This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          VEbrgoWrT98X0UiDZtu/jmzy3Judq+3cFCaNROvFA/I=
Subject key identifier:   0F:2D:5C:60:FA:F0:B2:36:88:C0:DA:82:E5:A6:1E:CD:7D:75:BC:F3
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       019C43900E1CB908D3C499E05632F16E78B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0E00
Signing time:             Mon 09 Feb 2026 18:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:40 +0000
Files and hashes:         1: 4lepvlgVUIp6Gpp6-Feg4sp-5-Q.roa (hash: 2h8HXaG+e+vq1FJBhsfEh5PQ+syYPMKgZRdxjB2O/o8=)
                          2: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: MJ8gSslWfItQKZjOrN6384RHDTVEqYc1pdRT0FQqyUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:0e:1c:b9:08:d3:c4:99:e0:56:32:f1:6e:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Feb  9 18:00:40 2026 GMT
            Not After : Feb 10 18:00:40 2026 GMT
        Subject: CN=0f2d5c60faf0b23688c0da82e5a61ecd7d75bcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e3:5e:88:9e:57:84:e9:8f:e2:8a:c0:de:f9:
                    c5:39:d1:6c:0c:8d:c8:ef:83:93:20:8b:63:69:a8:
                    2a:b2:d9:3d:ae:9d:90:c2:62:62:ff:bb:cf:64:5f:
                    ac:a5:cd:25:3d:92:a0:4e:9b:52:f6:ec:7a:8c:bf:
                    bf:93:e3:29:d1:d0:cd:8e:34:85:cf:5f:ab:e0:ea:
                    24:3f:61:b6:6c:01:5e:43:ba:96:97:a8:c6:aa:1e:
                    46:49:ce:27:a8:59:38:99:db:3b:0b:11:87:be:cf:
                    2f:c8:92:51:87:df:86:eb:89:34:fe:66:89:1b:9c:
                    fe:c8:b0:24:c5:71:5c:d9:bf:dc:cf:31:af:22:a2:
                    e6:f6:57:84:c3:77:c3:c9:26:4e:d8:b6:8c:9f:46:
                    49:58:1a:a4:91:df:38:c4:f9:85:8c:3d:06:b2:8e:
                    f2:8c:03:e9:76:7d:59:8c:b2:52:f2:7e:a8:2e:39:
                    47:5c:1f:b4:75:61:b6:7d:a1:59:68:c0:8d:a3:dc:
                    a6:e5:a2:70:c4:78:b0:fe:a6:88:eb:25:44:df:bd:
                    21:bb:d4:9c:b6:8a:0a:21:36:49:60:0c:b3:f7:ee:
                    a8:3d:b3:d5:4b:af:b8:87:76:b8:8c:89:59:fc:49:
                    c6:fe:e6:a9:3f:08:ce:d1:8d:a6:89:6c:95:fd:73:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2D:5C:60:FA:F0:B2:36:88:C0:DA:82:E5:A6:1E:CD:7D:75:BC:F3
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:04:7c:a8:b0:88:d5:85:58:59:50:4c:09:59:3e:05:c6:e1:
         e1:68:09:60:36:30:cb:ee:9b:99:73:0f:05:08:1b:35:6c:eb:
         2f:14:88:1d:6d:50:a3:0d:31:a4:1c:2f:16:30:fa:f3:4d:d4:
         ba:89:4d:6d:19:7c:41:8f:51:87:f1:a3:5d:44:e5:31:59:b0:
         fb:0f:17:f3:78:27:5d:1a:d0:97:1a:2b:bd:dc:6e:24:be:75:
         eb:4f:aa:b8:da:0c:f0:5a:ef:22:69:d5:ab:91:2f:9f:47:f8:
         63:4e:5f:5e:b9:cd:2c:ec:7c:b7:1c:9e:04:63:19:c1:87:e4:
         93:98:10:71:10:1c:eb:d9:8b:c3:71:c1:1f:d3:ed:6a:b6:bb:
         44:29:86:6b:2b:0b:4a:e2:c6:97:86:a4:b8:37:fa:4e:ed:5b:
         f4:79:46:ab:3f:5d:54:23:0d:e3:24:cb:91:3b:95:f8:3b:84:
         ad:84:b8:e5:37:c4:0a:21:0e:f4:a1:19:9e:dd:f9:47:e0:2a:
         a5:e5:3d:a1:7b:f8:da:6e:4c:5f:7c:2c:11:68:ca:f6:52:2d:
         f2:92:70:d5:a5:07:db:72:4c:cc:77:aa:a2:c4:60:f0:91:ca:
         ea:d1:06:64:f1:3d:a8:08:f9:3b:15:8e:5e:a7:36:d5:e2:dd:
         a2:f9:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:09 2026 by rpki-client