This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          vqkqaxqfGL8GqwCvx9u60Cf3SeW7v7AY0VuhboopTws=
Subject key identifier:   CB:14:F3:9D:B1:02:36:6B:BF:9A:7F:05:E2:92:12:53:D0:66:E0:58
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019C42460D0C2F2402EC6C97DD6B3340A6EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          1279
Signing time:             Mon 09 Feb 2026 12:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:12 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: 0gJEu7bSVc7qmk1HiAb/BC/RSEYikL4pl1Re9nEQZns=)
                          2: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=)
                          3: MkcX9GenTKmR5jedlZaDXtOqlb8.roa (hash: HYFxXiizcZIEgsQl7ewj/koOWIU6qo+dNkAHdlTz/+A=)
                          4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=)
                          5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          6: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          7: sUrIEpm5C4rBhagjdZq3jf6wqrY.roa (hash: jRLTkZKX0jd/Ii5LEPQsVlaAGfAK0xdao7SE2gBfvAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:0d:0c:2f:24:02:ec:6c:97:dd:6b:33:40:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Feb  9 12:00:12 2026 GMT
            Not After : Feb 10 12:00:12 2026 GMT
        Subject: CN=cb14f39db102366bbf9a7f05e2921253d066e058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:76:c8:d4:7f:61:8c:62:dd:f8:11:d6:3d:
                    24:df:d1:39:6a:7e:81:bc:03:4a:29:a0:fb:47:9e:
                    6d:c0:f4:f9:71:3b:d1:71:c0:36:75:2a:5f:93:85:
                    2a:75:7d:0b:a9:52:ad:4d:c8:8b:fe:57:aa:d3:f4:
                    78:cd:bb:4d:e9:20:60:1a:fb:05:a0:50:4a:c6:86:
                    cb:6f:31:59:4c:d3:e9:4c:6b:c7:13:9a:3e:40:c5:
                    f0:18:bc:d7:be:27:ef:d4:69:f0:bd:3e:a0:e2:06:
                    5e:f8:0c:b2:28:b6:aa:ed:0f:69:a4:64:da:fd:3e:
                    ab:79:a9:48:46:d2:04:de:9e:65:9b:8e:94:f0:dd:
                    b2:82:01:14:12:c8:62:8e:07:53:a8:d4:cd:79:03:
                    1c:81:6b:65:5a:d4:f1:a5:83:e0:2a:38:71:38:14:
                    81:37:42:59:cb:0d:46:f4:46:d1:f1:71:cd:c1:0d:
                    27:f6:24:bd:f4:9f:19:8d:34:ed:80:77:6d:14:8f:
                    0d:ba:c5:d5:dd:13:0b:6e:c0:5f:76:2f:93:a1:4a:
                    a4:03:b0:e8:c6:b4:d2:49:a0:6d:3c:7e:1c:c0:24:
                    71:b9:52:28:29:31:64:bc:05:dd:80:94:f6:8a:ba:
                    c6:a1:10:c3:56:c6:80:47:1b:5e:c8:1b:74:49:33:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:F3:9D:B1:02:36:6B:BF:9A:7F:05:E2:92:12:53:D0:66:E0:58
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:04:00:2d:14:29:6c:32:10:82:ee:32:c0:dc:50:88:26:7a:
         27:0f:cb:9b:55:38:c2:92:cd:ac:08:de:99:0a:71:04:d3:29:
         ee:3d:fc:13:19:b9:45:2b:36:62:2f:8c:ea:90:38:cf:b1:65:
         32:14:3a:65:1b:e0:28:6c:8f:7a:b9:ff:8a:c5:bc:b3:04:3b:
         78:b7:9a:de:cd:ad:6e:70:b3:12:d5:74:55:28:95:5e:92:07:
         c3:84:49:72:02:8a:50:49:e3:97:49:22:5e:41:0e:a5:ea:1c:
         c7:9e:3c:7f:41:1e:20:db:82:85:4e:de:18:3a:3f:77:07:c2:
         22:c9:9b:f8:2b:d9:df:ad:84:3e:e9:43:c5:33:66:6f:f0:25:
         a8:cf:7a:c3:5e:cb:6c:5a:42:52:90:a7:d2:2b:dd:92:11:34:
         c2:68:48:b3:f7:aa:17:ac:4d:56:e4:71:f8:35:fc:a0:27:94:
         b6:dd:79:b1:e7:b2:27:24:eb:a1:98:af:07:f0:c0:47:fb:01:
         61:4b:23:2d:b1:21:be:0e:08:99:c1:10:01:11:e2:c3:d7:96:
         7c:68:c4:30:2c:bc:9e:56:c3:0c:f0:10:d6:fe:8b:e0:fa:a8:
         e7:19:5d:8f:31:12:ab:17:14:4b:dd:93:13:6d:02:06:4b:89:
         05:bf:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:53 2026 by rpki-client