This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File:                     t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier:          dA5BYoJ93FSenb860CJb+ZHoWy1uHKfrWGbw1XDJw+c=
Subject key identifier:   B5:53:A2:FE:62:F4:15:D4:CC:4E:6D:FA:44:7E:B7:41:E0:99:DB:C2
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer:       /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial:       019C4322E8B2DB6A2F07C60E14010BD6E4BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number:          0F33
Signing time:             Mon 09 Feb 2026 16:01:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:27 +0000
Files and hashes:         1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: HOkKp9TZx1ftZ8ykIKfwl/6fM2zlACz4sY/uSQmEtIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:e8:b2:db:6a:2f:07:c6:0e:14:01:0b:d6:e4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
        Validity
            Not Before: Feb  9 16:01:27 2026 GMT
            Not After : Feb 10 16:01:27 2026 GMT
        Subject: CN=b553a2fe62f415d4cc4e6dfa447eb741e099dbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:c2:c6:db:e0:d6:69:d6:28:e2:a5:5b:22:
                    93:87:73:8c:6f:9d:86:ce:98:3a:97:db:82:6e:51:
                    a1:1a:a3:6a:56:bb:c3:75:b5:72:74:02:a9:15:2e:
                    b8:1d:4e:2f:c4:ae:65:6f:69:d9:37:ad:c8:2d:23:
                    52:ec:ca:96:11:9a:d3:f7:d0:b7:58:d7:50:f2:7d:
                    d3:a3:e6:48:9c:c7:05:cd:94:70:76:5f:8c:e9:f0:
                    f8:aa:60:51:14:88:57:0b:f3:24:25:78:59:40:39:
                    58:99:da:79:91:6b:da:bb:db:fc:be:b4:ec:e2:57:
                    6c:74:d7:7b:b6:f4:f1:3f:9e:48:33:7b:35:a3:57:
                    59:b1:b8:e2:00:69:e0:57:f1:7a:7d:1d:a4:15:4e:
                    8f:2c:99:ec:ff:29:01:08:18:48:48:0f:9f:0d:b4:
                    a2:5e:45:18:34:e5:73:22:49:03:6f:d6:6a:e8:f0:
                    fe:d8:67:7c:f4:06:24:9c:46:e4:92:93:e5:94:4f:
                    d6:97:21:35:29:61:d3:ca:a5:63:d8:64:ae:82:a2:
                    63:db:c6:4d:a9:25:65:02:33:2b:ab:a0:bc:22:f2:
                    e0:78:8c:24:de:b0:d9:82:f4:1b:bc:9f:db:2c:7f:
                    3e:96:9c:91:ac:f3:13:b5:74:9f:08:21:88:15:67:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:53:A2:FE:62:F4:15:D4:CC:4E:6D:FA:44:7E:B7:41:E0:99:DB:C2
            X509v3 Authority Key Identifier:
                keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:86:1d:7b:76:6f:6d:df:aa:75:1c:26:f1:f7:4b:c5:d8:db:
         ca:c0:c4:f7:d3:ff:f9:66:ae:2b:ee:ca:6d:f8:73:a9:da:80:
         5a:d4:b6:e3:49:76:a0:a2:57:36:a9:c3:c9:52:4b:2d:dd:a4:
         c4:10:a2:96:52:74:92:a2:be:3c:bb:71:2c:d2:aa:c0:a4:67:
         a1:02:24:20:0b:43:a7:8c:cc:20:de:c1:74:68:1c:75:bd:45:
         c1:2e:5d:c7:3f:54:f9:51:7a:97:27:e5:4a:66:c4:66:a7:20:
         01:a5:76:da:0f:62:28:23:b5:a4:2b:0d:4c:db:4c:c6:4a:24:
         30:6d:8e:e9:2a:42:17:f5:ac:e6:73:ef:30:e9:48:57:10:82:
         ac:7b:7a:c3:97:99:61:a6:72:ce:75:70:1a:7a:8c:74:ea:47:
         b1:15:27:07:ee:d8:47:e4:a8:d7:a8:ca:bd:5d:f5:e9:88:06:
         db:f3:e5:3f:dc:e7:50:7d:90:bf:c1:c4:fc:e4:c6:55:cb:23:
         d7:ff:80:39:2b:76:76:b8:6b:26:5b:e7:78:af:62:37:54:62:
         15:8e:8f:1e:45:50:f5:43:96:ee:69:ed:38:f1:e8:0e:f8:9b:
         86:12:48:54:0e:ce:38:b9:04:5f:cc:05:80:ab:3c:b2:1c:fd:
         c0:7c:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:34 2026 by rpki-client