This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File:                     n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier:          crcsU9dOQoqNTg9Elq954EzmOsdq52zAAjD6uUhMsso=
Subject key identifier:   1C:22:A4:0E:57:89:48:04:A9:57:23:FA:11:54:B9:DA:AB:84:0D:55
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       019C4321DB32DBA50FD5921E2834E258283F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number:          0D10
Signing time:             Mon 09 Feb 2026 16:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:18 +0000
Files and hashes:         1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: eOBRpHmw9uyPQVOFTc2HCQKy94FaNC8MPUrqVyOuPYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:db:32:db:a5:0f:d5:92:1e:28:34:e2:58:28:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Feb  9 16:00:18 2026 GMT
            Not After : Feb 10 16:00:18 2026 GMT
        Subject: CN=1c22a40e57894804a95723fa1154b9daab840d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:6e:3c:b7:ce:72:9c:48:1b:eb:96:b8:1b:
                    43:22:a4:61:7d:23:13:4f:ee:e1:a5:05:3b:3a:6e:
                    04:ef:bc:63:9e:4e:fb:ad:e6:4a:1c:29:39:8d:72:
                    30:c2:c0:e4:12:6c:0f:0d:58:05:d5:ab:23:37:36:
                    1b:6d:74:3b:f3:88:82:70:3e:d9:f0:d7:69:b1:2b:
                    d2:60:9c:e4:c8:8c:20:7c:86:58:c8:97:6a:51:ca:
                    b8:3c:c7:5a:4f:1a:fb:5a:7a:e7:ed:89:ac:2c:86:
                    d4:e2:60:b1:60:1f:57:03:ee:77:1d:95:39:f7:08:
                    1e:aa:56:9d:26:9e:35:80:24:54:2b:f8:7a:7a:52:
                    e0:3d:23:27:0a:bc:f2:8b:da:02:42:38:78:84:37:
                    fd:32:ae:4a:65:8e:17:ea:fc:24:66:fb:3a:3f:09:
                    22:3d:d2:6f:7d:c9:e3:47:b0:b6:38:36:4a:8c:12:
                    59:65:4d:fa:3b:2b:be:50:4b:18:7b:89:0e:0a:0e:
                    01:80:7e:c7:57:9f:9b:0b:3a:86:8c:ec:07:12:d9:
                    af:7a:f9:63:94:84:42:3c:74:2c:58:9b:63:59:4a:
                    b4:c5:16:e9:97:c4:83:54:44:0d:d1:54:a7:9b:08:
                    69:0b:53:66:a2:da:b5:cf:cc:6b:1c:fd:9c:23:5b:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:A4:0E:57:89:48:04:A9:57:23:FA:11:54:B9:DA:AB:84:0D:55
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ea:30:ea:bd:ec:42:52:6a:d7:32:10:95:f4:e1:18:23:c0:
         0f:08:62:27:f7:f0:5c:e6:72:22:da:f9:9e:a4:f2:7e:74:f2:
         f1:68:c2:39:72:f5:cd:c6:21:45:dc:42:08:21:6c:9a:3c:81:
         2c:6e:ca:fc:2c:b2:73:9c:2f:e9:0b:8a:c7:59:d1:9d:b2:8e:
         65:49:5b:b8:25:97:34:30:26:e2:87:58:56:d3:1a:a4:5a:b7:
         55:50:ed:39:ff:68:ef:3c:3f:63:03:1f:b8:b7:2d:be:21:74:
         94:d4:2c:83:6c:db:a5:24:1c:fb:6c:bd:1a:f2:4e:99:78:72:
         7a:9e:af:b9:0e:c2:74:1c:84:d5:88:16:67:64:5c:a6:d5:13:
         ab:c6:01:f8:b9:a7:8c:8c:59:3b:fd:8b:0b:7c:c4:b0:d7:05:
         9a:1d:c6:48:5e:02:54:cb:7e:d8:69:27:b4:0b:cc:d2:ac:be:
         6d:64:ab:e0:09:07:16:2a:8a:9a:8f:76:c3:af:a1:52:aa:9c:
         bc:67:2d:b5:4c:49:c1:19:d3:8f:ae:6a:81:b3:8f:08:e8:0f:
         06:45:20:f4:0b:0a:1b:78:68:f5:cb:e3:cb:03:e6:ec:72:0a:
         1f:0f:b5:b9:3f:42:1b:5d:97:de:67:ec:38:39:5d:10:30:7e:
         82:34:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:37 2026 by rpki-client