This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File:                     cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier:          nW/d++L5w7MX8y1Wpu9YTNpZX5JSlONjW0ipmOvEm9g=
Subject key identifier:   60:97:E4:BE:1D:A0:7F:3D:15:A8:AE:8C:1A:30:2C:82:A0:1E:24:06
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer:       /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial:       019C420F9DE56E947535F75EEB6C77EDFBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number:          1413
Signing time:             Mon 09 Feb 2026 11:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:45 +0000
Files and hashes:         1: T-Qpf2laS9B4oqA-l43pYYoUJBk.roa (hash: t46DpvrWC/vui809tnn3ajl3f+hjX2aU4WQg5zWnjoA=)
                          2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: iR/CDKb3+04eHH4aZWYuisiRzkwtHWdxaF1KsS1jyh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:9d:e5:6e:94:75:35:f7:5e:eb:6c:77:ed:fb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
        Validity
            Not Before: Feb  9 11:00:45 2026 GMT
            Not After : Feb 10 11:00:45 2026 GMT
        Subject: CN=6097e4be1da07f3d15a8ae8c1a302c82a01e2406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:13:09:b2:ba:f7:2c:58:a7:b1:fd:be:d0:
                    a9:78:71:ab:e9:dd:2d:59:33:9d:e0:c4:af:b8:1f:
                    1f:7d:b5:4e:5e:b1:cf:b6:80:f9:2e:06:93:b4:c0:
                    fe:80:13:14:bd:1e:e0:c4:8c:0f:3d:12:40:99:08:
                    2e:42:96:21:cd:b8:4e:34:8a:d6:d8:5b:76:10:d3:
                    c3:9e:c8:fd:b0:99:15:b5:7b:82:57:fc:d7:09:53:
                    fd:b8:d5:20:f3:3b:4a:73:e4:87:15:ea:26:95:49:
                    62:a2:ae:06:63:1a:71:78:51:d4:12:bb:b0:de:a0:
                    c5:96:65:9f:7d:4e:3a:1f:a2:ac:ac:f9:96:7d:83:
                    46:82:d1:21:33:80:90:ab:14:31:65:5f:08:51:2d:
                    e4:bc:6d:da:2f:b6:62:ab:68:ea:1e:41:8c:15:f1:
                    35:ba:5f:26:fd:2e:eb:15:0f:01:92:a1:97:2f:a7:
                    1e:bb:17:32:aa:51:f7:27:df:9f:86:9a:53:f0:2f:
                    ef:f9:95:f4:e8:ed:ed:49:62:b7:58:4f:41:d3:e4:
                    71:fe:22:a9:ed:e3:16:41:29:b8:e4:bc:6c:cd:ec:
                    10:31:0e:a2:ed:f7:b3:b2:c6:23:92:af:3b:b7:0d:
                    39:df:4a:f1:86:09:09:67:91:f2:1e:df:8c:e0:13:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:97:E4:BE:1D:A0:7F:3D:15:A8:AE:8C:1A:30:2C:82:A0:1E:24:06
            X509v3 Authority Key Identifier:
                keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:47:0e:bc:6e:3a:5d:4e:9f:02:2b:92:94:5b:b5:23:0d:
         7a:41:eb:88:2f:25:d4:ba:7c:83:04:24:b9:4c:1b:69:b9:03:
         70:2f:f7:11:9e:a6:d8:f9:fc:70:23:67:6e:6f:cd:33:5e:19:
         a1:35:05:28:a0:87:a4:3a:47:0b:fb:d4:48:6c:ee:48:25:79:
         22:e2:ca:0a:1e:86:29:ec:d4:07:04:57:1f:d1:bb:35:23:52:
         a8:74:dc:e0:d4:2c:2d:14:15:f8:f8:a8:18:89:53:db:7c:48:
         9a:16:44:bb:ad:d6:72:2f:23:c2:87:77:5b:3e:5b:e2:e1:16:
         c0:a1:f3:d8:ca:64:04:8d:44:d3:36:01:dd:94:4d:71:b2:ae:
         73:12:c4:c4:56:eb:9f:e7:20:85:e2:52:de:70:7a:87:0b:a9:
         d5:1c:ac:f7:83:6f:f8:c0:b3:ae:f7:1f:fc:86:f1:66:3c:8d:
         c3:c1:a4:ca:97:0d:39:65:52:e6:69:ad:50:0d:20:8d:42:d9:
         ee:dd:74:aa:2d:73:99:c7:32:f8:86:1e:54:89:d9:e3:1c:89:
         2b:5c:da:f8:d3:69:15:5f:02:7e:c1:59:e8:19:0a:6b:db:4d:
         1a:71:fa:0f:4b:25:6d:41:5f:0f:92:e8:ae:56:56:81:cf:8c:
         7f:60:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:08 2026 by rpki-client