This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          qm5TgkQMoKTTTJ3sC7GMGbdLOgyLAhLkfHsoSpefqJY=
Subject key identifier:   51:D4:08:F3:C3:33:E5:6C:9B:82:DF:C0:B4:19:29:C9:12:DE:28:DB
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       019C427D442D6D974BDB305A3B24224CC08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          0B52
Signing time:             Mon 09 Feb 2026 13:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:31 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: EVaJLlmkL4O2k67EvNOx4YF15DeJnBTa3yHhdijxLwQ=)
                          2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:44:2d:6d:97:4b:db:30:5a:3b:24:22:4c:c0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: Feb  9 13:00:31 2026 GMT
            Not After : Feb 10 13:00:31 2026 GMT
        Subject: CN=51d408f3c333e56c9b82dfc0b41929c912de28db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:70:e1:75:03:26:1a:ac:e1:c2:1b:c7:ff:
                    b6:e5:eb:69:eb:a8:e4:5b:2b:ed:33:5c:dc:92:c9:
                    4b:6e:1f:21:11:f4:30:fb:6e:b5:58:40:0a:48:07:
                    7e:dc:71:e0:d4:d9:4e:07:5d:b5:68:80:de:6d:29:
                    58:b8:82:83:7a:77:1b:e3:88:cd:b6:69:5c:80:df:
                    a6:85:aa:50:0a:c9:ff:bc:a5:33:1a:76:9c:50:e6:
                    23:81:79:7b:42:76:30:83:47:a4:60:d9:79:9b:b3:
                    67:36:e3:ee:58:2b:5f:f9:71:79:df:f0:f5:b1:e5:
                    58:4f:78:de:32:06:20:c4:57:e9:7a:68:5a:b1:17:
                    19:8e:f7:03:9f:2c:a0:bb:be:84:38:58:fc:80:ea:
                    35:6b:36:19:88:a8:47:69:89:49:68:3f:7b:3f:e6:
                    f1:ff:ef:a5:3a:56:fd:35:4f:45:b2:43:13:31:f9:
                    19:f3:69:da:fc:60:39:8b:a5:e0:1e:f5:08:c1:22:
                    e4:b8:50:07:cd:1b:d7:fd:7f:c3:66:9f:0d:80:99:
                    99:08:1c:21:c7:13:69:95:25:e8:68:74:b9:d7:14:
                    0a:7b:0c:4e:8a:80:8d:17:17:c4:77:b9:c9:c8:6f:
                    dc:53:81:7b:69:a6:1f:ef:25:ad:3c:ec:c2:89:a9:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D4:08:F3:C3:33:E5:6C:9B:82:DF:C0:B4:19:29:C9:12:DE:28:DB
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:98:e1:4d:8c:6b:f5:9c:01:30:00:19:55:1f:00:70:3c:3a:
         4c:e1:b8:ad:13:d9:ad:cc:d8:40:0d:83:d7:a0:95:27:8c:d9:
         14:83:47:35:da:2d:00:e3:3f:9a:e0:a7:2b:38:79:af:77:11:
         f3:4e:2f:f9:e4:e6:e3:a9:a5:5a:d2:a2:ca:81:35:20:ab:e1:
         04:06:af:22:fa:a0:c3:01:39:e0:6c:d8:f7:ce:73:e8:88:15:
         5d:cf:15:37:63:24:93:84:ad:c7:7b:74:19:46:f6:6a:42:8b:
         d0:6c:ba:0f:0d:65:ea:d7:4f:a0:d4:20:15:e9:d9:54:50:10:
         76:8b:f4:57:9d:d1:24:9b:2d:10:8f:a4:e5:b3:75:f4:ae:d7:
         7f:07:27:25:7a:62:cb:89:cc:d9:0d:5c:b3:b1:bd:63:94:23:
         76:87:48:ff:12:ef:6f:8f:78:1b:8b:94:d3:aa:b9:df:91:ad:
         26:fa:2c:9c:d9:59:62:d0:bf:67:fc:47:df:0f:7b:02:c5:74:
         ae:76:f2:b1:52:74:11:45:70:5e:a3:05:fd:1f:3d:0f:58:8a:
         8f:6f:9f:9f:8a:34:81:17:02:91:38:83:b4:ff:77:aa:70:29:
         c1:43:3b:94:af:74:41:55:46:4b:5c:f8:d6:19:36:12:c6:37:
         7e:ac:43:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfUQtbZdL2zBaOyQiTMCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz
NDA5NmIwHhcNMjYwMjA5MTMwMDMxWhcNMjYwMjEwMTMwMDMxWjAzMTEwLwYDVQQD
Eyg1MWQ0MDhmM2MzMzNlNTZjOWI4MmRmYzBiNDE5MjljOTEyZGUyOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sdw4XUDJhqs4cIbx/+25etp66jk
WyvtM1zckslLbh8hEfQw+261WEAKSAd+3HHg1NlOB121aIDebSlYuIKDencb44jN
tmlcgN+mhapQCsn/vKUzGnacUOYjgXl7QnYwg0ekYNl5m7NnNuPuWCtf+XF53/D1
seVYT3jeMgYgxFfpemhasRcZjvcDnyygu76EOFj8gOo1azYZiKhHaYlJaD97P+bx
/++lOlb9NU9FskMTMfkZ82na/GA5i6XgHvUIwSLkuFAHzRvX/X/DZp8NgJmZCBwh
xxNplSXoaHS51xQKewxOioCNFxfEd7nJyG/cU4F7aaYf7yWtPOzCiameQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHUCPPDM+Vsm4LfwLQZKckS3ijbMB8GA1UdIwQY
MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt
ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw
LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5jhTYxr
9ZwBMAAZVR8AcDw6TOG4rRPZrczYQA2D16CVJ4zZFINHNdotAOM/muCnKzh5r3cR
804v+eTm46mlWtKiyoE1IKvhBAavIvqgwwE54GzY985z6IgVXc8VN2Mkk4Stx3t0
GUb2akKL0Gy6Dw1l6tdPoNQgFenZVFAQdov0V53RJJstEI+k5bN19K7XfwcnJXpi
y4nM2Q1cs7G9Y5QjdodI/xLvb494G4uU06q535GtJvosnNlZYtC/Z/xH3w97AsV0
rnbysVJ0EUVwXqMF/R89D1iKj2+fn4o0gRcCkTiDtP93qnApwUM7lK90QVVGS1z4
1hk2EsY3fqxD6w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:09 2026 by rpki-client