This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File:                     RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier:          T79JdK5tjz9Agln42c4A7HTVzZDNhOzFBBKsl8e16BQ=
Subject key identifier:   BD:4D:8F:24:88:84:0C:00:CF:B6:69:1C:07:BC:02:74:93:3A:BE:F0
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer:       /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial:       019C4435174B010E754B60B78711F1B46694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number:          0C17
Signing time:             Mon 09 Feb 2026 21:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:55 +0000
Files and hashes:         1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: SOIUn9NYliN24MhmUuPIG20moMtN8BGhnxbPBoTuR0s=)
                          2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:17:4b:01:0e:75:4b:60:b7:87:11:f1:b4:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
        Validity
            Not Before: Feb  9 21:00:55 2026 GMT
            Not After : Feb 10 21:00:55 2026 GMT
        Subject: CN=bd4d8f2488840c00cfb6691c07bc0274933abef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:c5:b5:43:bf:cb:8c:05:08:c4:d9:22:30:
                    25:76:82:c3:05:6b:2e:29:71:ba:48:6d:92:d2:48:
                    7f:d2:84:93:de:a7:90:ab:8c:de:40:d7:dc:2e:a4:
                    08:9e:3f:b2:64:58:3c:b7:4c:9d:b5:c3:3b:8a:3e:
                    1e:48:ea:13:52:3d:cf:18:cb:92:0a:b6:77:0f:c7:
                    19:3c:80:04:9c:d9:bf:8d:10:97:94:86:2c:d5:27:
                    3d:7a:2e:f6:98:23:80:c0:bc:4b:5a:b0:fe:bd:12:
                    48:1f:76:0b:02:14:bd:5d:a9:70:2e:63:04:77:28:
                    0a:38:6f:2a:32:aa:51:6f:2a:fc:ac:bd:61:cd:5d:
                    56:c9:2b:86:91:7d:bc:27:56:29:95:f2:c9:f3:bf:
                    00:fe:bb:18:50:1f:c7:d6:e3:91:af:5a:91:f4:e0:
                    b4:57:df:f4:39:45:75:8c:a3:e6:35:26:ce:f9:9c:
                    5a:4d:88:62:b1:95:45:da:db:20:17:0f:87:ba:9a:
                    33:74:ac:22:69:4e:53:32:6c:81:20:b0:a7:d5:0f:
                    6b:01:ec:e3:09:c9:74:49:29:b8:0c:e8:75:e3:ec:
                    e5:a2:87:a2:ca:99:55:4e:d2:3a:03:4c:b6:59:b1:
                    1b:68:26:82:17:ea:bb:a5:e4:df:93:74:e8:67:b5:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4D:8F:24:88:84:0C:00:CF:B6:69:1C:07:BC:02:74:93:3A:BE:F0
            X509v3 Authority Key Identifier:
                keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e8:e7:c2:4c:d5:4c:9e:2f:04:4a:11:cb:1a:fd:71:f3:68:
         2d:71:79:cd:c9:42:48:68:27:ba:eb:60:53:13:c5:e0:df:81:
         64:dc:9e:89:d3:02:4a:fc:3f:c1:b8:f8:02:1b:1c:2d:55:41:
         7d:cb:02:39:cd:55:28:06:60:ea:41:7b:5c:26:a2:65:8a:69:
         97:06:1c:fc:2b:bd:ac:f8:56:98:e0:ca:50:c6:3f:76:63:d2:
         cf:cc:a7:2c:91:b5:04:3d:52:83:54:51:eb:4e:50:1f:d4:62:
         6c:ab:3c:bb:2e:8c:18:99:ff:46:bc:1c:0f:4c:f0:a7:dd:a2:
         ff:2d:c3:e7:54:b1:b0:3f:c8:94:2b:f4:08:fd:69:14:fc:33:
         70:7a:5c:d8:64:a5:20:d3:d2:79:11:bc:a7:f1:33:ec:3b:5a:
         3f:f7:b6:fa:bd:44:57:32:7f:80:06:cd:d1:1a:e1:a1:26:11:
         16:39:8a:e2:ef:cf:73:f9:e4:e1:1c:0a:73:13:4b:a9:b1:75:
         e1:f3:1a:2e:95:2a:de:f0:b4:cf:8a:7a:ff:5a:7c:f3:b1:26:
         4b:6e:28:b9:36:e9:e4:ad:13:cc:70:fe:5b:6c:7a:9d:f8:93:
         24:e3:b9:36:a4:b7:c5:cf:9c:80:be:e0:1f:84:64:88:aa:47:
         2f:0f:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:58 2026 by rpki-client