This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File:                     v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier:          8yiECPnWoWWsLScnHVWM7TcMFSGQ0CU8beXrgLGYHpI=
Subject key identifier:   75:2A:49:4E:D4:51:9F:B4:2F:C2:AF:51:5C:46:E8:6D:A8:CF:1A:60
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer:       /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial:       019C4358EED761E7B2B79D167091D15538AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number:          08A7
Signing time:             Mon 09 Feb 2026 17:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:27 +0000
Files and hashes:         1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: w1Mz/u8Zh5BwyqZriyI+PrusOM1zPH+fHQCZK6kzwEo=)
                          2: wVNpm-1J5NTytyjtGnQX6j1BkDg.roa (hash: QtG2sWben/myYIuxaHxhV/nd4dmlFHcHKMY3zMny2lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ee:d7:61:e7:b2:b7:9d:16:70:91:d1:55:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
        Validity
            Not Before: Feb  9 17:00:27 2026 GMT
            Not After : Feb 10 17:00:27 2026 GMT
        Subject: CN=752a494ed4519fb42fc2af515c46e86da8cf1a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:6b:52:ed:33:cc:b4:aa:e3:19:de:60:ca:
                    0d:ae:7b:c8:7a:cd:3a:40:fa:85:33:2a:7c:dd:f9:
                    cc:48:a8:3f:6b:9b:49:6e:8c:d4:36:85:50:4f:c9:
                    db:67:fc:ac:ad:4f:dc:e0:74:4e:38:a4:c9:bf:2a:
                    1c:19:81:a0:63:57:77:9e:61:c2:79:f0:c3:48:e4:
                    b6:fe:08:c9:f6:83:0c:0c:3c:d9:fc:a8:0f:b5:b6:
                    01:6d:38:1b:1b:07:83:49:69:39:c4:0e:9b:eb:6b:
                    53:17:7f:ee:9b:d4:32:ec:27:2a:1f:86:74:4a:07:
                    96:25:44:50:2c:76:7c:82:8d:32:63:95:fc:c9:12:
                    c1:ad:a4:12:85:7a:fe:79:0d:db:7a:32:5b:4d:a1:
                    9f:65:b5:d4:c4:c2:4c:de:fd:a1:41:38:3c:80:24:
                    18:5c:51:36:db:5c:6e:62:9d:16:d6:1b:f9:99:7f:
                    aa:7b:44:4a:aa:ef:07:d0:9b:75:0f:8b:8e:e0:84:
                    9f:60:e3:45:50:5d:3e:92:6a:75:09:54:df:f7:51:
                    25:88:e0:5a:12:56:aa:c4:a0:1d:b7:01:c3:e4:04:
                    c0:88:c9:b1:24:47:9d:88:d4:49:3d:29:a8:52:2d:
                    45:8c:cf:e0:cd:2d:73:7d:c0:ca:95:62:39:b3:c5:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:49:4E:D4:51:9F:B4:2F:C2:AF:51:5C:46:E8:6D:A8:CF:1A:60
            X509v3 Authority Key Identifier:
                keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:a7:b1:5b:55:bc:64:36:58:5a:d2:f2:4a:b6:9f:93:8d:
         5c:87:e4:f9:be:1b:70:00:56:ac:21:69:ff:e2:fa:f1:80:0d:
         8e:63:fc:06:65:f4:22:30:5b:90:32:c8:3e:7d:f2:1e:24:87:
         5e:4d:3c:ef:7c:46:e7:b3:ad:74:86:b2:7f:02:d2:33:9f:0f:
         99:22:ad:e1:8b:85:d6:08:1c:f5:36:f3:38:21:f0:cd:ff:bf:
         d1:30:b0:b0:4a:28:51:7e:0c:cb:01:e3:01:82:ab:96:aa:29:
         69:30:be:1a:3d:9a:9a:a4:80:44:64:be:c2:ae:b8:86:35:e9:
         2b:38:11:0f:fe:8a:01:4b:f6:a4:32:61:d0:f2:9d:1e:c7:2b:
         bd:45:f5:f8:26:0e:f5:4b:96:01:84:5c:3f:b2:bd:91:02:67:
         2e:df:ef:ae:83:6b:45:f0:19:a5:f4:d2:11:e1:ac:0b:09:29:
         57:9b:ba:cc:d8:50:0a:75:d3:1e:8e:fe:44:69:6f:85:23:03:
         bc:ff:05:6f:b5:ec:2a:dd:8d:2b:62:d0:45:bd:5d:0a:19:bf:
         e8:8a:c0:cd:62:ec:b5:d1:6e:62:76:26:b1:f0:4a:01:ee:83:
         51:8a:0c:9b:5d:2a:df:79:f8:74:0e:6b:79:32:e2:a9:e4:22:
         2d:2a:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:15 2026 by rpki-client