This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File:                     5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier:          UWJphmcPO6eeJaP5PaNa4D08eLUKpxaXWu8PzUYsmzM=
Subject key identifier:   FF:A2:22:39:C8:AE:E6:C5:FD:7D:9E:2C:99:FF:40:BC:28:F5:3E:F2
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer:       /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial:       019C420FB32A2E5B43FE1504A8D460C09872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number:          0480
Signing time:             Mon 09 Feb 2026 11:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:50 +0000
Files and hashes:         1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: 6IQu6OGRiPxrcTxljc8UdO8rzEU3Prvv4acu7ZGnv4Q=)
                          2: VRLe_vrVUBu7hrug_AwRCwsEDDw.roa (hash: 1ZW4YMZPRX134FBX/m+hkmhqXkoGgUz70QQefV/wFo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b3:2a:2e:5b:43:fe:15:04:a8:d4:60:c0:98:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
        Validity
            Not Before: Feb  9 11:00:50 2026 GMT
            Not After : Feb 10 11:00:50 2026 GMT
        Subject: CN=ffa22239c8aee6c5fd7d9e2c99ff40bc28f53ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:80:5a:ab:59:25:af:94:3e:22:f6:83:94:
                    d3:db:17:1f:f2:44:8a:8c:98:7e:c9:a4:c6:77:25:
                    71:73:2f:e6:88:a8:82:79:99:46:23:74:ee:ef:dc:
                    12:9a:64:5b:6b:b6:a1:8f:27:2c:3f:88:e4:a2:9f:
                    73:2c:bd:20:9f:80:a1:26:b7:f1:06:33:4f:9c:ac:
                    ce:2f:4b:84:93:a6:7c:4c:8b:8b:d6:10:6f:27:b8:
                    d4:e2:84:2d:b8:b5:10:e5:27:cb:5b:39:9e:5e:d9:
                    95:2d:df:d0:d0:db:11:cf:75:d7:d2:77:65:55:98:
                    b8:e7:64:f4:16:3d:15:93:89:91:3b:34:35:a4:87:
                    90:27:0d:27:3d:f5:04:d4:40:51:4d:0f:65:e4:5f:
                    21:7c:14:34:83:c2:5a:2d:43:94:76:68:d7:39:ae:
                    4c:61:30:22:e8:ab:19:4c:67:35:a9:58:7b:60:07:
                    8a:15:64:0c:15:7a:23:a5:4a:70:fa:4b:ec:25:d5:
                    ef:7d:26:5e:ff:58:95:38:a3:83:14:ca:e5:eb:fb:
                    ff:d4:e9:c7:5a:a8:24:34:9b:41:bd:ff:78:d4:d8:
                    48:30:af:2b:a3:70:7f:8e:a8:b4:12:e3:3b:f6:77:
                    8e:1b:a2:b8:a6:46:5e:59:f3:50:34:ba:10:9b:14:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A2:22:39:C8:AE:E6:C5:FD:7D:9E:2C:99:FF:40:BC:28:F5:3E:F2
            X509v3 Authority Key Identifier:
                keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ba:27:8f:54:8f:77:28:59:3c:40:b4:95:46:05:93:99:b3:
         dc:56:09:c5:7d:ed:76:fa:45:97:99:3c:b9:64:76:6d:a8:95:
         4b:98:c9:66:49:26:b0:f0:a2:c1:6b:6d:84:08:03:01:89:ae:
         f1:d5:c1:0f:49:29:b2:09:8a:b0:a2:1e:b0:ae:0e:72:b6:51:
         f8:e1:63:7d:88:c6:57:f4:3f:8d:a2:b6:ee:6c:3f:48:82:d5:
         ab:7e:1f:ff:6e:e3:c4:9e:35:01:a2:ff:eb:db:b1:4d:9e:08:
         52:b6:72:36:6c:13:82:c9:44:c5:86:56:96:61:51:c6:d9:8a:
         e9:86:59:5d:b7:03:22:1c:39:8d:8d:33:bc:cb:15:89:b4:e6:
         45:5d:c8:cf:e1:7b:67:51:5a:e7:8d:4a:2e:01:06:93:b7:64:
         91:2a:29:93:5c:cf:ae:04:92:02:de:2c:86:ef:58:a8:68:44:
         cd:a2:ab:6b:98:72:84:6c:f9:74:f1:a3:9f:06:aa:3a:9c:26:
         38:9f:60:a3:27:d5:94:19:38:9d:8e:d5:88:48:79:8b:1d:2c:
         8e:67:78:89:a7:ea:2e:f4:d5:b6:7e:3e:63:6a:44:9b:94:ca:
         fc:fb:b5:51:9d:77:49:5e:f4:28:3e:21:2a:73:fe:5b:4a:cf:
         e4:89:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:40 2026 by rpki-client