This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File:                     mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier:          WxK2U3mQO+UNlIw+rdWet8lqaTdD/TyCuKGzhPZbDl8=
Subject key identifier:   B0:E7:A2:5B:D0:5A:40:83:58:10:2C:6B:11:2A:31:5B:6F:0B:8C:93
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer:       /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial:       019C41A2276EA8017E50357E2600DB3842E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number:          1407
Signing time:             Mon 09 Feb 2026 09:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:11 +0000
Files and hashes:         1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: iie9Hyz6EWEFvN+9TOALWy4eUCwEYsHIUToggbZ/Uko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:27:6e:a8:01:7e:50:35:7e:26:00:db:38:42:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
        Validity
            Not Before: Feb  9 09:01:11 2026 GMT
            Not After : Feb 10 09:01:11 2026 GMT
        Subject: CN=b0e7a25bd05a408358102c6b112a315b6f0b8c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:0e:ef:cf:83:36:73:93:ae:5c:be:49:ec:
                    ff:ab:a7:65:6d:0d:45:e6:f0:a1:4e:ee:d6:b1:a8:
                    bf:04:62:01:b9:66:15:18:53:a3:f0:ca:f0:6d:e0:
                    e1:37:4b:5d:af:25:31:b1:52:08:a2:15:56:86:90:
                    cc:52:d2:61:cd:ab:e1:4f:7e:50:66:d6:1b:94:8e:
                    0e:d0:a7:67:36:c6:24:f8:1f:73:68:16:b8:a5:6b:
                    e2:44:23:19:51:b4:77:2e:cc:85:c2:2a:6c:8c:07:
                    67:51:c0:02:ec:83:69:97:1f:7d:44:1f:40:63:c9:
                    dd:26:82:85:03:65:9e:38:c0:52:36:7a:a7:7d:32:
                    29:b4:9f:93:a3:2c:dc:1c:88:43:28:ff:a6:95:a8:
                    51:f8:49:ad:fb:6b:83:f0:f5:0c:ab:64:88:ca:47:
                    53:f0:66:c2:a7:61:1c:e4:6f:aa:9a:b2:14:6a:8c:
                    e3:c9:9a:77:95:7b:f2:33:ce:ae:f6:32:2b:4a:45:
                    59:7d:92:22:a8:c2:9e:10:37:91:71:10:96:d7:5a:
                    6c:0b:78:77:46:d0:88:56:de:49:01:43:9a:19:0c:
                    9d:1c:8c:d8:ca:3c:e0:01:d6:a2:f9:0e:62:8a:5d:
                    70:2c:6f:5c:33:e6:05:e7:61:0d:91:47:28:5f:c3:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E7:A2:5B:D0:5A:40:83:58:10:2C:6B:11:2A:31:5B:6F:0B:8C:93
            X509v3 Authority Key Identifier:
                keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1a:30:10:91:a1:c1:fd:37:69:dc:1a:54:7a:38:32:b7:82:
         4b:f5:f4:f8:78:89:a4:f6:ce:8e:16:57:16:62:7e:cf:72:d5:
         74:aa:e9:39:e9:7f:73:c6:a6:71:6e:82:18:bb:71:5f:38:39:
         8a:22:bb:6f:9a:17:e4:6e:93:30:56:ae:84:81:cc:6c:b2:54:
         ed:db:84:20:45:83:0c:72:9c:b9:06:9e:f3:6a:87:23:04:dd:
         ee:05:d6:73:dd:3f:50:58:ac:af:05:c7:cf:4b:d2:e5:24:2e:
         50:36:56:6f:04:59:ee:c5:ec:48:a3:8c:01:7e:93:01:74:d8:
         b7:6c:61:93:ea:91:62:ff:69:d3:ed:76:b1:6d:83:2e:b3:9f:
         3e:bd:b2:3c:a7:ea:b1:d9:d4:09:67:d3:0f:1c:9f:57:18:b2:
         2f:94:c6:ef:39:8e:7a:eb:42:dc:98:a5:d0:dd:04:fa:16:bb:
         37:a4:60:ee:ac:d8:49:dc:ce:99:5a:58:3d:cd:a5:83:59:b0:
         6c:5e:80:38:82:55:ca:bf:29:38:3d:40:42:32:b3:43:8d:41:
         b9:4e:a7:03:41:16:65:fb:c3:25:3a:1b:81:81:92:3b:fd:14:
         e9:8a:37:98:53:79:a5:6a:4c:e5:7d:b1:e6:b0:46:2a:36:ef:
         c1:33:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:06 2026 by rpki-client