This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
File:                     cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft (raw, json)
Hash identifier:          PbZGr4eixXUTSK35gTvokD4CSwOp7ItfSohxHjTMA7U=
Subject key identifier:   F7:20:AB:88:4A:CC:5A:08:36:48:DE:AA:D0:82:7B:89:B3:54:2E:01
Authority key identifier: 70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
Certificate issuer:       /CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
Certificate serial:       019C427DC8C3FE9E02B2EF49E82951037AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
Manifest number:          05B9
Signing time:             Mon 09 Feb 2026 13:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:05 +0000
Files and hashes:         1: cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl (hash: M6dnfIqjL9p6MhN6VVAUY3AVMRO3KaAmykSm/WKMfbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:c8:c3:fe:9e:02:b2:ef:49:e8:29:51:03:7a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
        Validity
            Not Before: Feb  9 13:01:05 2026 GMT
            Not After : Feb 10 13:01:05 2026 GMT
        Subject: CN=f720ab884acc5a083648deaad0827b89b3542e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:c8:62:98:07:3f:f2:c3:45:51:c9:26:d6:
                    40:bd:3a:71:d9:48:59:85:8b:86:78:d5:bc:c1:c9:
                    6f:5b:74:d9:01:13:ec:50:a7:98:b9:08:95:53:ca:
                    6c:2f:b9:2a:19:0c:af:7d:b4:55:87:66:84:d2:41:
                    e6:fc:78:1d:77:1e:28:03:1e:2c:f5:d9:1a:01:c6:
                    ee:75:bc:a7:56:dc:39:14:97:63:a8:3b:60:b7:af:
                    19:a4:36:c1:29:0b:8b:ad:e8:ec:4e:b4:aa:44:1d:
                    da:87:71:61:68:6b:9e:06:17:b1:50:b5:cc:97:ea:
                    c6:ba:5f:6b:ed:4a:48:87:d9:76:43:ca:45:4b:b2:
                    d5:97:35:6e:6c:2f:17:fa:4f:29:63:10:7c:44:42:
                    ca:99:7b:6f:e2:02:68:52:85:90:2b:a2:75:ed:02:
                    36:2d:63:52:64:b6:37:34:60:96:88:a5:84:d0:ad:
                    12:d7:2d:b5:85:dc:69:65:ff:ac:74:f5:c8:ce:43:
                    68:2e:41:60:f4:4e:b6:42:e3:ae:f6:34:dc:41:0f:
                    34:1a:c5:56:aa:2b:d4:1f:ae:b5:e1:ee:a3:f0:a5:
                    ec:e4:2d:09:94:22:fc:1f:8a:f3:95:30:50:92:22:
                    ef:8e:71:a0:78:83:6a:d1:23:75:ad:5f:cb:50:d8:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:20:AB:88:4A:CC:5A:08:36:48:DE:AA:D0:82:7B:89:B3:54:2E:01
            X509v3 Authority Key Identifier:
                keyid:70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:7d:11:f9:35:9a:31:2f:33:c5:f5:74:5c:55:77:ec:78:
         80:9f:d8:3d:c7:b6:4b:16:ac:fa:6a:d0:93:c2:26:74:fd:20:
         55:10:9f:01:1a:3a:be:b1:7b:22:41:87:c9:f6:a4:91:ef:33:
         18:fa:20:bf:7f:f3:d3:93:3f:f4:a2:03:55:40:0a:d0:ac:91:
         78:97:53:b3:17:08:57:be:21:51:a9:01:74:03:7d:4c:3c:11:
         aa:0d:78:dd:91:2b:93:a3:b8:f4:a2:42:7a:27:35:34:b1:77:
         5f:22:65:45:71:20:05:3a:d7:b9:e8:01:29:c1:91:43:ac:c1:
         4e:e4:6a:51:36:24:6d:f2:24:28:0c:ee:c5:32:72:1d:74:cb:
         b1:11:5e:b1:32:c6:6f:85:51:33:57:9c:cb:52:f8:90:02:a9:
         5b:39:93:10:d4:34:e8:3e:fd:e6:6d:84:71:08:4e:fc:48:99:
         3d:33:ac:45:70:3b:f4:f9:a0:7c:a5:0d:37:c5:ed:89:fc:0a:
         35:13:69:d7:6c:c3:1c:c7:2f:73:97:91:bf:dd:84:8d:f0:bc:
         c5:af:0d:f9:e4:ce:d5:d7:e9:8f:a1:94:44:77:51:45:c0:42:
         6b:64:b6:46:f4:01:fe:72:8f:f6:31:56:1b:6e:62:b8:67:b2:
         2b:eb:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:14 2026 by rpki-client