This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
File:                     RF5JFjhV_sylL50Of079Lw8nGcU.mft (raw, json)
Hash identifier:          nZdL+Rl5lW6PWdfXHCPbdlOWe9pl4kern9ppuyTbt3c=
Subject key identifier:   AA:A1:B0:7F:0F:60:3F:A9:EF:17:D0:D9:87:78:DB:50:DA:0C:F9:64
Authority key identifier: 44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5
Certificate issuer:       /CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5
Certificate serial:       019C4322C4F791988BBA53A54DAD90C7C31A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
Manifest number:          0F7F
Signing time:             Mon 09 Feb 2026 16:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:17 +0000
Files and hashes:         1: RF5JFjhV_sylL50Of079Lw8nGcU.crl (hash: /ARBSyspLdpQoKB/CBBzq+1ctfD8to4SmN5rYQvoj/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c4:f7:91:98:8b:ba:53:a5:4d:ad:90:c7:c3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5
        Validity
            Not Before: Feb  9 16:01:17 2026 GMT
            Not After : Feb 10 16:01:17 2026 GMT
        Subject: CN=aaa1b07f0f603fa9ef17d0d98778db50da0cf964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:14:28:e8:23:5f:45:5c:ac:c5:43:9a:ae:
                    7c:59:4c:65:ba:bd:cf:54:99:1d:cb:0c:6e:b2:4d:
                    f6:55:51:bb:2f:ea:4b:5f:2c:a8:1f:e8:77:45:e7:
                    36:26:4e:46:78:96:85:e2:69:1c:60:25:79:9a:ed:
                    c8:33:cf:de:63:6e:66:50:83:b5:9a:8e:59:5d:5f:
                    8c:1e:88:f1:23:18:97:e2:4c:25:cb:8e:6b:9a:79:
                    cf:69:f1:39:a2:79:8a:95:c5:f6:0d:3f:98:94:9f:
                    c3:7f:0e:e2:91:cf:95:4f:6e:71:f2:e4:c1:bb:cb:
                    c5:ae:5d:2f:b8:7c:b2:f8:c4:fd:1b:fd:ec:67:bc:
                    99:ba:55:86:f8:ec:bf:4d:b8:f1:7e:8e:28:b4:0d:
                    03:a3:41:d6:11:99:3a:80:37:c6:5c:e5:3a:56:5d:
                    f5:eb:4e:5e:b6:bc:0d:37:26:e8:f7:38:52:3a:6f:
                    6b:30:99:e4:54:f0:be:95:cc:7d:d6:34:08:c0:eb:
                    91:01:51:2c:63:e0:ff:3f:07:9e:ba:1d:a9:f1:c1:
                    6a:5a:48:4d:5d:ab:bc:86:9f:81:6a:1b:86:71:6d:
                    59:a8:31:af:f2:fa:26:36:eb:4d:fc:dc:03:71:c2:
                    80:cd:25:77:62:59:cb:59:2d:74:df:61:58:11:b7:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:B0:7F:0F:60:3F:A9:EF:17:D0:D9:87:78:DB:50:DA:0C:F9:64
            X509v3 Authority Key Identifier:
                keyid:44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:3c:0b:bd:a1:3c:18:58:cb:71:ce:28:06:62:59:80:ab:
         66:3e:a2:95:12:e4:2b:c9:e6:99:19:cf:98:9a:2d:e6:b7:f2:
         ee:27:a0:82:04:5d:a2:36:0e:e6:78:5d:d9:e1:18:26:5e:8d:
         82:76:d5:98:8b:c8:41:eb:ee:8f:14:c5:b9:c8:45:2d:39:f7:
         b9:e3:4b:68:a9:e4:6e:f7:3b:d4:b0:9e:fe:cd:0b:c7:b1:eb:
         bb:ff:fa:28:78:83:fe:f1:03:57:89:b9:f2:e7:9d:89:5b:1e:
         f4:50:12:cc:6b:3b:a3:ad:60:a8:56:d7:eb:d1:b2:03:a2:73:
         83:b9:8e:54:16:c0:7d:50:88:85:a9:f1:bb:52:d5:3c:ee:62:
         ff:1e:8d:66:77:4e:02:1a:96:48:20:35:42:b5:af:69:58:82:
         49:d1:59:ce:ac:03:47:e7:c0:d4:b8:44:98:2c:e6:2f:7b:f9:
         92:e1:4c:e0:00:72:b1:0c:43:48:47:6a:99:2f:a4:22:35:78:
         7b:a9:f6:6a:4c:4d:9d:43:12:3d:7b:3c:3a:27:12:7f:ab:f3:
         59:56:16:2a:a7:3b:8e:49:12:3c:e2:01:25:c9:3c:51:d0:9a:
         9f:1e:73:1a:ca:ce:ca:7b:d0:71:85:91:9c:95:76:d7:a9:3a:
         60:cb:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:28 2026 by rpki-client