This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          DiOY7XR9Vjeu3OH4JaG4BdLoGxpBqfdddqeGY5YB9+o=
Subject key identifier:   BA:FA:55:15:A8:2B:53:28:9A:90:BE:04:83:9F:74:17:22:22:88:8A
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       019C424638F140EC7A424AAB973B67EC4238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          07AA
Signing time:             Mon 09 Feb 2026 12:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:24 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: 7WCia/dggrx7a9z71+yzoAST+xOaoDXvx3IKMFjXG5E=)
                          2: n44f7QSdRCQiunlcmqHdl3w15uE.roa (hash: AjuubWqF9PqvZ/rZA7q3KWYt0VtrOQcS6lypZ6/PGG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:38:f1:40:ec:7a:42:4a:ab:97:3b:67:ec:42:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Feb  9 12:00:24 2026 GMT
            Not After : Feb 10 12:00:24 2026 GMT
        Subject: CN=bafa5515a82b53289a90be04839f74172222888a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:bb:eb:76:49:7f:a3:d3:44:58:c1:b5:9d:
                    3b:cd:f4:aa:b9:a6:7c:c3:d1:06:06:e6:ef:fc:15:
                    53:42:bf:3d:9b:ed:a1:4b:0a:88:8b:06:2b:23:f1:
                    82:28:b4:20:49:2f:b3:b2:37:65:e9:c9:5d:a6:c1:
                    7a:49:ee:37:b9:4b:0c:a3:c1:f5:45:c7:50:f2:4b:
                    e5:27:c2:4f:97:5b:34:0e:7c:e3:e1:fe:3f:c6:03:
                    c7:8a:8a:65:3b:66:7f:15:bd:98:be:31:d5:71:cd:
                    e3:f5:23:59:f1:84:0a:36:89:9e:30:69:28:18:57:
                    bb:e8:a0:34:33:41:5a:91:c8:45:e1:81:1a:c4:2f:
                    06:c6:20:15:36:86:b4:23:f6:ba:80:c0:59:43:3e:
                    b8:21:82:1e:86:3f:63:10:d5:88:a8:d0:da:cf:c9:
                    0a:b7:73:b5:38:d0:d7:3a:7b:24:05:0e:39:74:40:
                    c3:6d:4d:21:6f:d4:1a:ac:fd:6e:20:ab:66:f1:2d:
                    b0:c5:77:8f:9e:88:6d:b1:69:8c:6b:13:b1:0d:aa:
                    76:be:c2:e4:65:8f:00:1a:d2:6a:16:a5:3e:23:1b:
                    1b:c7:36:a4:04:8a:0e:d5:50:28:b2:46:b8:b4:ef:
                    db:50:d9:21:e9:0f:fe:1a:e2:36:15:b6:b0:45:74:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:55:15:A8:2B:53:28:9A:90:BE:04:83:9F:74:17:22:22:88:8A
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2c:76:30:3f:d7:72:61:ef:b3:12:cd:e7:0d:d7:ac:a3:cc:
         8f:80:64:c8:1a:6e:e0:09:6d:d2:cc:e8:da:a2:86:f4:e4:4a:
         49:ca:cb:1c:19:f8:ab:e5:62:56:a7:e7:ff:fa:3a:77:77:17:
         d0:5e:81:03:d3:2c:56:c6:b6:3e:03:59:19:5a:60:38:f8:e4:
         a0:98:4f:5a:ff:3e:e0:c8:bb:47:c5:7a:ac:9a:a3:2f:1d:4e:
         0a:45:10:17:51:29:30:40:5b:32:7d:88:73:ab:98:63:7a:89:
         d2:e4:93:d1:3d:28:ab:b8:77:49:29:30:2f:e4:ec:cd:50:65:
         54:e1:f1:87:2d:8a:a4:2c:3f:89:7b:1b:ba:32:64:4c:50:ee:
         87:d9:18:7c:61:90:ae:38:1a:dc:27:4d:4c:83:c5:66:03:a9:
         73:c5:45:38:f0:4d:80:85:15:80:86:d0:0e:34:b5:5f:1d:cf:
         45:6b:53:8c:a7:89:1a:4d:66:c9:e5:68:13:bf:3f:14:af:5d:
         65:08:8e:f5:c4:a5:ab:d3:17:b2:0f:22:0f:c4:bd:64:22:cb:
         88:5a:24:3c:c2:15:1f:38:be:d6:18:34:cd:20:73:ca:c4:47:
         9b:9f:4b:a6:de:13:96:6b:4d:36:7f:10:a0:8b:1b:66:5f:01:
         a7:87:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:40 2026 by rpki-client