This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          LqA/bCvvT1eK1FAvSIbRf9nGcXwt/doDWRS+0kcpUG0=
Subject key identifier:   16:31:BC:E4:BE:E9:56:16:53:EA:14:43:AB:5D:1E:BC:D5:9A:8A:7D
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       019C4322E50975D1EC0751D0185467CB9F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          06A1
Signing time:             Mon 09 Feb 2026 16:01:26 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:26 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:26 +0000
Files and hashes:         1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: vFUY6E+6aAyKLy1a5S8ZEXwmXrHDkSDEY9LsM1Kunyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:e5:09:75:d1:ec:07:51:d0:18:54:67:cb:9f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: Feb  9 16:01:26 2026 GMT
            Not After : Feb 10 16:01:26 2026 GMT
        Subject: CN=1631bce4bee9561653ea1443ab5d1ebcd59a8a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:28:57:4c:1e:b9:84:d0:52:df:6a:6e:67:
                    a6:59:bf:b1:1e:b6:06:4c:61:e0:9a:66:bc:4c:49:
                    91:62:6f:b9:7a:25:77:c2:54:b2:0d:60:57:b6:ef:
                    35:82:28:17:b3:b6:2e:ef:17:25:eb:b5:e7:18:5c:
                    8e:2e:e8:03:00:b8:3c:02:01:6e:33:ea:10:72:1c:
                    24:4e:78:42:c7:32:51:dc:ee:c9:3e:cb:40:ab:a3:
                    cd:37:54:b3:7a:12:bd:a9:45:1a:58:93:39:18:7a:
                    80:2c:22:5e:f9:93:6e:1e:19:d3:67:e4:ac:b4:72:
                    e6:b3:13:3d:a8:c4:59:e2:cb:66:d0:35:ae:bd:c8:
                    f8:83:93:83:af:90:1e:1a:50:51:8e:41:38:52:9a:
                    97:52:8d:5e:80:56:66:e9:80:d0:ed:5c:c8:8f:de:
                    67:e2:30:c9:02:f7:a4:44:34:68:19:3b:28:26:5c:
                    0b:73:a6:98:a3:af:df:41:f1:92:28:27:e5:bb:2e:
                    6d:17:b5:41:74:b2:79:52:ba:d9:3a:b3:6b:17:a8:
                    03:b2:c8:2f:0d:37:89:5c:fc:d7:e6:76:e2:1d:12:
                    d3:0d:e1:3b:1b:df:1d:10:1e:1c:ce:56:0e:f6:27:
                    2d:86:f7:f9:4d:88:c3:e7:3a:5e:a2:0c:46:15:4b:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:31:BC:E4:BE:E9:56:16:53:EA:14:43:AB:5D:1E:BC:D5:9A:8A:7D
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:f2:82:27:7f:d9:63:03:60:f8:43:e3:ac:e4:69:d5:ab:
         0e:92:44:4b:6f:77:c1:43:ce:15:cf:8c:68:43:39:be:43:8a:
         ca:87:58:c0:8b:a9:4b:eb:16:4b:c0:3c:74:69:a7:a2:45:94:
         94:0d:dc:48:ee:9e:70:f4:20:05:83:b6:7b:3a:94:89:4b:1b:
         09:cb:96:62:28:b9:a8:bc:25:60:12:fa:24:df:cb:46:c3:9b:
         24:85:5b:4a:ad:5f:fd:a1:d3:49:3d:60:6b:d8:fd:0e:f7:48:
         62:d5:f6:2d:1b:9f:49:6b:1e:75:ef:5e:4a:11:a2:ce:d9:ba:
         09:9e:73:9c:b0:1b:b1:75:d9:f5:19:21:94:60:03:36:2c:43:
         9e:a8:9c:f9:86:46:5e:92:54:5c:af:af:34:65:fa:34:7e:d8:
         1a:1c:1d:52:ee:24:61:6c:50:f2:51:8a:6b:f7:9a:71:cf:28:
         5b:b8:63:65:d9:68:77:1e:6b:d1:0f:bb:98:e4:99:b3:e8:4b:
         58:ed:c7:2e:87:91:73:a4:5d:5e:8d:1f:a7:7c:58:e1:69:ce:
         21:05:46:f9:fc:19:20:13:f0:e6:5a:1b:a0:a5:dd:9b:d9:68:
         49:f2:cf:da:75:b8:42:44:39:8d:30:5f:b6:b5:80:d7:59:05:
         7f:4a:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:23 2026 by rpki-client