This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File:                     f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier:          zRnz7F2eDi8lscDyMijYmBn2gwdfUWxeZlT4jDxeyoY=
Subject key identifier:   01:1C:2A:60:2E:A7:F1:BB:47:12:43:6A:B2:F9:03:BE:71:87:68:EA
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer:       /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial:       019C4210289727A39EED37EF8244FDC52D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number:          0DEF
Signing time:             Mon 09 Feb 2026 11:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:20 +0000
Files and hashes:         1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: nbIftpht+N/j12O6AJ7euUH2LT1RRxXC6STcQ1Qn27Q=)
                          2: xuPytDWWOm0n5Q8kqhQeYQRc770.roa (hash: nV8TEsZ35qIOpq9/LxSQCX5axEhmxxpZi06Zd6Qworo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:28:97:27:a3:9e:ed:37:ef:82:44:fd:c5:2d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
        Validity
            Not Before: Feb  9 11:01:20 2026 GMT
            Not After : Feb 10 11:01:20 2026 GMT
        Subject: CN=011c2a602ea7f1bb4712436ab2f903be718768ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:94:92:f0:c9:9d:61:0e:3b:64:d2:72:41:
                    ce:ec:ff:a0:9e:ce:4d:9d:c4:07:42:65:14:90:67:
                    59:3a:2e:23:68:eb:20:f9:82:2a:14:df:fc:e2:3a:
                    1a:59:d6:94:db:08:9d:c8:f8:d8:c1:29:61:e5:b2:
                    17:07:0a:24:7b:fd:bf:4a:fe:41:53:f9:09:72:35:
                    cb:fa:13:f3:34:e8:d4:47:1b:6d:56:d7:c8:10:03:
                    f0:b4:ca:c7:41:73:09:6d:1e:c7:f6:b1:a2:34:aa:
                    fb:11:bd:f8:09:56:b3:e8:0e:40:fa:71:c0:ae:b6:
                    7a:4d:07:4c:1f:62:f6:e9:58:36:6a:6a:9a:da:20:
                    9b:22:06:b3:f9:3b:1f:bc:f4:df:1d:00:9c:48:e7:
                    f0:ba:88:20:49:da:c5:48:a1:00:c4:34:9e:58:8c:
                    e0:b1:6a:00:18:4e:f7:4b:52:88:12:8f:c6:95:71:
                    33:ce:ea:5e:ac:72:7c:98:6b:3e:27:96:0d:9d:d3:
                    cf:39:06:34:ea:c3:6f:f9:a5:81:9f:13:9b:aa:11:
                    4b:1e:85:fe:6d:11:3e:cb:e2:0e:b3:fc:bc:ce:9e:
                    c7:7a:56:4c:1d:09:0f:03:40:20:b0:15:c8:49:e1:
                    fa:9a:b6:79:a6:b6:b4:2f:3d:af:82:22:39:b8:18:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:2A:60:2E:A7:F1:BB:47:12:43:6A:B2:F9:03:BE:71:87:68:EA
            X509v3 Authority Key Identifier:
                keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:3a:86:df:33:fd:41:62:f3:6f:2d:68:0b:16:ba:70:f9:
         31:78:1c:ec:f7:07:ef:84:ab:32:0f:76:7e:14:c7:f3:9d:80:
         b8:93:a6:48:aa:f9:a1:6f:57:20:ec:f7:a5:19:5a:ae:d6:08:
         7c:2f:e7:37:9c:75:03:5c:dd:31:8a:14:d1:e7:4a:e9:62:1b:
         95:d9:25:ce:6b:89:86:7b:f0:02:fd:b2:e7:68:0a:cc:e2:58:
         22:78:73:57:13:4c:eb:dc:4e:a0:6b:99:d3:45:c5:96:d5:42:
         7f:f1:4f:ce:59:60:1e:9a:f3:ff:f2:46:b1:ed:47:4f:c6:b6:
         99:52:2e:0f:8b:a8:98:8b:15:d6:aa:ac:33:73:55:df:79:c9:
         92:7f:78:92:bf:0f:75:ac:af:d8:5e:7f:3a:d4:40:f8:34:b3:
         b1:96:95:05:eb:a5:24:50:76:c4:cd:d2:68:a8:fe:f0:3b:3c:
         c1:ec:0e:07:0b:45:d7:9f:cd:e1:20:31:79:13:4f:29:ee:6f:
         ce:5a:7c:fe:96:ec:d6:9a:95:db:0c:8e:73:04:cc:57:8f:3e:
         25:f8:12:fb:d7:10:61:5b:ae:35:85:13:96:5f:b6:90:bb:bd:
         70:bd:e4:a5:2e:8b:9b:52:97:e8:d3:15:56:9f:5e:ed:21:21:
         70:f2:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:50 2026 by rpki-client