This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File:                     v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier:          k8VtyUweGjfkPxalC1W6kUsDan8VWyBLrSGZfNmgBWk=
Subject key identifier:   4D:07:D4:03:4B:63:30:D1:13:9F:E3:90:2F:35:C4:80:EC:79:C6:55
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer:       /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial:       019C424650E6FE7A50178B4628B9AE4F066E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number:          05CC
Signing time:             Mon 09 Feb 2026 12:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:30 +0000
Files and hashes:         1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: lN/YHt4by0fJRdtNilBECfB8h1Fk6aYdCT3ukJHE2Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:50:e6:fe:7a:50:17:8b:46:28:b9:ae:4f:06:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
        Validity
            Not Before: Feb  9 12:00:30 2026 GMT
            Not After : Feb 10 12:00:30 2026 GMT
        Subject: CN=4d07d4034b6330d1139fe3902f35c480ec79c655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:0b:10:bf:57:f3:bf:0a:48:ca:64:3d:1f:
                    df:a2:db:e8:d8:c5:6a:78:92:8d:8e:bd:d7:db:0c:
                    2f:b4:2c:d6:df:d3:be:ed:e2:1f:0a:c5:3b:4e:2d:
                    78:85:cd:fa:08:ea:2f:ae:fa:95:5d:fc:29:39:c8:
                    dd:b6:57:94:eb:ab:ad:c2:aa:58:e1:f4:bb:a3:f5:
                    f3:8c:ad:e2:e6:42:62:d9:33:b0:19:e7:26:77:30:
                    83:79:d9:be:28:bd:e7:3a:95:bf:7e:54:b8:dd:94:
                    6f:87:ad:b9:3e:07:b5:b7:d7:71:4e:77:34:20:d6:
                    4f:db:6a:ab:54:3d:44:1d:ec:8f:ca:d7:c8:3b:ba:
                    68:36:2d:6f:73:ba:f6:15:5d:61:e2:98:c8:4f:53:
                    3a:99:76:0c:3b:29:ac:fd:20:c8:8a:a5:db:9b:36:
                    b2:3d:36:26:7b:a0:f4:46:bd:4f:e2:1d:51:72:e9:
                    a6:ce:4c:cb:46:73:3a:52:33:4c:db:04:5c:25:11:
                    8b:d9:9b:b3:f0:26:40:24:61:da:56:36:62:f6:bd:
                    f6:3d:b0:02:75:c1:26:20:ed:fb:cd:20:82:0d:e0:
                    6e:be:e4:e5:f5:97:96:7d:60:2f:16:f9:6d:ff:a3:
                    e1:1b:36:83:1a:ba:41:3b:93:29:2a:1b:29:54:11:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:07:D4:03:4B:63:30:D1:13:9F:E3:90:2F:35:C4:80:EC:79:C6:55
            X509v3 Authority Key Identifier:
                keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:52:80:24:88:92:bd:d5:e4:65:68:77:45:c4:0f:21:91:83:
         5b:ed:0c:9c:51:95:c7:f9:18:fc:e7:ba:3f:ad:f3:79:8a:7d:
         54:b3:d7:76:d9:e1:87:61:f0:55:b6:ee:19:24:d9:28:85:23:
         ac:60:36:8f:8e:ae:ff:8f:d4:ab:59:9b:79:13:41:cb:b1:35:
         48:9e:41:18:b1:ec:e7:4e:a1:e8:46:7f:ba:48:3a:26:30:eb:
         31:93:d9:64:56:4e:4f:88:e5:4e:96:f1:55:7b:af:50:5c:af:
         6b:c8:a8:f0:b4:29:d3:7b:8d:aa:31:ab:85:7c:5e:0c:1d:41:
         44:3e:cf:88:0f:c3:77:9d:b8:a1:e3:3e:d7:f3:32:54:ff:60:
         46:b2:53:67:b3:0e:ee:88:bf:b5:83:e6:f7:34:27:5c:2e:47:
         12:57:76:0f:3f:a7:88:8d:69:ce:8b:95:32:aa:ec:78:86:32:
         00:32:c3:b8:85:ae:c0:de:4b:93:78:3a:5d:7d:fa:98:f6:1a:
         71:11:c4:e5:1f:e0:00:63:bc:92:22:a5:ca:16:4d:db:bb:0c:
         b2:65:0f:de:e2:7d:99:ea:99:97:72:58:67:ec:05:4f:22:54:
         88:8b:85:ac:03:eb:e6:fc:ea:92:3b:06:85:41:f8:b4:f1:44:
         13:e8:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:57 2026 by rpki-client