bb:6d:01:50:c8:b8:9e:6d:98:0c:06:fa:52:0c:a1:1e:6a:dc:
         9b:cb:0e:5c:e0:57:7d:09:89:d8:97:8e:1b:a4:48:55:14:26:
         ed:49:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:34 2026 by rpki-client