This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File:                     d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier:          fN1j+CSlSoVgUW7tkMmXBU1unnkfKlD2OeZBQEkEyaI=
Subject key identifier:   5F:CC:05:3B:77:28:DA:0C:15:D6:12:DE:4C:85:74:25:F3:83:81:EE
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer:       /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial:       019C42B45CC2829D1921553D4DEACFAABBEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number:          06AB
Signing time:             Mon 09 Feb 2026 14:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:42 +0000
Files and hashes:         1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: UabVbzcck98uRjbBlh0Aez15sIvubwVGhtMzG5nnLOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:5c:c2:82:9d:19:21:55:3d:4d:ea:cf:aa:bb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
        Validity
            Not Before: Feb  9 14:00:42 2026 GMT
            Not After : Feb 10 14:00:42 2026 GMT
        Subject: CN=5fcc053b7728da0c15d612de4c857425f38381ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:17:eb:f3:31:a6:7f:4d:bd:23:f4:53:55:
                    c6:72:e2:6f:0c:ba:87:8d:5d:5a:ec:01:83:eb:e5:
                    56:ac:1e:7a:67:82:a5:08:34:78:1f:dd:5d:ad:e7:
                    b0:43:ce:67:31:34:b1:4b:ad:26:37:21:f1:76:8a:
                    ce:d0:1b:de:39:f0:23:f6:66:c4:90:a6:8c:83:52:
                    a8:03:dc:7f:44:dc:ef:56:1a:e1:0f:5b:b3:47:78:
                    bb:6b:39:96:d6:2f:63:70:c8:31:06:f7:d3:e1:85:
                    a2:f5:cd:83:38:9d:5b:03:72:5c:8a:cd:58:aa:9d:
                    85:6b:6b:19:b5:09:2b:47:01:a9:f5:1a:48:f1:fa:
                    41:59:55:81:d6:3c:be:3f:73:2d:e9:be:5d:9a:df:
                    10:e9:1d:12:84:e2:6d:36:32:db:53:a0:53:bb:09:
                    b7:db:95:18:b4:cc:2d:96:7f:dc:5b:57:6e:59:a3:
                    46:18:aa:5e:bd:ae:37:a8:dc:4b:86:a9:c2:e7:33:
                    4a:a5:05:e0:e6:0a:28:5f:03:68:b1:1a:2d:4f:ce:
                    ec:6c:b6:7c:a7:3f:54:f1:7b:5a:c1:d1:36:21:3b:
                    a2:c5:84:20:c6:40:60:9b:6c:6b:72:19:0b:60:9c:
                    9e:94:f1:90:e0:e9:8f:20:f0:9d:6a:fa:7b:16:82:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CC:05:3B:77:28:DA:0C:15:D6:12:DE:4C:85:74:25:F3:83:81:EE
            X509v3 Authority Key Identifier:
                keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:db:e2:39:03:b7:49:56:a8:22:b3:d2:1d:f8:27:60:a6:9e:
         f1:b3:7f:1a:0b:50:22:4d:d7:83:bb:90:fa:a2:0c:0d:cc:a8:
         7a:45:cf:c9:0e:50:75:8b:00:fb:4a:f0:c9:3e:2d:38:8b:e1:
         14:96:4d:48:c4:c5:5d:79:36:22:df:25:ed:4a:ca:1d:31:cf:
         d2:8f:a0:1d:7a:20:55:b4:b0:8b:75:8d:3d:b2:82:5d:99:b8:
         38:a3:8a:cb:f5:65:4c:50:75:27:20:94:f0:13:eb:23:b4:40:
         5d:90:a8:2a:3f:d9:51:e2:67:cc:8d:ea:32:d4:b5:5f:55:3c:
         b0:7f:8e:b2:1a:8d:1a:c6:df:23:6f:ff:7e:fb:9f:48:b0:da:
         bb:ee:f3:31:b5:f6:ee:2c:c3:72:b0:7e:85:63:08:23:17:f6:
         1a:c3:78:fe:48:59:69:ba:55:ef:a3:c7:53:9a:bb:a6:82:5b:
         6e:99:d3:bf:6c:10:18:ea:01:1a:09:86:cd:9a:1f:c1:03:48:
         f9:b1:8c:05:45:2b:33:d4:b5:58:ec:c5:c9:9f:ab:e9:c1:3f:
         29:e9:04:62:78:0b:9e:06:e6:d4:e9:6b:72:e4:9e:fd:f3:2e:
         51:3e:2c:26:ee:27:a0:a7:fd:42:c1:b1:38:60:03:93:90:5c:
         a3:0f:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:35 2026 by rpki-client