This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          mFD7vKzstVdLOQuOquC8lanlCz8QpsKCRVHG8VfexSM=
Subject key identifier:   F9:3D:DE:44:1A:F7:E1:5F:A7:A0:CA:20:1F:01:A2:50:2A:54:C3:01
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019C1CF1932FC6CEEA6C293058178A13D06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          04E8
Signing time:             Mon 02 Feb 2026 06:01:59 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:59 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:59 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: CkBwiqZC98x6ruzX1OIeksd2G8NYuCr65Fj6sO+cMPA=)
                          2: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (hash: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw=)
                          3: Du79ji7HHfBba4InbN4bIGS0_iA.roa (hash: tcL+qNRXPaCLc8dP3FfLSCO8N4UwsOC7d+xUqdSxXTQ=)
                          4: O5W4X-XBYeWAvMUfvIjNuACgFkg.asa (hash: 7Z8pxKRz4YvwT86qT++qRx70dU1ZdttXNNnewjJqgt0=)
                          5: iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa (hash: KlQBY6M94I1QY6KQo3uEfY4PPExUBLB4IqDYeIRa6Gw=)
                          6: yoNR3031t1c5fIpSVbBNiZg-fgU.roa (hash: WFBkEZbt/RtOe+ZGOFWHx7RKyRoySV4z75BvLA08kjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:93:2f:c6:ce:ea:6c:29:30:58:17:8a:13:d0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Feb  2 06:01:59 2026 GMT
            Not After : Feb  3 06:01:59 2026 GMT
        Subject: CN=f93dde441af7e15fa7a0ca201f01a2502a54c301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:84:1f:8f:55:66:2f:88:14:ab:5d:93:cb:
                    c1:5d:9b:24:f8:db:0c:29:4c:25:d3:0b:c7:f9:a5:
                    b1:eb:23:bb:6e:24:96:07:dc:b7:01:8c:62:1a:1c:
                    50:63:87:04:aa:76:42:d8:4a:3c:df:14:37:f0:a4:
                    93:44:9c:f4:76:e6:c8:e8:68:b7:48:96:74:79:37:
                    85:f6:0e:d6:25:14:19:42:dd:a9:86:bd:25:54:d0:
                    ab:5c:22:32:0e:e9:7f:de:2f:a1:c2:be:86:88:a1:
                    44:0b:67:e8:4e:a7:ea:12:85:6f:5e:cd:27:28:3c:
                    33:b3:0e:a5:76:f0:08:94:80:29:9a:4d:09:82:74:
                    15:5f:e3:a0:06:23:bb:d7:a7:1c:f9:a0:8c:a8:f4:
                    00:c5:79:28:18:43:51:fe:76:93:de:bd:35:f0:1d:
                    d6:4f:41:2b:af:e0:56:1e:cf:29:be:d2:b6:aa:e0:
                    87:cd:4f:8f:c3:b9:22:49:04:4a:ae:a4:79:a1:b4:
                    ca:c3:90:b0:f9:4d:ab:66:3d:16:20:9b:e6:f8:63:
                    9d:aa:b0:a8:55:b9:ba:68:e2:a7:d4:1a:d6:6f:ac:
                    65:18:43:c8:b2:cd:2c:ab:df:b1:d1:95:bc:47:3c:
                    e2:78:f4:f3:8f:bf:0a:1f:ba:86:a1:8b:5c:db:76:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:DE:44:1A:F7:E1:5F:A7:A0:CA:20:1F:01:A2:50:2A:54:C3:01
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:84:49:3a:fc:84:8d:7c:c4:06:bf:45:a2:ca:dc:5f:23:eb:
         c2:5e:10:2b:59:0b:23:63:7f:4d:e4:ed:e3:87:43:00:b4:39:
         7a:ef:04:bd:7f:e6:ea:8e:2e:30:55:ec:a2:63:11:0c:41:3a:
         bb:f3:cb:b1:22:a1:59:cd:ef:1c:41:6e:a5:a7:e8:b1:a5:07:
         64:c3:ae:5b:0f:7e:4d:c9:94:0f:68:cb:c3:52:f9:0a:34:b9:
         d4:60:15:87:cf:d8:94:a9:d0:ff:be:7f:11:49:77:aa:d0:f4:
         20:8e:66:94:6a:cc:c2:eb:4b:99:01:a1:bc:f2:db:d4:a8:0f:
         cf:93:e5:c5:29:8b:fe:7a:aa:d3:68:f4:9e:26:fe:04:af:47:
         53:b2:e5:09:c5:50:e6:23:63:4c:8c:5a:97:c3:6a:86:40:65:
         3b:90:7c:7d:c4:ae:49:95:fe:69:72:fc:b8:53:fc:66:46:4e:
         55:94:a8:1a:45:e6:3c:1d:a1:28:cc:ac:5a:3f:2d:81:ad:00:
         cb:4f:3e:4e:4c:c5:9b:28:9d:36:2c:56:7e:3c:9b:f3:b6:8a:
         b0:86:5c:82:0e:b6:ba:c8:91:fa:5c:02:a0:3d:33:68:c7:f5:
         86:fa:84:ed:6c:f4:81:f0:b7:82:13:99:84:fc:f7:2d:11:28:
         2a:f2:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:38 2026 by rpki-client