This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File:                     b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier:          CZh2BsGBORKva4v7zlt4C8hsRWPxP1MC7v7Cdvq/9Ls=
Subject key identifier:   03:82:8D:2C:18:6C:9C:49:1D:75:62:36:02:E3:5F:87:D2:B4:B6:AA
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       019C43227CECF39B9C52BB7F0FD7574401E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number:          0C1E
Signing time:             Mon 09 Feb 2026 16:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:59 +0000
Files and hashes:         1: 0sNShrDJmnaMM666_lqvw34kSbc.roa (hash: JvACNJqo5Kvs6tRWY9dKRk+H6pDjvw63onqZeKb1aGk=)
                          2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: CfvJGK+/hixQzbmbu8h177ejtjkblxRr6NrgCeUprxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:7c:ec:f3:9b:9c:52:bb:7f:0f:d7:57:44:01:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Feb  9 16:00:59 2026 GMT
            Not After : Feb 10 16:00:59 2026 GMT
        Subject: CN=03828d2c186c9c491d75623602e35f87d2b4b6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:2e:43:37:94:c3:61:15:dc:aa:b4:eb:32:
                    64:99:82:cf:7f:42:98:b2:f5:ad:d9:f3:5e:e8:88:
                    b0:47:c4:4e:08:b6:49:48:55:9d:3e:e2:bc:87:88:
                    a8:da:72:68:90:98:39:82:90:73:fd:4b:9f:6b:01:
                    7c:85:4e:da:a3:38:f8:0f:59:f7:80:d9:36:ab:a5:
                    ba:c5:1b:67:56:e1:2e:a6:97:4d:03:8f:7a:a2:7b:
                    c0:09:af:39:4d:4e:86:ab:39:e2:0e:d4:83:ea:d5:
                    6b:ac:2d:14:12:51:3d:e5:ab:9b:b0:50:21:ad:04:
                    dc:36:b7:ae:1e:6b:be:c9:ee:09:ed:7e:d8:9b:86:
                    75:3b:fd:85:f1:56:35:48:a3:1b:af:88:41:40:ad:
                    33:58:f7:be:fe:d0:df:5c:60:3d:1e:48:34:14:44:
                    c2:1e:54:a9:a0:e2:7d:14:09:9e:de:ce:45:27:5c:
                    2d:17:5c:1c:1f:af:14:99:45:35:a9:cc:5a:59:61:
                    56:d2:f0:c9:e3:47:43:2f:a5:cd:c2:13:74:c3:fe:
                    5f:ff:47:6c:d2:2a:de:9a:16:d1:15:1b:fd:fd:93:
                    0b:bb:19:9f:a7:20:ea:64:e3:3b:0e:ed:de:33:7a:
                    a5:44:8a:24:a1:b4:c0:75:b9:01:20:89:22:96:3a:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:8D:2C:18:6C:9C:49:1D:75:62:36:02:E3:5F:87:D2:B4:B6:AA
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:e3:d3:f7:c3:35:d0:a4:e4:31:c1:4d:5d:c6:b0:57:03:
         8d:33:bd:56:9a:46:f2:05:51:00:4b:17:d1:ad:4d:68:62:a6:
         db:87:30:b4:1e:97:65:86:8f:3b:40:9b:1a:73:52:a2:de:32:
         5a:5e:8a:5f:b1:76:92:9e:eb:95:ae:5a:44:2a:e0:5f:aa:35:
         6e:5f:a4:ab:57:f3:9f:9e:60:e5:05:12:61:46:a0:dd:cb:53:
         f6:49:8a:07:17:8c:e5:64:26:f8:c4:62:dc:d9:eb:f6:5a:68:
         79:ea:ad:21:33:04:9d:2f:3d:72:de:1f:aa:50:f5:a8:40:19:
         c7:ae:b1:13:ca:b5:cb:f7:67:9d:80:1e:65:6f:88:7a:bd:11:
         65:fd:40:fe:59:20:d4:96:8d:60:de:a5:4c:e4:1d:b4:1a:3e:
         0f:8f:56:b3:80:27:f7:39:bf:36:28:4a:09:97:e1:36:3b:8c:
         bc:5c:92:9a:b6:3e:ea:39:9d:12:49:c0:3e:e0:ea:ba:0c:81:
         81:7d:6e:67:f6:5a:4b:ac:40:ae:03:76:90:02:72:3d:6c:67:
         f2:6c:48:3c:eb:f7:66:05:6e:d8:f9:ad:76:a2:a7:fa:20:74:
         f7:f2:a5:85:76:d3:9a:80:95:8b:15:3e:d3:fe:e8:d6:d5:24:
         5a:47:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:32 2026 by rpki-client