This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File:                     5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier:          3MZvYunpp4NpptQEDfd1l0F7dWVcu54riUPso+72nw0=
Subject key identifier:   2F:02:59:7F:8A:78:71:5E:33:65:D6:5B:92:8C:E1:DD:F3:A6:8E:F5
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer:       /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial:       019C4358F1E0983F27D62A7A23433B6D8254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:28 +0000
Files and hashes:         1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: KPzDfaBuAwEL5/RwkQXuQOnyl8hZMcga4qRT0Qo+Ows=)
                          2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:f1:e0:98:3f:27:d6:2a:7a:23:43:3b:6d:82:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
        Validity
            Not Before: Feb  9 17:00:28 2026 GMT
            Not After : Feb 10 17:00:28 2026 GMT
        Subject: CN=2f02597f8a78715e3365d65b928ce1ddf3a68ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:9e:47:cb:52:b8:9e:36:83:69:2c:74:21:
                    40:41:87:e7:95:8a:dc:10:c9:8d:1a:3d:87:c7:9b:
                    11:76:06:03:d0:5f:42:bf:d0:26:42:af:33:d0:2a:
                    42:72:1b:f1:08:87:62:81:78:9e:b8:e1:7a:12:13:
                    39:33:76:79:d4:fc:f0:46:8d:fd:c0:a4:38:ce:14:
                    d7:c3:64:04:f7:16:4e:ce:6f:8d:c2:e2:3c:1a:29:
                    18:f5:96:ac:61:3c:40:5c:1a:30:c6:a8:77:b3:39:
                    c3:d1:93:2b:2b:5d:21:3c:30:e7:a9:7c:e2:2d:20:
                    c4:12:96:d9:55:dd:97:45:c3:8f:e2:88:f8:a3:9e:
                    b4:43:1c:f1:55:10:65:41:81:e7:ec:75:0e:ea:1a:
                    e7:c1:bf:a8:3c:ee:4d:89:ab:ce:9e:ce:44:ee:06:
                    de:95:98:9c:ab:48:0f:92:85:54:ff:da:60:2f:1d:
                    17:9d:97:79:12:91:09:f6:ad:97:c9:29:2e:cb:dd:
                    5d:74:b7:24:d3:0c:f3:86:5a:2c:71:22:02:10:8d:
                    05:58:23:8c:c1:4f:63:d5:de:34:2e:aa:1e:31:34:
                    48:7f:e7:e5:39:af:96:b5:79:9f:19:4e:38:12:8b:
                    56:5e:12:65:16:b2:3e:6c:b9:e5:e5:75:4d:21:eb:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:59:7F:8A:78:71:5E:33:65:D6:5B:92:8C:E1:DD:F3:A6:8E:F5
            X509v3 Authority Key Identifier:
                keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:80:12:da:da:b6:21:93:f9:70:3d:95:f8:e5:2d:b9:2c:
         98:e0:38:12:b4:34:5f:9b:e3:b6:cf:4a:3e:94:75:30:97:8f:
         c6:63:37:fe:54:57:0d:36:1c:11:35:f2:99:6e:44:de:fe:ac:
         79:34:cf:6a:68:27:ad:dc:19:ad:85:44:f4:0a:4d:bd:a5:e2:
         88:fb:e1:df:46:6c:8f:61:da:9d:94:cc:e7:4b:89:d1:5a:c1:
         6a:c5:bd:3e:47:cb:9a:01:ad:1f:6f:d8:4b:3b:d0:5b:c8:d3:
         4b:d6:d4:0d:68:8b:1e:3d:fa:64:c8:9a:67:e9:41:8c:8d:f2:
         4a:c4:15:19:c4:99:62:80:0a:c0:02:80:48:7b:41:c5:6a:a7:
         c3:cd:72:04:db:78:d8:5b:b3:f6:63:f4:bf:d1:42:18:9b:ae:
         6d:06:0d:19:c8:06:5d:c3:30:02:59:c9:37:39:bf:8f:c7:62:
         44:bc:ec:72:8c:34:c4:d4:61:ba:91:78:91:7a:f9:a1:62:72:
         81:04:b4:21:64:f6:10:40:f6:50:4b:06:f0:d0:f8:4b:1c:c8:
         da:ff:a0:51:9f:32:91:58:3f:11:14:de:ef:32:16:4f:33:1f:
         91:54:50:e8:5e:c3:fe:d6:ac:a7:e2:75:e5:ac:6a:bc:12:54:
         31:ec:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:25 2026 by rpki-client