This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
File:                     FltW5Vtv77wg20rOb9dWxz10H5w.mft (raw, json)
Hash identifier:          Mjgxi8Ru7gbkSzdF0qY+VFYVLvYp4eL2M8ps/zKyve8=
Subject key identifier:   CA:E0:36:35:65:2D:39:18:D8:4E:23:79:17:57:46:B4:BC:04:D8:5C
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Certificate issuer:       /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial:       019C42B3FFFB74BB6D9BB2C309D03657C76C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
Manifest number:          056A
Signing time:             Mon 09 Feb 2026 14:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:18 +0000
Files and hashes:         1: 1QUTqjVRf3WO2uBrVpxK_TeZJGI.roa (hash: CO13+mc4SGDYYeU1j9VlsVtCT9IIqX88ma+GQJWpzmE=)
                          2: FltW5Vtv77wg20rOb9dWxz10H5w.crl (hash: Q+5XH0VuMoUozeHBXfvKTBzD4tB3om5LpayepFxuP38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ff:fb:74:bb:6d:9b:b2:c3:09:d0:36:57:c7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
        Validity
            Not Before: Feb  9 14:00:18 2026 GMT
            Not After : Feb 10 14:00:18 2026 GMT
        Subject: CN=cae03635652d3918d84e2379175746b4bc04d85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:95:a8:df:de:7f:12:1c:6e:5a:cf:ea:26:
                    d7:da:ac:e8:22:7a:c3:54:d8:03:9c:a6:df:48:54:
                    2b:de:50:b1:86:c1:da:56:6d:bf:fb:a4:ed:b8:3c:
                    f8:5b:23:18:9e:16:58:bd:45:68:6c:d6:87:cf:ed:
                    1d:e0:77:88:f4:c3:57:62:24:6b:02:71:c0:59:86:
                    71:a0:a4:27:3e:e8:e0:2d:9c:4b:a1:34:d0:95:63:
                    f4:db:13:71:c8:0e:d9:cf:84:b0:3e:5e:b2:0b:f1:
                    57:e8:c0:d7:e9:c6:07:a1:d7:18:20:49:fc:0d:64:
                    d4:a4:40:f6:e6:38:bc:0d:fe:7c:05:cf:3f:4c:17:
                    fe:85:00:96:a3:f4:2f:0d:94:04:ea:63:de:62:2a:
                    be:60:d6:65:7a:0a:b8:b2:7c:3b:3c:6e:a3:3e:0b:
                    13:30:a0:37:ff:a9:37:5f:58:01:ad:a3:e4:12:a4:
                    32:4d:2a:6d:c7:04:32:bf:b6:1a:aa:33:6f:64:52:
                    8d:63:f9:cb:ee:85:e9:db:33:75:bb:fd:81:41:3e:
                    5d:2b:67:43:2c:c9:75:27:37:85:36:8c:01:dc:84:
                    62:1e:fe:4c:ed:56:94:21:45:38:11:26:63:ff:fc:
                    57:7a:23:3d:96:d8:02:e0:cc:8b:1f:5d:e2:ba:4c:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:36:35:65:2D:39:18:D8:4E:23:79:17:57:46:B4:BC:04:D8:5C
            X509v3 Authority Key Identifier:
                keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:13:b3:8f:b8:6e:7e:25:dc:20:be:a4:86:79:36:f9:c5:41:
         bd:e1:b2:8b:eb:67:f1:b3:c5:f4:c0:01:58:85:13:9a:79:8b:
         9d:8c:ed:79:6c:2f:7e:ef:f0:c4:a8:40:c2:b3:89:ba:be:97:
         3b:ca:5b:dc:22:5d:a8:93:29:21:19:92:41:8c:e4:78:73:19:
         79:42:70:6d:d8:41:5b:de:2e:8c:e4:03:1e:b8:a3:48:05:df:
         f1:ef:26:a8:06:cb:c5:a5:e6:db:fb:c7:0c:9f:72:9d:34:c8:
         7c:3a:a3:b0:cc:79:72:46:e4:4a:d7:b2:73:63:1e:1d:4b:9c:
         67:e5:c4:c2:37:6e:91:71:8c:e5:8a:00:4f:dd:49:cb:36:b8:
         3d:3d:b3:b5:24:54:13:db:92:95:6b:14:a8:cf:25:83:84:a9:
         7f:0a:75:d0:ed:ef:3b:6a:1f:d0:15:f0:de:6b:05:36:fd:86:
         32:af:b3:56:fc:fb:1e:75:54:4e:27:4a:57:57:b9:b4:18:27:
         f6:69:5c:80:c5:9e:49:d9:4e:6f:b1:af:cc:d0:6b:fc:cc:9f:
         b7:cd:59:19:7d:94:54:d4:8b:09:89:45:f0:b2:35:b9:43:98:
         3c:dd:a5:a3:0a:8a:92:2d:bf:ef:3c:77:13:89:4e:2b:2f:93:
         48:00:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:29 2026 by rpki-client