This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File:                     5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier:          zxF/44bk/l/Mcm61nW7V0wxhLYGO76KA9BfZ9EF41i4=
Subject key identifier:   C4:D7:50:0D:70:9D:63:F6:11:58:DC:62:B0:60:28:67:E9:BD:1E:A9
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer:       /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial:       019C439040765FCD61176247F2CED9B7850C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number:          04CF
Signing time:             Mon 09 Feb 2026 18:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:53 +0000
Files and hashes:         1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: rHTRV4dtzjm04qT73Q+gAHsDzQDPaMnwKr5y0E9xB3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:40:76:5f:cd:61:17:62:47:f2:ce:d9:b7:85:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
        Validity
            Not Before: Feb  9 18:00:53 2026 GMT
            Not After : Feb 10 18:00:53 2026 GMT
        Subject: CN=c4d7500d709d63f61158dc62b0602867e9bd1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:dd:aa:b4:9b:8e:98:4f:29:66:b8:ae:c0:
                    24:4a:3f:a9:04:57:b5:54:db:53:b8:45:39:8f:27:
                    08:a1:a9:65:ef:1c:c8:e8:43:1f:6c:c7:fb:0b:2c:
                    3b:f7:8b:8a:bb:b3:c6:78:15:8f:66:04:e3:41:f4:
                    eb:99:7d:e5:d7:0d:11:c1:bd:4c:ba:a4:7b:92:29:
                    64:ee:b1:0c:e4:c4:82:bc:13:46:59:3d:be:82:7e:
                    7c:c8:11:1e:dd:4e:51:10:56:9d:f3:c3:22:5f:a1:
                    46:c2:60:27:11:d3:5b:cd:db:4c:06:f9:6a:63:87:
                    df:4d:4a:26:83:69:cf:b2:c0:ad:0c:25:d4:a7:34:
                    38:52:d3:e4:2d:ca:e0:65:d2:31:db:fa:70:c8:bc:
                    de:40:3a:66:f5:26:1f:00:9c:a3:86:c1:c5:ff:0a:
                    0c:96:37:4f:78:fa:73:9d:d8:40:1c:f1:69:91:6b:
                    a9:30:51:db:f3:04:ac:39:de:d7:d3:c6:6e:54:20:
                    a7:46:e8:1f:70:d9:11:d4:6a:8b:36:e5:cc:c4:62:
                    23:80:3d:4e:58:d3:b8:37:16:f1:27:cc:51:9d:40:
                    6c:36:32:f6:f4:b9:f2:6c:04:2c:d3:e9:2a:8b:e6:
                    45:5b:50:bb:a2:5a:bc:aa:33:af:45:87:1e:54:c9:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D7:50:0D:70:9D:63:F6:11:58:DC:62:B0:60:28:67:E9:BD:1E:A9
            X509v3 Authority Key Identifier:
                keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:52:b7:e6:45:6a:eb:0b:e6:f3:f0:5a:ee:60:a8:1b:83:51:
         9d:ed:02:12:54:da:2b:45:1f:08:e2:41:c5:14:c9:7a:86:f9:
         c5:5d:c3:19:e3:d7:00:e7:f6:3b:58:e0:a6:a2:c3:6f:88:cf:
         90:53:c7:ce:94:ab:5c:c9:5a:f5:96:6c:48:90:b7:f9:ae:2b:
         1d:bb:4c:fe:38:59:30:5d:26:32:66:4f:8b:70:06:1b:35:7f:
         64:4b:af:02:7b:95:4b:8b:0a:89:7e:df:0b:d3:49:54:8a:87:
         ee:f3:b4:ce:68:89:c0:a9:6e:51:6b:ee:96:69:1d:c6:06:4b:
         da:d9:1a:14:ae:75:8f:c1:30:e8:58:0e:9c:c1:24:6d:fe:3a:
         7e:6d:2c:1f:03:b6:fc:05:2d:c8:59:cc:b8:b5:3a:c8:5b:bb:
         f8:81:b1:4c:80:7d:8a:43:2d:f7:dc:8c:fa:97:9b:45:67:cb:
         9b:71:d7:bd:ff:1b:be:f9:18:55:5b:a0:1c:0c:d2:7f:99:76:
         6d:fc:58:07:34:2e:16:77:a2:4d:da:10:46:2e:6b:7d:56:7a:
         6f:af:cc:2f:22:5d:5e:ff:90:3a:a5:5d:ff:5a:39:97:fe:36:
         97:d4:87:28:3c:ca:cb:32:ce:18:7f:d4:95:d4:47:88:90:d7:
         58:5e:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:38 2026 by rpki-client