This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File:                     bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier:          eB2oaH2FuSxBoT+cWbPxaeC/AQ802zfwuknjFTfxjYM=
Subject key identifier:   2E:98:2B:4F:C9:88:12:52:C1:14:10:71:E6:D2:1C:86:2F:85:73:8A
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer:       /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial:       019C4322A0A043874D4E6E1867ABF694C915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number:          07D2
Signing time:             Mon 09 Feb 2026 16:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:08 +0000
Files and hashes:         1: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: 0GFn+pkIuZxXBjOK2qsjDk4DjmJjEU32M0E+niJDjSg=)
                          2: iiNRP5UtNE9PRzv6f6Zk7F_WagA.roa (hash: BxwlJ6L7JiirPlQT5hR2YOM60CkwhHbmXiQ9C6w1opo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a0:a0:43:87:4d:4e:6e:18:67:ab:f6:94:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Validity
            Not Before: Feb  9 16:01:08 2026 GMT
            Not After : Feb 10 16:01:08 2026 GMT
        Subject: CN=2e982b4fc9881252c1141071e6d21c862f85738a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:91:c6:82:61:b1:cb:01:5b:ba:be:64:b9:
                    50:7b:ee:d0:aa:a1:e0:b1:36:ae:89:d1:db:f0:e4:
                    b8:07:26:4b:77:04:60:7c:4d:c7:a1:f8:ee:f1:be:
                    68:ab:34:48:85:53:a3:8b:91:47:8d:8b:bd:d9:14:
                    a7:7b:97:0e:17:f7:78:77:09:ea:07:b7:81:2a:b2:
                    54:fe:d8:02:06:b2:2d:58:8d:c7:a5:24:19:d5:cd:
                    0d:c9:c4:f1:f7:51:a9:81:d5:73:80:4d:4a:44:95:
                    58:16:a8:6b:bd:60:bf:bd:0d:06:38:2f:dd:16:a0:
                    b9:2a:15:44:e8:76:3e:18:a6:0e:d3:24:44:01:b9:
                    2e:7d:a0:7d:68:ec:ef:7a:54:2e:2d:0a:50:53:80:
                    ca:75:f5:60:53:f7:b2:e0:fb:53:cb:92:9b:37:c7:
                    4f:a6:c6:e7:6b:22:e7:16:6e:04:1c:1e:01:02:a8:
                    55:d7:f4:09:91:6f:69:25:0f:0e:45:22:72:84:db:
                    fa:90:9e:84:09:17:4c:58:21:9f:d4:d6:02:79:32:
                    17:4a:a3:91:5b:95:02:0d:0a:99:44:4b:19:53:74:
                    8f:88:a5:af:a1:09:96:8a:1e:ca:9f:a3:0e:f7:e1:
                    5b:ba:f7:53:a9:d4:4d:fb:76:a5:e9:97:7b:f0:78:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:98:2B:4F:C9:88:12:52:C1:14:10:71:E6:D2:1C:86:2F:85:73:8A
            X509v3 Authority Key Identifier:
                keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a2:36:85:02:ae:87:3c:1d:1e:06:0b:00:91:75:9a:20:bb:
         08:8f:17:c5:fc:51:5a:8e:fc:87:76:b1:a8:37:e5:e6:32:96:
         d8:8b:83:ec:f2:bc:49:1b:8e:1e:f4:a0:e7:13:c5:cc:ee:d3:
         57:49:c4:1c:c9:6a:d7:90:48:01:ac:0e:25:a4:6b:7b:e8:50:
         0a:8d:9b:4f:39:0c:c9:ef:21:95:36:e1:88:04:2c:e7:77:0a:
         ca:3f:b0:66:ba:5e:d9:7f:01:6f:a8:66:b4:9f:c7:86:23:84:
         58:eb:1f:89:a5:de:d5:8d:3d:1d:e0:ef:dd:13:9f:06:6a:7e:
         98:9f:98:20:bb:47:35:00:bc:8a:ce:38:75:47:9c:c4:71:ce:
         42:ae:ad:bb:a1:b3:97:f1:9b:d5:71:e8:04:82:e4:70:58:77:
         a1:e7:36:3e:cc:0f:0a:7f:33:a0:55:fa:0a:94:62:66:72:44:
         d5:d3:42:f2:98:82:c9:67:89:d3:f5:44:78:9a:4a:a9:fa:75:
         72:36:a0:f8:82:6e:a0:e8:cb:54:a2:ab:33:ff:80:39:b4:4a:
         51:ab:54:66:e1:81:6d:3d:04:0b:31:53:ae:d8:96:65:d1:af:
         f0:f0:09:76:07:ad:8b:5d:c8:d9:bf:ed:04:46:06:63:11:4b:
         c6:d3:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:21 2026 by rpki-client