This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File:                     H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier:          SBrqNYpmG9WxeeDftNgocY92WiYWR8cIhf6XD+s9RWM=
Subject key identifier:   6E:76:12:C6:0F:FA:B0:98:70:A0:13:91:61:EC:6C:68:CB:51:C1:22
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer:       /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial:       019C420F8F805DBB101ACE9A8CCABB1B9AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number:          0E01
Signing time:             Mon 09 Feb 2026 11:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:41 +0000
Files and hashes:         1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: MLfR3I0pF7/NeVT+52s1fIL/BpPSNzXIs/NzXntquMY=)
                          2: NJax3QvlUxuz0S34cv9iYVlYSQU.roa (hash: u51xEsV9ElXZprx9W5HKiMp5RG9k+7g4oH4KGNb9sDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:8f:80:5d:bb:10:1a:ce:9a:8c:ca:bb:1b:9a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
        Validity
            Not Before: Feb  9 11:00:41 2026 GMT
            Not After : Feb 10 11:00:41 2026 GMT
        Subject: CN=6e7612c60ffab09870a0139161ec6c68cb51c122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:7b:e9:cd:3a:70:77:dc:88:6b:12:7e:cf:
                    39:75:06:0f:42:20:44:57:34:4c:1b:cb:81:82:e8:
                    0a:ae:e8:97:68:eb:8f:ee:81:41:e9:1a:4f:87:d9:
                    5c:ac:bc:8f:4c:89:8d:80:2e:7f:97:71:f6:bb:d0:
                    84:2a:60:b1:f8:16:82:49:bd:35:5b:f0:9d:c0:37:
                    60:7c:92:8d:84:20:f1:e6:6c:97:71:2a:ac:ea:a5:
                    40:1d:1f:5c:f6:34:bd:92:7b:ea:b1:0b:e2:0c:62:
                    48:03:b1:9c:d8:00:99:a8:06:21:a3:bc:d9:8a:29:
                    a9:62:53:1d:62:cf:e2:bf:e3:6f:4d:ce:2e:df:e2:
                    0b:85:7b:cd:a9:05:6b:fa:ac:69:a1:d2:c0:3b:51:
                    b1:2b:5b:a0:81:29:52:c8:5a:93:1c:86:8e:76:f5:
                    90:75:96:5a:22:f9:cc:3d:15:e4:63:f7:f3:25:4e:
                    ae:3a:1b:74:8b:01:90:67:0e:b3:c3:18:59:8c:6a:
                    23:93:69:a9:a5:33:09:c3:be:7f:c9:b5:d5:8d:8a:
                    fb:03:03:9c:65:2b:0e:1c:04:e3:d6:fc:79:3c:42:
                    3f:45:20:5d:ab:83:ad:5c:8a:ce:c9:cd:bc:95:1f:
                    ce:de:44:ef:60:78:02:6c:5c:68:e6:3d:49:59:87:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:76:12:C6:0F:FA:B0:98:70:A0:13:91:61:EC:6C:68:CB:51:C1:22
            X509v3 Authority Key Identifier:
                keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:61:08:23:4b:85:68:e2:56:27:cc:22:e6:64:b0:9c:1d:
         bc:4c:f2:d9:98:bb:47:43:e5:c9:b3:8f:c0:63:86:5d:17:0b:
         ef:fc:07:4d:b1:2a:3d:66:d0:44:c2:3d:6a:a8:12:fa:3f:49:
         2d:0f:8c:14:94:5e:cc:72:7b:16:bd:7f:80:b7:0f:83:82:2a:
         ed:40:7a:29:26:fc:18:bb:08:ed:b0:71:df:45:4d:5f:c4:1e:
         b1:d3:8a:14:e2:94:4f:08:77:86:f7:f3:b4:48:f4:b6:a1:ae:
         32:92:88:2b:e1:df:90:8d:61:64:5c:b6:2e:f5:fe:ac:8b:aa:
         62:f9:cb:3c:af:23:85:91:4b:c6:76:f4:dd:d9:94:fd:40:a9:
         92:42:1f:ad:f7:b6:24:df:ff:4d:2e:cd:8a:1f:79:de:60:24:
         a7:93:6e:b3:97:f5:ad:f3:6b:58:b2:16:8a:ab:86:7b:85:54:
         09:b3:b8:e4:d4:2a:1a:1f:24:77:76:4b:95:ee:34:ca:c1:12:
         fb:be:3b:e3:5d:16:cb:97:db:71:a2:d7:8e:46:70:00:d5:8f:
         3b:4b:17:5b:10:f0:d4:c2:1b:a0:c3:49:6d:7c:66:8d:e8:d7:
         13:44:22:7a:64:4b:82:98:78:44:a1:12:21:5d:d0:7f:2b:ef:
         28:7e:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:56 2026 by rpki-client