This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          YwGTLFQHoANBbv6Bo2bHQ3Ym7efIoubcigC8gtskSIE=
Subject key identifier:   4E:0F:70:12:D3:E4:17:07:60:D9:10:80:D5:1D:A1:4E:99:F3:65:1C
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       019C2E1AC6C3E354135DFDC0C0F38FB76B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          1806
Signing time:             Thu 05 Feb 2026 14:00:32 +0000
Manifest this update:     Thu 05 Feb 2026 14:00:32 +0000
Manifest next update:     Fri 06 Feb 2026 14:00:32 +0000
Files and hashes:         1: MavdUwtL9hXRYTucFdVXRHkrrIo.roa (hash: yraXNEacytf4HbmMAZg6e64667WxeEaDmWzKdMpCXxk=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: qQOqk8jrFHIa4TDepGcHxLv2apeufceRcjyj9aXepwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:1a:c6:c3:e3:54:13:5d:fd:c0:c0:f3:8f:b7:6b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Feb  5 14:00:32 2026 GMT
            Not After : Feb  6 14:00:32 2026 GMT
        Subject: CN=4e0f7012d3e4170760d91080d51da14e99f3651c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:71:98:3e:fb:4a:0b:f0:57:ac:e0:a6:5f:
                    79:70:48:bd:55:46:14:b2:0e:b8:64:75:6e:d0:f0:
                    5b:87:01:f4:97:8f:b8:55:1a:89:ed:c3:22:34:b1:
                    81:32:c1:b9:ad:ae:fa:d5:f1:fc:ad:9f:ec:c0:71:
                    bc:84:45:21:d7:8e:b4:a8:8c:d0:77:9a:7b:5f:cf:
                    f1:02:74:e7:73:f1:da:6b:c8:98:fd:01:e2:56:9a:
                    7c:8a:cc:98:30:b4:2f:08:9f:27:2d:55:6a:5e:5a:
                    ed:79:60:c5:72:10:c5:59:1a:99:44:8c:fa:8a:4b:
                    5b:3a:35:d8:44:d1:dd:07:9e:50:f9:6a:6f:8c:c1:
                    52:d8:04:6b:f3:d0:65:a1:03:43:10:f9:95:46:36:
                    4b:c5:4e:52:6b:d5:f4:94:d0:66:23:c1:9e:85:c0:
                    05:7d:80:81:ff:a6:4d:c6:3c:62:19:f7:75:53:01:
                    5b:d8:47:92:b2:ba:be:ac:ad:e2:2c:b9:c1:44:66:
                    4c:d2:e0:c3:4e:01:9a:5e:68:5d:e2:dd:65:8a:79:
                    89:2f:cc:be:0a:b5:ee:ed:1b:cc:68:a7:98:2a:55:
                    e9:78:be:06:c3:19:aa:e4:f3:2c:5a:c5:fb:1e:1d:
                    b5:d3:46:03:88:36:1e:33:94:14:cf:f6:a1:a3:af:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:70:12:D3:E4:17:07:60:D9:10:80:D5:1D:A1:4E:99:F3:65:1C
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:36:31:b1:2e:4a:c1:53:f8:59:11:27:ea:f3:f5:bc:fe:eb:
         ae:52:94:b4:6d:c1:cd:23:80:89:6e:51:a8:62:53:55:b9:ec:
         e9:2c:02:b3:75:ce:92:bf:aa:8b:4c:d1:60:3c:a5:66:fb:a7:
         7a:49:23:af:bc:7a:05:ba:f3:52:be:9e:19:74:cf:3c:aa:53:
         57:55:66:38:a4:62:ae:7f:e7:fd:81:48:4e:f1:ab:81:2f:c6:
         4d:80:15:0c:4b:4d:04:36:4a:8a:0a:c3:e7:1e:81:4f:66:cf:
         39:b5:c7:1d:45:2c:e1:1c:0f:62:41:fb:c1:cc:a8:1c:4b:6b:
         27:24:aa:5b:e1:af:66:4c:e6:7d:dc:52:76:5d:55:32:ed:b5:
         93:c1:9c:76:dc:1f:d7:03:2e:d0:e4:2b:b6:8a:6a:c4:1e:87:
         c9:f9:e7:2e:e4:a5:1c:03:a9:a2:dc:76:85:44:76:3f:32:d4:
         49:40:08:a8:25:15:17:4e:86:96:32:23:5e:fe:66:4a:b3:12:
         f5:5b:77:85:00:4e:41:5f:64:53:36:22:71:78:a7:14:0e:37:
         0b:6c:3f:e1:af:a9:36:c0:7e:11:df:1a:3e:06:b9:ff:d3:bb:
         e8:28:93:39:fb:73:6b:99:54:88:ef:e3:04:42:35:da:6b:75:
         db:2c:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 19:47:58 2026 by rpki-client