This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File:                     V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier:          WMjaXuuRkSb4TX0zkKl3VCWoZv66FO9LdkoFgsa1vz0=
Subject key identifier:   C5:00:9C:CF:97:05:51:C6:14:A3:83:8A:92:C0:16:7D:9E:A9:28:97
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer:       /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial:       019C420FB594984AF489EAD743E50A5BDBA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number:          1299
Signing time:             Mon 09 Feb 2026 11:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:51 +0000
Files and hashes:         1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: 5HPi4mnTXvOO9cGUWrAkED2u0Y1iSMZzqMUKAToP4A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b5:94:98:4a:f4:89:ea:d7:43:e5:0a:5b:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Validity
            Not Before: Feb  9 11:00:51 2026 GMT
            Not After : Feb 10 11:00:51 2026 GMT
        Subject: CN=c5009ccf970551c614a3838a92c0167d9ea92897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:be:ed:d6:a8:54:83:c1:0a:30:3f:b1:35:
                    7e:d8:c5:e7:72:b6:da:e2:9f:9f:7e:17:d3:55:72:
                    fb:38:6c:f4:04:84:ed:c1:92:2f:7d:ca:60:d3:0f:
                    5d:50:03:09:e5:54:ca:51:46:18:d8:65:d7:61:79:
                    9e:74:84:e8:88:83:a2:d6:c7:09:fd:ff:fb:7e:da:
                    39:78:4d:3c:07:b9:c2:45:5f:f0:b5:e6:f4:0a:b1:
                    af:b2:a3:ba:2c:b1:a2:33:6e:96:0f:75:dd:95:dd:
                    6f:9a:04:25:87:59:80:6c:ef:ec:c6:bd:ad:8b:ab:
                    67:28:dc:71:3a:d1:7f:24:a0:ed:b2:85:a6:96:7e:
                    27:ca:a5:84:f1:dc:d9:af:6e:66:55:78:97:11:1d:
                    9c:d5:da:3f:d1:8e:b8:98:95:d4:4d:4b:9d:f7:28:
                    57:f8:92:07:8c:06:88:7f:50:65:d3:d9:77:43:21:
                    6e:15:37:c4:83:36:d8:aa:83:c5:f1:6d:6c:ec:0a:
                    6e:02:b0:95:02:0b:7a:c1:94:f4:0f:cd:55:35:d3:
                    73:e2:aa:b9:c3:f1:53:18:c1:cd:ed:c6:97:ce:1a:
                    c4:50:6a:56:cd:dc:78:8a:6c:bc:38:64:f6:37:1c:
                    c3:79:23:aa:03:26:22:b4:4e:5f:f6:62:b2:8b:d7:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:9C:CF:97:05:51:C6:14:A3:83:8A:92:C0:16:7D:9E:A9:28:97
            X509v3 Authority Key Identifier:
                keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:27:ed:cc:be:9d:74:c0:5d:2b:bd:c5:d3:f9:71:6d:de:42:
         f6:0a:22:0b:27:ab:dc:f1:c8:91:4c:c2:16:a6:b2:91:ed:65:
         68:25:dd:9c:0f:15:ce:dc:bd:84:b6:44:78:76:67:f0:ee:a9:
         71:62:f2:73:a8:d7:f1:d4:19:c9:fb:75:51:a9:4a:cc:e3:8f:
         51:54:0f:ee:9f:47:cd:2e:9e:e6:6a:7f:01:ef:e5:bc:07:c9:
         c9:51:bd:65:a3:4b:31:9b:b8:94:9b:bd:03:4b:7e:77:92:38:
         c7:68:9f:13:2c:9d:30:b8:62:07:da:61:38:0e:03:9b:2e:10:
         aa:99:ef:25:9a:a3:a3:56:d3:a1:62:cf:21:bf:03:b9:0a:c3:
         19:d8:7e:f9:2f:51:6f:13:5a:14:ef:3a:4d:d0:95:68:c7:f2:
         6b:84:67:f6:6d:05:ef:84:37:9b:8b:8a:79:79:96:15:bd:fc:
         0a:44:30:5b:fd:f4:54:21:2d:8a:08:9a:45:ef:c9:d3:c1:00:
         fa:f2:62:54:5a:7e:59:51:76:e9:95:b0:2e:dd:96:ff:71:7b:
         50:5a:92:0c:30:5d:e5:94:30:cc:8e:27:94:85:2c:38:da:67:
         27:40:26:1f:f6:67:0e:9b:a7:a7:4b:85:41:a4:6b:3d:4a:a8:
         53:91:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:52 2026 by rpki-client