This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File:                     BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier:          gYq7Ae/sLfdtgAU1WuKPTnnn/7N9dxVmW0vuhkMjsBI=
Subject key identifier:   11:BD:6C:AD:9E:FF:A3:51:32:6B:E1:37:A7:55:17:AF:F3:C4:69:C5
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer:       /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial:       019C427DDBDDD819459EEB0DF4B31B8557CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number:          07CE
Signing time:             Mon 09 Feb 2026 13:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:10 +0000
Files and hashes:         1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: YPoaiB1N1UX8qxYnFVLDt/rSsLk0ves1GF/Bkq4ugbk=)
                          2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
                          3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:db:dd:d8:19:45:9e:eb:0d:f4:b3:1b:85:57:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
        Validity
            Not Before: Feb  9 13:01:10 2026 GMT
            Not After : Feb 10 13:01:10 2026 GMT
        Subject: CN=11bd6cad9effa351326be137a75517aff3c469c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:5f:df:8e:74:1a:8d:31:16:dc:cd:b0:34:
                    da:1f:39:4d:84:26:e0:0d:de:e0:8d:11:9e:dc:32:
                    a8:ac:0d:9c:82:e8:0f:c2:69:50:29:f5:42:cd:f5:
                    20:64:9f:db:58:6b:b7:0c:48:e2:0d:07:10:d3:02:
                    41:fa:a3:52:ad:cd:a4:97:15:75:aa:8e:92:14:17:
                    c4:7b:0c:62:cb:71:8d:5d:60:d6:2d:7f:a4:b6:4c:
                    17:fc:fc:03:d9:92:3e:7e:3b:6c:a1:46:d2:65:48:
                    88:8f:ac:cf:21:73:ec:aa:ae:12:47:d1:01:14:a6:
                    54:34:f4:6c:a4:49:5d:3d:fa:11:6f:2c:e8:af:28:
                    07:ce:d9:bc:b7:2d:9d:d8:5d:63:59:c9:1f:92:90:
                    fd:46:0d:d1:15:9a:d9:c6:fc:13:cd:db:58:d4:c2:
                    ba:5d:6e:c3:b3:fd:bf:05:54:b7:1c:8f:96:ac:ca:
                    77:7d:92:22:2d:8c:5b:a5:cd:fd:f4:4c:ca:26:b5:
                    ab:66:72:3e:67:85:bb:12:53:db:e4:37:3d:e4:f3:
                    63:51:4b:6c:17:c8:9d:ab:17:c7:39:da:2b:0a:af:
                    ce:35:b2:30:0c:2c:30:68:21:db:f6:d8:df:20:10:
                    a0:67:08:32:47:e8:aa:b9:41:cd:bd:cc:00:9e:b1:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:6C:AD:9E:FF:A3:51:32:6B:E1:37:A7:55:17:AF:F3:C4:69:C5
            X509v3 Authority Key Identifier:
                keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:32:43:cd:fc:e2:c0:bd:2f:b1:e2:ac:e7:d5:3a:c5:e9:93:
         ae:af:d8:eb:ba:2c:ad:d0:3d:5e:d2:5e:2b:06:c3:c0:4b:8f:
         91:63:76:46:84:25:f4:5d:b8:f2:92:b9:3f:8a:d3:dc:d1:9c:
         9c:da:de:e8:52:db:06:12:aa:0c:67:49:30:66:c1:cc:dd:b2:
         56:3a:f3:fc:39:a2:2d:a9:61:80:16:dc:b0:80:50:f0:46:35:
         77:ae:92:31:90:d0:b9:bb:da:30:3d:5c:bf:bc:d2:13:ba:a4:
         27:c7:a0:27:e1:28:ea:69:63:eb:c5:6c:3e:b5:b9:61:be:f1:
         03:ef:53:95:31:fa:7d:65:bf:ee:1a:9d:d1:00:f3:7a:63:79:
         a4:2f:cf:d3:b4:a4:d9:ca:86:43:e2:15:e7:e6:26:b1:1c:cb:
         55:21:e1:75:92:c4:96:46:2f:d1:66:9a:18:e0:a7:20:92:e1:
         1c:1a:d9:fa:c5:3b:7d:5e:e6:01:90:b1:4d:14:06:69:4d:f2:
         94:89:47:1f:6a:c0:33:dc:5c:23:fb:f9:bb:fb:38:64:03:80:
         6b:2c:3a:6e:4e:b4:9b:6a:d8:9f:a0:4a:cc:8e:58:d2:fd:76:
         47:3c:9b:90:e5:34:01:dd:26:4c:9e:14:09:0e:0a:9d:46:1d:
         6f:00:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:01 2026 by rpki-client