This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File:                     RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier:          ny7BAxrICW2JiBuHzflIxO7UkCoqrjA040RCTlhsHS8=
Subject key identifier:   A0:58:40:E3:DE:6B:55:BF:97:89:E6:0B:50:4D:22:54:0F:AD:67:6E
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer:       /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial:       019C41A2716E81C9A2777AAD52DC8EA63F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number:          0665
Signing time:             Mon 09 Feb 2026 09:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:30 +0000
Files and hashes:         1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
                          2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
                          3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: VgVmoAH9kVltsoz4P/3b3GojrHi2Gmg0kH8pKgK5uHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:71:6e:81:c9:a2:77:7a:ad:52:dc:8e:a6:3f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452e7d87922129df90c4870da2a7738404724858
        Validity
            Not Before: Feb  9 09:01:30 2026 GMT
            Not After : Feb 10 09:01:30 2026 GMT
        Subject: CN=a05840e3de6b55bf9789e60b504d22540fad676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:6c:42:0b:35:8c:d7:a6:e9:e1:ab:5d:6e:
                    30:f3:8f:98:7f:9a:b7:8c:63:43:ee:75:30:3f:f7:
                    4c:74:04:ed:f1:08:a6:80:73:d7:66:3d:38:70:29:
                    c1:59:49:26:02:e4:5d:00:e7:eb:4b:8d:19:19:09:
                    64:fe:bc:6c:f6:70:2d:50:5e:f2:b3:1a:80:66:c8:
                    d6:8a:87:e8:66:f7:99:f3:0b:ad:e7:7b:f3:4a:fb:
                    69:28:7e:ec:c1:12:07:88:24:e9:a3:4b:c2:5f:ac:
                    15:a9:64:d7:57:7b:7e:98:b9:63:7a:37:11:74:ff:
                    92:f1:5f:1d:5e:35:d6:dc:37:33:26:21:00:1a:aa:
                    66:c1:ba:8c:cb:b1:b2:8d:7e:11:14:e4:88:80:11:
                    10:53:44:3e:0d:49:2c:62:16:37:bf:80:86:f6:3f:
                    db:4c:26:f2:e8:01:24:40:a1:49:9c:de:39:5f:d6:
                    a0:ae:33:91:95:bd:ad:96:ea:4b:86:91:6a:31:f9:
                    94:5d:ab:6f:e5:a7:01:b1:42:1f:8b:23:40:61:24:
                    5e:cf:0a:67:50:44:b8:3d:ba:d3:25:27:20:1c:8c:
                    1b:b2:21:50:cb:ae:56:2a:2b:10:7c:cf:27:d5:1e:
                    f1:b1:66:e9:39:c2:9e:c6:a9:89:fa:b1:c2:b4:23:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:58:40:E3:DE:6B:55:BF:97:89:E6:0B:50:4D:22:54:0F:AD:67:6E
            X509v3 Authority Key Identifier:
                keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:d7:06:bb:28:2b:87:d4:d3:a8:c1:ef:f6:a8:94:09:32:
         2a:36:b9:72:bc:fb:95:89:36:8d:4b:1c:04:1d:77:cf:13:d4:
         8b:f9:0d:20:ce:b8:13:4f:17:a6:1c:71:57:56:65:64:76:92:
         43:84:81:4b:7f:18:3c:9e:d0:23:fa:77:4b:35:91:1e:22:87:
         2c:67:6c:0c:6e:51:61:9e:ca:37:3f:d1:60:c8:79:37:10:4d:
         e9:08:8e:23:8c:44:67:c5:03:76:2a:61:ea:0b:1a:b9:46:63:
         0f:59:27:c1:23:43:21:bd:fc:46:0d:9c:22:6a:b5:bd:2e:fc:
         60:7a:3c:d5:0d:d9:ad:44:87:44:96:31:02:11:52:0a:5c:c6:
         1f:2e:de:2e:1c:cc:74:6e:4c:4b:24:22:7c:d2:8c:a0:c8:73:
         a3:a8:a4:56:6c:d8:5b:1c:80:f5:d1:52:eb:c2:a6:b5:8b:f6:
         5e:dd:3b:da:f7:4c:64:8b:74:9a:3d:c1:92:85:7d:05:bb:8b:
         ff:9a:56:49:a1:c9:b7:a2:7e:14:72:42:f5:e7:52:08:03:86:
         b8:9c:3f:3b:57:cc:ec:63:f9:48:12:76:d1:5d:c7:bb:e4:99:
         58:e3:84:f9:f2:36:41:f2:5b:90:7a:7c:f5:be:3c:36:83:68:
         4a:08:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:27 2026 by rpki-client