This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File:                     mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier:          uOwa7RxR/pyMi9bjSY9HZEqXjPaWtL7jNTfzOrHZmQw=
Subject key identifier:   AC:36:DF:02:9E:FA:49:B0:FE:EC:0E:25:24:B1:1B:9E:6F:7F:8C:0F
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer:       /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial:       019C4321DF458F2E0C452DD3154342413001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number:          1555
Signing time:             Mon 09 Feb 2026 16:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:19 +0000
Files and hashes:         1: 24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa (hash: aZJOy0CyZGrP4yrwBkGXYusHSlYLrLzIGIdzThr5g3M=)
                          2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: O9XMrVJvMse7gMpiLmyEo6S4GHqumYgHRuXox+ckl70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:df:45:8f:2e:0c:45:2d:d3:15:43:42:41:30:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
        Validity
            Not Before: Feb  9 16:00:19 2026 GMT
            Not After : Feb 10 16:00:19 2026 GMT
        Subject: CN=ac36df029efa49b0feec0e2524b11b9e6f7f8c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:6d:72:f9:75:fd:c8:42:a2:47:0d:e1:ff:
                    43:9e:88:18:55:63:68:a8:de:55:43:cc:eb:01:7f:
                    cb:cf:42:4e:55:3f:d3:9d:ad:4c:66:04:92:1d:68:
                    02:eb:ee:41:eb:96:05:b0:e5:0a:73:fa:84:12:ea:
                    1b:09:22:a8:a8:7b:f6:45:99:1c:b5:da:84:5a:13:
                    cc:e3:de:84:6b:38:ac:d1:26:da:43:a1:9b:36:f8:
                    a1:09:8e:fd:f1:ae:06:b5:77:72:8c:a4:4a:1f:99:
                    1a:fd:c9:0f:fb:a9:ec:79:38:c7:ea:69:4b:e6:b5:
                    15:6c:6b:29:3c:7c:fc:21:de:6b:77:3f:58:15:b6:
                    bb:53:be:ee:54:84:ba:92:44:39:18:48:f9:6c:2c:
                    52:75:f6:88:38:f2:f4:c9:8c:86:7a:2f:0e:7f:58:
                    2b:38:ce:86:06:6f:62:71:5c:b3:73:1d:e9:43:0b:
                    e5:80:54:7d:8a:d4:59:69:78:f7:c9:99:72:ee:55:
                    10:ee:ab:7f:48:77:ed:02:f6:15:1c:cf:d1:2f:a8:
                    b7:19:f4:8e:e4:6a:58:2b:0a:5c:d8:2b:68:15:44:
                    59:f3:6d:2d:72:9c:06:ca:11:df:32:ae:e6:6a:24:
                    4e:6a:68:32:8d:ee:e7:51:90:1a:3e:1c:c9:cd:1d:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:DF:02:9E:FA:49:B0:FE:EC:0E:25:24:B1:1B:9E:6F:7F:8C:0F
            X509v3 Authority Key Identifier:
                keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:fb:1c:35:d8:78:bb:40:5d:80:46:ee:19:8a:05:6a:0e:
         f4:c8:f8:21:f0:ef:ab:2b:a4:ae:32:46:8a:a9:4f:1b:5b:e6:
         65:6d:5f:c0:b9:46:62:e8:0b:59:7e:d1:17:41:81:c5:c5:3d:
         6c:24:73:6b:1d:2a:b0:ad:11:08:a6:71:82:8d:b1:35:a4:d7:
         4f:34:b8:9c:cd:b5:b7:21:8e:0f:a6:e5:a3:89:93:b2:08:c3:
         97:82:fa:79:65:67:d2:b2:5d:a7:3c:a0:a5:a2:a7:22:a4:a4:
         3e:92:d7:74:22:cf:08:38:c6:90:12:89:c7:c8:49:ba:f7:6f:
         d0:84:4b:44:20:3f:ad:aa:7c:15:e5:95:89:f3:f3:1e:4b:82:
         42:12:07:2a:8c:ec:be:40:46:75:a0:27:96:ed:a9:6a:7a:f4:
         11:b5:28:13:09:75:8f:dc:38:12:2e:5d:78:80:22:f8:07:ab:
         b5:41:bc:7c:7a:37:7b:1c:ce:65:03:69:7a:3f:8d:ff:73:0f:
         49:13:b5:ea:99:59:ab:d6:99:c5:8f:d3:a2:65:ce:39:fe:d9:
         f5:ce:cb:e8:32:6e:42:d4:62:06:ae:c0:e6:3b:39:37:1d:0d:
         f3:ce:a4:c0:62:2b:e3:72:f7:2f:28:39:b2:4f:8d:80:61:b6:
         8b:6f:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:35 2026 by rpki-client