This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File:                     DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier:          UmTogH0XZyR1yzvOCidWwtlUdo/5DG2XwWKo8R8QBSQ=
Subject key identifier:   D0:E5:2A:A5:62:05:E0:38:CC:BD:FC:05:7E:2B:5E:6D:3E:00:8E:61
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer:       /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial:       019C1BA76704FAFF9C968EFCC562481CAF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number:          0F2B
Signing time:             Mon 02 Feb 2026 00:01:21 +0000
Manifest this update:     Mon 02 Feb 2026 00:01:21 +0000
Manifest next update:     Tue 03 Feb 2026 00:01:21 +0000
Files and hashes:         1: Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa (hash: Og9dej6zdeYfUEuKlPyDfibsivF+zi1xumhqKFbtAHA=)
                          2: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: eU562wgwV/FOFk9P882K8lVDdLKzoMuUZ1MjBUYX654=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 00:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a7:67:04:fa:ff:9c:96:8e:fc:c5:62:48:1c:af:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
        Validity
            Not Before: Feb  2 00:01:21 2026 GMT
            Not After : Feb  3 00:01:21 2026 GMT
        Subject: CN=d0e52aa56205e038ccbdfc057e2b5e6d3e008e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:fb:ca:92:c3:86:e2:0a:6e:16:43:e0:82:
                    95:4a:a5:2e:d4:4a:0a:b5:ce:6a:22:83:c1:cc:f6:
                    3d:cc:67:6d:c7:bb:47:06:64:bb:b5:2a:1d:e8:f5:
                    02:c5:78:12:fb:ea:70:7b:7a:1a:3c:fb:82:f7:91:
                    35:04:7d:56:af:38:82:39:1f:ac:a0:4b:a9:09:0f:
                    f2:85:5b:8a:88:be:bb:b6:04:57:9f:af:f4:4d:80:
                    c1:4a:5e:31:d6:1c:ed:5b:c9:97:9e:d7:fc:2f:8f:
                    cd:43:21:c4:16:b8:11:70:0f:92:61:c5:72:bf:e2:
                    d2:28:58:78:38:a8:4c:22:5d:b7:13:f4:6a:b6:36:
                    bb:1a:22:27:cc:61:a6:fe:43:d1:df:50:6d:32:a9:
                    2f:6f:6b:30:86:ef:0b:f9:8d:4d:db:35:46:7f:8e:
                    a2:a6:0f:bd:d4:79:96:2f:16:61:04:7e:f0:ae:0c:
                    60:9b:58:f0:6b:b1:22:7e:c2:bc:e7:fc:c8:fb:74:
                    14:fe:9a:8f:59:8b:95:1e:17:a5:85:c7:79:a4:69:
                    11:85:55:56:38:f9:9e:5a:48:39:f3:c5:34:88:f2:
                    2c:e3:be:76:ca:ec:6d:79:22:80:b3:88:ef:be:64:
                    2f:dc:99:82:a8:c7:3e:0f:8a:01:b6:7e:a9:59:a3:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E5:2A:A5:62:05:E0:38:CC:BD:FC:05:7E:2B:5E:6D:3E:00:8E:61
            X509v3 Authority Key Identifier:
                keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:8f:d9:65:7f:f1:97:b6:b5:c6:24:63:a6:6c:00:be:74:
         53:f4:34:33:ce:7d:02:06:48:ba:c8:8c:8c:92:ef:cd:88:f8:
         0e:b5:1c:6a:10:12:b5:a0:b5:e0:52:5a:ea:f1:83:e3:69:1d:
         db:58:38:10:37:d9:cd:2c:81:8d:7c:0f:63:0f:80:78:86:99:
         15:04:c4:ca:8e:d0:89:f9:be:ce:6a:44:9e:e9:89:1e:c9:a4:
         58:7e:74:11:74:e1:54:ce:4b:fa:91:1a:cc:31:47:39:0a:50:
         4f:59:37:2f:72:46:3a:9c:05:d9:87:99:ef:48:17:99:8d:b8:
         49:8a:5a:db:58:bc:f6:ed:21:f2:37:70:38:c3:16:93:92:5d:
         05:ed:33:16:78:6c:96:22:54:c3:e4:20:82:b4:0a:cb:44:6f:
         d5:2a:5d:3b:9f:c7:87:0b:46:53:fa:db:c1:9b:fd:e3:0d:92:
         ee:97:f7:46:31:4b:96:50:80:14:c7:62:0e:50:ce:67:d9:5e:
         60:be:78:a4:d1:45:99:29:1a:2a:ad:c3:21:26:df:7b:05:ce:
         26:0e:43:10:5f:4c:1c:ff:68:1a:5d:32:5d:ac:41:b1:26:42:
         54:1f:0b:44:ed:34:3f:28:5f:49:f9:e5:96:76:35:80:67:5c:
         47:04:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:22 2026 by rpki-client