This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File:                     VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier:          F0a9ZYiZVKDGObey7Z//M88hRkqcKcEXm3WZaXAyses=
Subject key identifier:   97:FA:51:83:65:78:D5:B3:69:6D:71:A3:38:1B:43:A9:48:72:B6:5E
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer:       /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial:       019C4359391E7787E29AC6677A17A9C146D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number:          0FC5
Signing time:             Mon 09 Feb 2026 17:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:46 +0000
Files and hashes:         1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: wIR233dr6qqilgS33RhAA2Xci7IDQRBJIDN4b//L5Xc=)
                          2: j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa (hash: rc09LpGqWbk6PYA80jVQRNeDW2Q3wDT/cj8KXISR7eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:39:1e:77:87:e2:9a:c6:67:7a:17:a9:c1:46:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
        Validity
            Not Before: Feb  9 17:00:46 2026 GMT
            Not After : Feb 10 17:00:46 2026 GMT
        Subject: CN=97fa51836578d5b3696d71a3381b43a94872b65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:3a:57:57:34:28:02:f4:67:2b:2e:cf:99:
                    8b:59:c2:aa:8f:bb:da:d6:1a:6c:d2:62:9b:9f:64:
                    e3:36:bc:16:04:9d:76:fa:64:81:81:92:28:82:b7:
                    db:b3:f1:81:ef:e0:8a:07:fd:32:54:00:ca:0b:29:
                    66:42:1b:06:14:ce:07:b8:7c:09:4d:c3:64:6d:d5:
                    c6:83:61:39:f3:38:95:1f:15:52:b6:1f:2a:72:50:
                    4c:bb:ec:e5:e7:54:bb:e9:a4:20:2d:c4:11:4f:15:
                    c1:2a:72:2e:07:79:ea:78:f2:be:d0:6a:00:47:e4:
                    74:78:c6:e2:73:e8:82:54:02:de:7a:23:f1:15:22:
                    9f:51:cb:d3:a8:c8:92:19:cc:7d:45:70:de:c3:01:
                    b0:ae:e6:83:76:c2:50:d6:6f:e6:ff:91:cb:e7:ec:
                    4f:13:28:78:7f:01:b1:12:f3:b8:ab:f5:c6:c7:d0:
                    83:71:e9:9b:a9:87:34:a9:6d:23:50:6b:4f:bc:de:
                    f8:39:c3:1d:eb:19:a5:ca:8b:64:86:da:db:15:d5:
                    b4:14:c9:26:01:56:15:ab:7c:24:60:43:65:d6:4c:
                    8b:61:24:3e:af:bb:c7:aa:f1:b7:95:2f:aa:25:cf:
                    67:6d:c2:63:5c:b9:38:f0:82:0c:2f:e0:20:fd:b9:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:51:83:65:78:D5:B3:69:6D:71:A3:38:1B:43:A9:48:72:B6:5E
            X509v3 Authority Key Identifier:
                keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:cf:20:ab:11:2b:d3:61:cb:39:4f:14:f9:34:aa:35:75:
         50:87:fc:c7:e1:9f:16:cf:39:75:70:52:3e:6d:2c:db:d2:11:
         0c:d6:0f:86:91:78:45:24:91:ab:ef:f8:30:44:90:7c:4b:70:
         ce:80:de:8c:8c:84:f0:c6:69:ce:03:2e:73:db:ce:fb:d6:5b:
         47:c7:57:29:05:72:c7:de:55:0f:ac:cb:b3:3b:ab:f6:e5:86:
         09:50:e3:d9:0b:5c:26:b7:60:dd:47:35:18:09:2c:df:16:f1:
         df:a5:f2:9f:f3:25:ad:70:65:1a:30:df:de:dd:e6:00:00:47:
         25:cb:4f:0e:ff:71:f9:e4:86:ac:e5:db:d6:c1:a7:eb:b1:5b:
         ec:6d:32:69:a7:d4:6e:a6:8c:7f:5d:64:05:22:71:65:b1:cb:
         ac:ac:e0:92:b9:a5:ad:e5:73:dd:fa:8e:aa:d1:cf:74:2a:bc:
         56:2d:ba:d4:e9:c2:41:f4:23:e3:d9:a1:99:52:9a:56:73:9a:
         cc:b6:6c:01:fd:70:0c:13:dc:d2:e1:7c:eb:02:cc:37:98:1d:
         83:eb:50:82:b7:18:86:06:f1:fd:a1:a2:68:44:ce:e3:5e:91:
         8a:a9:07:4b:57:5c:62:28:0d:4c:f0:4a:22:46:18:86:65:be:
         b0:11:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:33 2026 by rpki-client