This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File:                     A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier:          00gJPMXFIdgeI4XZhMCmsmRzQsDO1YV1sTaIEX6cULk=
Subject key identifier:   C0:2E:3A:19:1E:4C:C1:94:70:6E:25:38:E8:29:5A:6B:32:3D:2A:F5
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer:       /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial:       019C427CFD602A878F4D560C87E16BCA99B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number:          087A
Signing time:             Mon 09 Feb 2026 13:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:13 +0000
Files and hashes:         1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: WJi7esQ6m4UMHezuNGcEtvGSYaUbRTJ4j2IOrPn0VTo=)
                          2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7c:fd:60:2a:87:8f:4d:56:0c:87:e1:6b:ca:99:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
        Validity
            Not Before: Feb  9 13:00:13 2026 GMT
            Not After : Feb 10 13:00:13 2026 GMT
        Subject: CN=c02e3a191e4cc194706e2538e8295a6b323d2af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:28:c1:9b:c5:59:c4:0a:c8:2c:03:31:43:
                    34:c9:47:59:fb:4f:cc:c4:8b:0d:0c:94:4c:f4:af:
                    1a:04:3e:7f:27:9b:5a:af:47:90:a8:b6:23:4b:6b:
                    2e:f3:8b:82:a2:92:75:df:b4:4d:cb:82:97:c2:1b:
                    74:04:98:a7:26:38:83:6c:45:d3:ef:12:da:07:5e:
                    56:35:e4:fb:14:70:a7:ca:30:5d:57:81:78:32:1f:
                    b8:80:f7:10:21:02:e0:cb:84:5a:0c:a3:de:ed:32:
                    c8:a5:6d:97:ae:fb:d3:f2:e9:44:96:4a:b6:f7:ca:
                    f2:41:5b:eb:e7:f1:ae:14:c2:69:ab:09:58:08:db:
                    5d:e0:02:f5:e4:f5:5b:d9:33:3c:4e:b5:ae:8e:23:
                    84:5c:1b:9d:40:22:d3:1d:ac:5c:f4:e4:a8:5f:e2:
                    c6:4f:4f:da:07:c6:25:db:c3:0f:d2:7b:03:f4:43:
                    eb:41:23:c4:84:57:5f:74:ba:10:64:1d:7e:52:4a:
                    f8:9a:88:4f:25:62:fc:ff:d0:a1:52:29:52:2d:e9:
                    01:63:0e:68:63:94:ef:f2:5c:0d:64:76:ab:44:46:
                    a8:0c:3a:10:db:8b:8e:fd:5f:06:3c:d3:6a:51:e5:
                    94:6f:08:23:80:52:0d:c3:14:d1:b8:b8:30:09:dc:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2E:3A:19:1E:4C:C1:94:70:6E:25:38:E8:29:5A:6B:32:3D:2A:F5
            X509v3 Authority Key Identifier:
                keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:56:97:17:e3:1f:e2:f3:9e:1d:c1:4b:a6:7a:be:6b:bd:ad:
         50:52:89:05:7e:cf:22:b2:ce:c9:db:04:ae:fa:43:49:d8:c5:
         9c:21:b7:f4:2a:06:c6:d9:d2:67:db:58:7c:f0:a4:b4:4a:4e:
         8d:e8:fd:5b:4e:bb:c1:4a:4d:c0:ae:29:e6:63:b5:49:d4:8f:
         ac:9a:6c:c6:60:ce:55:d2:a4:19:a2:c7:59:f6:e2:87:2e:cb:
         30:be:fd:f7:a4:48:cb:82:35:df:7f:17:1c:19:2e:bd:ac:5a:
         66:32:b9:72:f5:47:33:94:70:ef:3a:7b:9c:86:46:28:25:46:
         3a:f0:50:12:37:93:3d:ff:84:cc:b1:48:60:eb:c5:44:92:4e:
         18:ea:97:94:ed:ef:49:89:c1:1e:b0:5f:df:d5:58:1c:1c:a8:
         e0:77:e8:3f:b7:2f:15:1c:d8:ee:d4:2a:00:52:83:37:db:20:
         bc:b2:0b:b2:7d:65:2f:70:ce:60:47:6b:17:75:73:b1:69:2b:
         e4:c9:5f:bf:9d:17:0d:ee:29:5d:06:1e:e1:98:0d:1c:ce:39:
         43:7b:d1:29:58:7e:38:36:8c:93:fc:86:7e:ef:c1:cb:e4:61:
         fb:60:6a:f0:cb:d4:36:0f:7a:ee:1a:45:73:0b:8b:3d:57:19:
         40:80:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:21 2026 by rpki-client