This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          XXpjLIdLCVG0HzORbjvksuiwWHlmuKMpxQV7efZU+Nk=
Subject key identifier:   EE:DA:97:E5:10:9C:F0:11:6D:E9:F2:0C:28:5B:A7:F8:F8:67:B6:D7
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       019C43FDAA0B78090722AFB1A94FCFC60C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          050A
Signing time:             Mon 09 Feb 2026 20:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:23 +0000
Files and hashes:         1: 7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa (hash: RxktB/X/0ILAUcnLgcdw93xVGc/tLoK9pE6XU1OCXqQ=)
                          2: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: g/ebiB2E97Vfua4vvJN0YAjtItIeEX+V5K9PilMTA34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:aa:0b:78:09:07:22:af:b1:a9:4f:cf:c6:0c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: Feb  9 20:00:23 2026 GMT
            Not After : Feb 10 20:00:23 2026 GMT
        Subject: CN=eeda97e5109cf0116de9f20c285ba7f8f867b6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:88:6c:d8:79:52:fc:6c:47:31:d4:ea:2d:
                    fb:48:3a:b5:77:da:ac:01:53:bf:4e:39:bb:b5:41:
                    33:26:48:0e:3a:77:45:c4:7a:96:fb:eb:9a:74:03:
                    fa:9d:bc:b0:2e:36:af:6f:d2:02:c6:d4:1c:c4:6f:
                    42:61:ab:64:5d:d9:62:4b:1b:11:96:f0:c3:b1:30:
                    20:84:a5:3b:f6:6a:09:3a:e6:56:38:51:5b:cd:b4:
                    52:53:4e:33:30:1e:51:9f:be:1f:58:d9:06:d0:94:
                    8b:1e:23:32:3a:37:c3:c5:ba:91:4e:ab:81:09:24:
                    4c:39:bb:82:b1:1b:e9:26:68:05:88:61:02:f7:fb:
                    24:9d:60:0b:7f:e4:60:1d:35:97:37:00:72:e3:73:
                    01:c0:2d:df:23:90:8b:fb:fd:ce:30:35:1b:5c:b4:
                    a4:2b:22:70:c6:47:f5:36:73:e7:76:7c:e0:67:d9:
                    d4:84:ac:a6:ae:e6:c7:16:d6:64:27:b9:04:68:e6:
                    e0:27:c1:16:07:6f:05:2a:b0:be:45:17:9c:36:17:
                    7f:e4:5d:08:26:e4:c1:c4:ca:a2:44:e3:f8:7b:57:
                    57:48:ba:b1:5c:e7:bf:c3:3f:e1:76:d9:da:42:d3:
                    68:1f:19:c8:04:e8:e3:f4:5a:32:09:4e:8e:9f:32:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:97:E5:10:9C:F0:11:6D:E9:F2:0C:28:5B:A7:F8:F8:67:B6:D7
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:31:8d:19:0c:1d:b4:74:bc:7b:4f:b6:fc:26:02:e8:b6:fd:
         23:cb:45:1e:a6:90:42:50:78:88:9f:3b:6f:e0:5e:12:ab:b2:
         7a:64:b6:55:8f:16:bb:28:68:01:40:17:b6:df:b9:3c:1b:9e:
         17:bb:db:33:86:33:b3:65:6b:8e:1b:f2:38:49:6e:11:d7:86:
         06:99:6c:7c:09:14:bd:16:25:7e:43:91:17:e0:15:e7:1d:f9:
         00:7b:2e:69:20:e8:ab:56:21:23:be:06:fb:85:be:01:ea:b8:
         2f:2b:ed:eb:6d:5c:b0:82:92:dd:45:f1:5f:7e:80:f3:bf:12:
         79:ed:f2:23:d7:74:82:a6:06:10:27:41:16:a6:3d:6f:2a:ce:
         7b:aa:d6:86:5f:1f:9a:72:37:ff:9f:c1:ba:63:4d:bc:18:57:
         8e:96:48:ee:15:48:f9:2b:90:75:c9:d0:f6:42:f8:db:55:39:
         97:e1:57:27:e1:dc:aa:95:6c:17:b6:29:f4:b8:23:99:98:96:
         03:77:fd:a3:74:d6:70:ae:ae:d3:a9:b2:d0:30:b8:a5:33:d5:
         4f:2b:3c:97:2f:d1:f0:3b:89:ee:92:9b:a7:a1:7b:c0:6f:aa:
         a3:f3:56:34:c0:0f:89:9c:0f:89:7e:92:49:41:cc:f6:6e:1a:
         bc:8f:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:58 2026 by rpki-client