This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File:                     bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier:          z0Gqbw0JKYoPLVrewvTsAr8Edc//xXIJ6OxKgNVAGEI=
Subject key identifier:   73:DA:FE:29:C2:FE:E1:93:82:E6:82:AD:53:11:86:20:11:DD:96:45
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer:       /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial:       019C438FDC31EED4F58C86A4B2F2641DA63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number:          13E3
Signing time:             Mon 09 Feb 2026 18:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:27 +0000
Files and hashes:         1: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: fRnvnF07fW5uoJNpkI9WDerZognJRom3sN9Zzlei8Eo=)
                          2: gQ9G1wyw8P68T-YoeRrNExRIJ54.roa (hash: U225Ret2JuGydyVsYjJv8x78fpJD2cYEwUxTjEVRMGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:dc:31:ee:d4:f5:8c:86:a4:b2:f2:64:1d:a6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
        Validity
            Not Before: Feb  9 18:00:27 2026 GMT
            Not After : Feb 10 18:00:27 2026 GMT
        Subject: CN=73dafe29c2fee19382e682ad5311862011dd9645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:16:a9:34:01:c8:a1:32:88:f0:1a:f9:bd:
                    d9:ad:73:48:d7:3f:d4:a6:d7:6f:99:d6:2f:73:de:
                    ef:9f:47:49:a1:a8:89:d7:bd:7e:dc:f5:a1:b1:4f:
                    62:11:8e:a1:45:88:75:b8:e3:6a:bb:35:a4:38:6d:
                    a7:f5:b3:c6:8d:63:64:5b:c1:cd:cf:38:e1:b8:7e:
                    89:f2:4a:52:31:6f:7e:02:f8:1e:fc:50:26:9b:44:
                    b9:89:19:f9:4d:f0:a5:da:9c:c8:9f:8a:2a:56:f6:
                    83:73:b2:ec:34:68:a8:c8:54:43:00:33:0d:95:fc:
                    14:cc:fc:6d:2e:59:84:a7:6b:19:44:49:82:a4:2c:
                    34:9a:65:27:33:47:8d:4d:f0:cc:0d:4e:53:4f:f5:
                    10:85:10:69:09:2f:cb:3a:c6:31:c2:03:c5:81:ac:
                    15:c7:38:9a:54:92:3d:11:60:64:7b:4f:2e:36:fc:
                    d1:49:5c:2d:5e:b7:dd:15:92:e4:0f:fb:c8:88:33:
                    de:28:ed:56:64:cb:df:19:cd:de:ae:38:26:ea:1a:
                    68:eb:80:3d:b3:40:85:ec:28:cf:74:87:00:d9:cd:
                    7d:d2:bb:50:39:ff:d6:eb:28:ac:c7:ac:7d:51:97:
                    23:32:64:f1:45:c7:b2:2b:e0:c7:e7:cf:da:16:49:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:FE:29:C2:FE:E1:93:82:E6:82:AD:53:11:86:20:11:DD:96:45
            X509v3 Authority Key Identifier:
                keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:65:03:70:b3:0d:00:61:5b:31:9c:62:d7:d7:df:64:a7:9d:
         5b:1a:53:8b:99:1f:c4:34:e4:e5:e7:ea:3b:70:f5:9c:4a:f9:
         27:17:04:78:77:15:3e:fb:eb:4f:5a:20:87:2b:96:2c:c0:32:
         64:42:eb:07:91:47:b6:d3:06:74:71:9b:3d:8f:18:d9:21:cb:
         de:9a:06:67:81:04:19:17:8a:01:e5:11:3c:0b:80:62:61:dc:
         65:f1:92:b1:21:f2:27:cf:b2:c6:b5:ed:91:cf:fe:7e:b1:40:
         a2:7f:82:e1:30:09:12:62:10:24:c6:e1:18:fc:3b:c2:d9:48:
         79:26:37:d3:4b:78:86:54:45:28:26:b4:66:7b:2f:67:4f:b7:
         5c:6b:a0:56:e4:8f:c3:3d:b5:96:54:a7:e9:19:85:59:fc:0e:
         26:66:37:c3:9b:30:63:5e:04:94:db:bd:e8:ac:39:4e:0c:96:
         ad:1a:85:ef:75:68:c2:18:a4:75:45:7d:ac:37:02:f4:f6:c8:
         a0:f1:1b:02:c7:29:51:db:bd:9f:28:03:87:60:36:10:4f:8c:
         38:0b:51:4e:ec:46:67:c3:bf:20:db:38:b3:5a:41:ae:2a:e4:
         28:87:74:db:43:07:52:82:73:65:90:fe:11:dd:89:45:1d:c7:
         cc:23:4a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj9wx7tT1jIaksvJkHaY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4
OTZhMDAwHhcNMjYwMjA5MTgwMDI3WhcNMjYwMjEwMTgwMDI3WjAzMTEwLwYDVQQD
Eyg3M2RhZmUyOWMyZmVlMTkzODJlNjgyYWQ1MzExODYyMDExZGQ5NjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpcWqTQByKEyiPAa+b3ZrXNI1z/U
ptdvmdYvc97vn0dJoaiJ171+3PWhsU9iEY6hRYh1uONquzWkOG2n9bPGjWNkW8HN
zzjhuH6J8kpSMW9+Avge/FAmm0S5iRn5TfCl2pzIn4oqVvaDc7LsNGioyFRDADMN
lfwUzPxtLlmEp2sZREmCpCw0mmUnM0eNTfDMDU5TT/UQhRBpCS/LOsYxwgPFgawV
xziaVJI9EWBke08uNvzRSVwtXrfdFZLkD/vIiDPeKO1WZMvfGc3erjgm6hpo64A9
s0CF7CjPdIcA2c190rtQOf/W6yisx6x9UZcjMmTxRceyK+DH58/aFkkAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPa/inC/uGTguaCrVMRhiAR3ZZFMB8GA1UdIwQY
MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt
NTE4MWEyZjBkMTk3LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3
LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWUDcLMN
AGFbMZxi19ffZKedWxpTi5kfxDTk5efqO3D1nEr5JxcEeHcVPvvrT1oghyuWLMAy
ZELrB5FHttMGdHGbPY8Y2SHL3poGZ4EEGReKAeURPAuAYmHcZfGSsSHyJ8+yxrXt
kc/+frFAon+C4TAJEmIQJMbhGPw7wtlIeSY300t4hlRFKCa0ZnsvZ0+3XGugVuSP
wz21llSn6RmFWfwOJmY3w5swY14ElNu96Kw5TgyWrRqF73VowhikdUV9rDcC9PbI
oPEbAscpUdu9nygDh2A2EE+MOAtRTuxGZ8O/INs4s1pBrirkKId020MHUoJzZZD+
Ed2JRR3HzCNKWA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:16 2026 by rpki-client