This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          +AdxwBc7mFxv+QMagypfhMNQFDPLmPEhVWSHzSPPzb0=
Subject key identifier:   1F:A6:90:6C:6E:79:02:8A:52:11:C4:93:2E:46:A5:E8:AC:19:10:3D
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019C42467509F06C42C88A22EB915B8499FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          1245
Signing time:             Mon 09 Feb 2026 12:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:39 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: 5PpCosdzymW0o2Hqw3m05421fNkX9UdLEnalm8m8Zpc=)
                          2: MwjqyVMrj31F474MSeKkhNXzvoI.roa (hash: m7bqaTX59YwG3k1du3WuNAO3cJYKNz+DJfHgg5XKNsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:75:09:f0:6c:42:c8:8a:22:eb:91:5b:84:99:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Feb  9 12:00:39 2026 GMT
            Not After : Feb 10 12:00:39 2026 GMT
        Subject: CN=1fa6906c6e79028a5211c4932e46a5e8ac19103d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:18:04:27:60:4b:9e:f9:df:df:d4:be:6d:
                    3a:43:1d:7f:e3:65:a1:a3:21:9e:ea:8d:e7:ef:a3:
                    6b:02:d4:fe:f5:f3:e7:3f:12:70:4e:0d:ad:15:33:
                    cc:01:7a:d0:d0:7c:f5:a5:8a:0f:2c:9d:51:07:39:
                    9b:29:f7:34:69:c5:73:e8:da:ee:d1:fa:65:2b:3b:
                    fb:5f:de:4a:63:10:6e:6a:80:5c:75:00:c0:f1:b5:
                    62:66:18:af:b2:77:84:fe:18:1f:b0:eb:96:29:20:
                    02:a0:cb:9f:d0:b2:bd:72:c4:db:ca:82:44:a5:05:
                    dd:1c:11:83:ab:74:0d:8b:94:84:3d:2c:11:2e:9b:
                    ba:76:08:aa:3c:35:50:ef:84:00:80:6e:42:51:ae:
                    20:e6:c1:16:26:a3:a4:0e:e3:b2:fb:11:29:4a:25:
                    34:10:49:b6:37:96:53:64:bf:f5:d2:9d:29:95:c8:
                    65:7b:d8:c9:7a:14:2e:01:05:19:27:73:2f:0e:41:
                    e5:68:bd:65:0d:9d:0c:28:99:bf:1e:b5:ef:99:2d:
                    30:0d:df:78:5d:9e:f5:ff:05:d7:d8:bc:1c:f7:ba:
                    d4:90:f7:dd:8a:b1:95:db:ec:b3:68:25:a9:6f:c4:
                    80:65:1a:4a:18:e2:33:15:bf:28:75:b7:09:9d:3a:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A6:90:6C:6E:79:02:8A:52:11:C4:93:2E:46:A5:E8:AC:19:10:3D
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:81:d5:fd:2b:2c:d9:c9:f0:6d:9c:ae:1d:15:0b:93:b4:53:
         e5:af:5b:27:e1:01:9f:ee:9b:48:77:67:04:bb:ff:70:ff:da:
         f3:f7:25:04:a5:2e:a1:3f:88:16:e4:a0:c9:7e:3f:55:bd:48:
         a7:7c:ad:11:a1:e0:70:97:6d:2f:80:79:0d:ad:d6:08:4a:88:
         41:a6:99:45:7f:c6:db:21:c2:fa:05:aa:25:da:95:0c:2e:4c:
         8b:6c:10:13:85:32:cf:53:90:1f:f4:34:23:05:bf:35:22:3d:
         85:44:0e:24:45:df:85:10:a1:95:fa:f7:5c:0c:9d:14:eb:88:
         ae:e0:fd:27:71:32:a9:11:16:42:26:82:f1:34:4e:8d:de:d6:
         a6:3f:dc:3a:33:ab:74:41:7c:53:c2:a4:b4:d3:92:f7:da:61:
         dd:ed:ee:91:bc:fb:36:cc:b8:b8:0a:8e:9f:5a:d3:a3:c4:2e:
         49:3f:0f:1a:8a:38:c8:81:75:1f:7b:26:3d:6e:56:f1:16:5b:
         2d:77:87:5b:aa:4c:c1:78:bb:ed:23:e5:49:fd:b4:20:80:b8:
         b0:c4:05:4c:dc:69:be:1a:20:a3:66:62:94:08:7a:26:e3:ff:
         18:55:ba:fd:0b:b2:24:10:af:1b:b0:e4:78:e4:4a:ee:2a:cc:
         6c:f9:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:49 2026 by rpki-client