This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          /rLlSTAPdMoXIaluMFYg2IbnDL15I2rvxw2gHmXe82A=
Subject key identifier:   01:24:80:FD:50:59:65:9D:86:30:14:D8:41:26:5F:AA:FF:25:E3:DD
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019C42465FA5E56846FF3D71F443B54E08A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          04F8
Signing time:             Mon 09 Feb 2026 12:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:33 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: lsNGLAK+ZCHP3PiE52TBr74pESQufjre6rqOIleAUeE=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:5f:a5:e5:68:46:ff:3d:71:f4:43:b5:4e:08:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Feb  9 12:00:33 2026 GMT
            Not After : Feb 10 12:00:33 2026 GMT
        Subject: CN=012480fd5059659d863014d841265faaff25e3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:bd:b6:92:55:a7:79:78:21:26:7a:23:2a:
                    5c:a1:e8:9d:24:d8:93:cd:ef:79:1f:81:8c:3f:c8:
                    45:53:94:2a:b9:75:5f:5b:c0:b9:1c:57:2d:bd:d1:
                    48:d9:6c:7b:50:72:0e:14:b7:89:9d:24:ff:a4:4b:
                    4c:04:6a:ee:d6:de:ad:95:04:e9:85:81:98:73:cc:
                    de:28:ad:a2:7a:8b:73:ba:e4:11:fd:7e:36:3a:ec:
                    df:ba:01:94:d4:bb:e3:59:a0:05:54:4e:1f:f6:c5:
                    3b:0d:fc:1e:4f:11:ab:45:74:12:43:ed:2f:30:f0:
                    10:03:30:0a:20:dd:38:64:28:9e:7d:90:71:2a:80:
                    d7:e9:91:5a:b2:e3:ea:94:cb:56:18:63:f7:61:32:
                    5c:f9:d7:48:13:e9:da:b8:d4:2d:d6:ff:8b:bb:b0:
                    d3:be:3e:a5:74:a2:27:02:04:60:6b:fb:9d:36:1c:
                    f1:86:42:fe:06:65:4a:31:72:7d:f0:e1:ec:0b:b0:
                    20:e5:57:b3:a1:67:47:39:58:ee:2b:a0:57:87:37:
                    05:5a:2a:34:50:69:02:44:30:cb:17:08:b8:dc:32:
                    65:54:b7:0c:27:02:5e:43:19:e0:8a:f4:24:bd:94:
                    53:3f:cd:e5:39:32:14:ee:d0:db:d0:0f:d9:80:71:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:24:80:FD:50:59:65:9D:86:30:14:D8:41:26:5F:AA:FF:25:E3:DD
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:51:b2:3f:de:71:af:d2:4d:13:51:d0:2a:71:98:82:5f:
         3f:87:4a:f1:b5:a4:db:a8:3b:18:74:19:ba:db:b1:6a:7f:ed:
         d8:5d:a1:5f:52:3a:a0:b9:1b:55:00:f1:39:57:21:00:94:38:
         07:49:34:61:fa:52:ce:6c:5b:08:eb:6b:c4:5d:c4:d2:67:95:
         15:6f:59:e0:18:67:74:5d:31:ca:62:39:3f:b4:92:7d:0b:63:
         28:d8:14:4d:e5:41:49:08:e7:5a:93:87:cd:39:7d:c4:01:a0:
         2e:5e:d3:a1:c5:fe:c9:7d:3b:20:11:71:ab:aa:4b:9b:f3:eb:
         91:d5:42:d6:b7:8c:f0:ab:0f:a2:87:2e:26:ba:ff:0c:0d:60:
         63:79:ca:34:72:85:ab:86:4a:49:1a:4f:5d:a6:5a:f2:69:b9:
         a8:16:0a:2a:8e:15:b5:d5:ba:a8:b6:91:83:af:ea:05:eb:d3:
         f9:a8:1f:9b:ae:21:ac:12:ae:37:92:2d:d0:36:22:e8:0f:d9:
         d6:b2:62:a4:d3:12:6f:3b:85:9c:cc:60:9f:da:a1:38:5d:3b:
         ee:dd:23:ce:79:86:aa:c6:ff:7d:3c:ba:f4:1c:69:78:18:df:
         aa:7e:f4:29:93:63:e1:5b:0f:62:58:75:94:09:fb:e1:bb:ca:
         c8:4e:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:49 2026 by rpki-client