This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File:                     bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier:          frwSYhFpfmMNC9yrNaxTiFmws13Xh86R7GGc7xjqxWU=
Subject key identifier:   A1:FC:DD:9B:8C:9E:4D:5C:4D:AC:FA:00:09:0F:51:B5:FC:70:F3:CA
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer:       /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial:       019C457E9B2D364E117A7EBEA2129EDE2FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number:          1810
Signing time:             Tue 10 Feb 2026 03:00:50 +0000
Manifest this update:     Tue 10 Feb 2026 03:00:50 +0000
Manifest next update:     Wed 11 Feb 2026 03:00:50 +0000
Files and hashes:         1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: T4rCmAJfHllX6RyHH3dYPbLNn5RlCer5Ua01JGOUCI0=)
                          2: e8E7CZUAUckXh4bcKKwuRzIom-U.roa (hash: lALjysVYHSzqDpZrz4VJufsPGn7d6TgnW+zEsP4UHHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:7e:9b:2d:36:4e:11:7a:7e:be:a2:12:9e:de:2f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
        Validity
            Not Before: Feb 10 03:00:50 2026 GMT
            Not After : Feb 11 03:00:50 2026 GMT
        Subject: CN=a1fcdd9b8c9e4d5c4dacfa00090f51b5fc70f3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:51:fe:88:41:ec:1f:25:8c:71:1e:f7:a2:
                    af:cf:a7:39:29:19:2a:e8:1b:44:e5:c2:3c:ab:78:
                    8a:d5:55:6a:90:dd:81:c8:c4:76:29:13:49:62:1d:
                    50:37:5a:a2:73:49:2d:c2:6a:93:82:95:bb:80:33:
                    f9:1e:d2:7d:12:6f:dc:eb:e3:a7:11:5d:16:28:91:
                    b4:34:ab:c6:f8:43:5e:1f:81:4b:22:77:12:0c:83:
                    20:b6:20:6c:08:f6:53:88:3c:ab:64:a9:e6:dd:b9:
                    52:5f:a6:15:6b:ae:af:a9:45:f8:6c:0f:ed:30:ff:
                    4b:03:d5:c7:c7:53:54:74:ca:06:84:3e:a0:4d:77:
                    f5:86:84:21:ac:bc:f5:d3:7b:82:0d:3e:0a:b8:37:
                    da:0b:7a:a1:e1:95:a1:76:1b:c5:07:c1:7d:70:7c:
                    02:94:7d:53:4a:66:69:ae:38:7d:2a:ed:07:38:24:
                    d5:3f:f1:ab:e5:1b:32:81:97:79:9d:25:1e:28:38:
                    56:0c:b5:61:d4:48:65:13:0d:ad:2d:e8:39:32:7d:
                    8f:5b:54:66:41:9f:ec:c5:35:dd:37:63:03:0f:55:
                    5e:ae:c1:b5:6a:5a:1c:eb:c5:a9:e5:05:80:c4:34:
                    90:87:be:df:b9:c9:6b:33:34:2e:fc:75:12:b6:a1:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:DD:9B:8C:9E:4D:5C:4D:AC:FA:00:09:0F:51:B5:FC:70:F3:CA
            X509v3 Authority Key Identifier:
                keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:94:be:a5:0d:2d:63:68:72:9c:14:ae:48:6c:b9:e8:56:bb:
         56:b5:5f:a2:62:9e:35:4d:23:79:18:47:ff:84:62:3a:f0:04:
         8e:0a:78:bb:c7:b4:56:4b:a9:aa:e3:da:3e:b8:ce:5a:12:9f:
         ca:89:26:6c:d2:cd:6c:75:b7:6a:89:fa:dc:13:a0:03:07:34:
         32:4f:f6:20:46:b0:79:97:26:d4:78:f2:21:74:d6:b5:dd:da:
         c0:7d:82:51:bd:6f:db:8e:ed:42:08:4c:44:d5:d0:c6:21:bd:
         1b:74:63:93:2a:a5:c6:bd:68:7f:7c:d8:31:4f:ce:1a:18:b2:
         63:24:0c:29:9b:15:3f:9a:bf:78:3e:91:91:26:8d:d5:43:c1:
         3b:0b:52:9e:44:3e:57:7f:95:4d:26:a5:da:e1:9b:64:6c:f6:
         7c:79:7e:4a:06:bb:9e:c2:35:44:23:ae:cf:e0:1a:b1:b4:32:
         60:60:a8:1f:e2:d6:5f:3b:c9:53:af:ea:50:36:1f:9d:e7:a2:
         6f:da:c3:62:5f:2a:b1:4f:76:8b:5d:3b:d1:cd:ea:9f:f1:7c:
         75:e8:b0:35:1c:11:25:af:91:7c:ef:26:a4:13:8e:9b:22:30:
         9e:3a:77:a3:b1:d8:6c:3f:6e:2d:ad:1f:2c:17:36:28:e9:90:
         59:89:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:44 2026 by rpki-client