This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File:                     BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier:          T+HBD9LP7hqsVd8Trq7x/SKqZE8rPlAUApfZRN6jXP8=
Subject key identifier:   E6:0B:A3:75:60:AF:6D:6E:0C:B8:4B:99:CF:BC:8F:59:DB:E2:61:C1
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer:       /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial:       019C42EBAEC9D93A6EF1285428FE5BED04BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number:          07BB
Signing time:             Mon 09 Feb 2026 15:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:07 +0000
Files and hashes:         1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: Gt9gsSWM+zH6AemPBUIMe/utI/i7vq6HQRxTbOZj1GI=)
                          2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:ae:c9:d9:3a:6e:f1:28:54:28:fe:5b:ed:04:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
        Validity
            Not Before: Feb  9 15:01:07 2026 GMT
            Not After : Feb 10 15:01:07 2026 GMT
        Subject: CN=e60ba37560af6d6e0cb84b99cfbc8f59dbe261c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:11:96:6b:8f:c2:55:10:a3:0e:1b:d9:5f:
                    cb:2b:9b:43:60:f0:e1:d1:09:ce:ed:1a:90:34:d7:
                    39:b4:82:8f:ed:75:69:ed:69:3e:c5:e3:70:c1:f5:
                    5e:af:50:a6:13:b6:4b:1d:98:12:eb:02:e9:04:27:
                    61:a4:39:a9:f0:05:82:33:4a:59:84:ef:51:55:8e:
                    b9:0b:13:04:03:94:25:1e:c4:26:16:ae:66:4c:4c:
                    6c:01:a5:f3:e6:d3:9e:27:22:66:29:cd:9a:2d:3d:
                    59:75:6d:9a:d8:0a:4b:6d:db:9c:c1:ea:bf:29:96:
                    22:04:2f:4c:5c:c4:1b:e0:91:ce:73:9e:6a:5d:8a:
                    09:e3:a7:a0:26:b0:06:ee:84:e8:73:64:9c:74:9d:
                    ad:74:2f:3d:9d:8d:78:f9:3e:c2:aa:ff:60:bb:73:
                    f3:35:b6:9d:17:05:1c:4f:d7:9e:c0:db:a2:e9:c0:
                    74:44:7c:1d:c5:07:aa:52:2b:f6:fd:39:42:7f:6f:
                    fd:de:47:e3:b5:8d:d0:0b:b0:df:b8:c0:74:56:96:
                    35:b1:d1:09:cf:f0:d9:75:73:cb:e8:5e:93:98:7e:
                    27:6e:3d:5d:92:89:bd:ed:0f:92:57:57:ea:57:b7:
                    34:9a:8a:6f:57:23:a6:f7:fa:2f:47:67:79:9b:7e:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:A3:75:60:AF:6D:6E:0C:B8:4B:99:CF:BC:8F:59:DB:E2:61:C1
            X509v3 Authority Key Identifier:
                keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:9f:03:5a:fa:17:ef:44:b3:0d:06:e2:d0:26:d4:02:9b:
         e4:95:78:c0:4d:f8:de:94:5c:94:b2:67:7d:fd:bf:9a:a0:5b:
         37:73:66:16:dc:71:17:ca:78:98:c9:bd:ba:d8:66:52:f0:3e:
         58:0c:90:09:83:a6:ae:f0:9b:db:e2:03:2f:e9:04:55:f2:87:
         3a:ea:17:b5:eb:3d:56:7c:cb:32:28:36:ab:fe:36:9a:52:e7:
         c8:f0:22:54:c3:f9:90:75:5b:74:df:59:e0:58:4c:88:a2:98:
         e4:09:0e:3b:5b:7e:97:21:3e:05:78:8c:4c:b2:fd:84:65:f8:
         8f:16:b3:76:d6:0e:66:68:38:3b:5a:c5:b0:f0:74:3f:d0:e7:
         7c:33:39:90:ef:46:22:42:e6:aa:02:2b:e5:76:ab:fc:ac:c5:
         31:05:c3:41:81:f0:1f:05:48:39:ff:c8:7d:c7:a0:7a:83:9f:
         fd:44:36:39:5e:04:a2:fc:ce:4b:34:14:e1:80:ea:64:b0:8a:
         96:74:f0:0f:ed:2f:16:66:f0:63:b1:c6:fa:79:90:55:db:b7:
         52:83:ce:6b:42:b8:08:27:a4:14:44:fe:08:67:d4:66:ce:ea:
         b1:ef:b2:bc:2f:07:13:1b:ce:aa:dd:1c:d1:b5:67:3d:ab:bf:
         6f:42:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:45 2026 by rpki-client