This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File:                     V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier:          5Ugl/FarlAUmsaUJXBLPg5FIaHEGzdYEpd/YFDgm3pY=
Subject key identifier:   16:CB:98:72:0B:82:D7:83:E2:06:A7:B5:54:46:58:41:79:40:55:28
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer:       /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial:       019C4321D423C1E6FB87682EC5B2C6F2B955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number:          0A1E
Signing time:             Mon 09 Feb 2026 16:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:16 +0000
Files and hashes:         1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: Iztf96wYiNjVhcB/eo7bJxt/UHzMEgFunSxYaWrFw3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:d4:23:c1:e6:fb:87:68:2e:c5:b2:c6:f2:b9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
        Validity
            Not Before: Feb  9 16:00:16 2026 GMT
            Not After : Feb 10 16:00:16 2026 GMT
        Subject: CN=16cb98720b82d783e206a7b55446584179405528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:d2:c5:12:26:58:33:ad:e0:d7:d3:e4:1f:
                    b2:46:7b:e8:72:3e:49:37:27:5c:e4:ed:34:cd:70:
                    fe:0a:eb:f4:12:f8:d7:9b:73:d8:5c:8b:0c:df:55:
                    ad:af:2b:95:d0:42:62:16:50:41:23:f8:99:4b:f0:
                    6c:49:22:c7:17:63:10:d6:c4:41:c7:15:07:84:d6:
                    f9:0c:12:ce:e4:ed:a0:af:e0:4b:f8:c0:9e:2d:8e:
                    d0:b1:86:44:8c:62:1d:48:94:8a:7f:26:98:49:94:
                    16:ae:9c:3c:46:b8:42:e4:c4:84:12:bd:26:d6:12:
                    e6:04:63:3e:50:da:4d:3c:34:cc:b6:e9:54:60:e6:
                    48:ec:e2:0b:79:05:c4:f7:70:8d:83:93:f7:03:85:
                    b3:be:ef:64:e5:f8:fb:d6:cc:66:24:f6:cc:a2:56:
                    4d:53:37:70:4c:bf:5c:2f:1a:fe:ec:8d:2c:44:90:
                    8d:3b:53:55:29:16:f7:f3:72:64:37:39:ba:97:18:
                    db:be:03:83:a6:87:9a:52:2c:14:62:a8:0d:d5:ae:
                    a5:ea:3f:a4:13:ce:08:23:fa:e7:cb:85:f5:16:c9:
                    cc:19:a3:a2:9f:07:34:67:f3:fe:b5:95:15:a1:d6:
                    24:e1:e2:49:77:7b:fe:3f:2d:09:0f:f3:65:df:0b:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:98:72:0B:82:D7:83:E2:06:A7:B5:54:46:58:41:79:40:55:28
            X509v3 Authority Key Identifier:
                keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:47:36:9e:01:a4:cf:a7:96:e3:97:10:98:e1:c6:a1:ce:
         5f:b3:28:e7:b4:8b:43:84:33:db:30:fd:b4:bb:af:fd:3b:f5:
         27:2b:a4:8b:41:9f:81:36:cc:ef:02:8a:91:68:7c:60:ec:f8:
         61:38:2a:89:c3:a2:d7:03:ee:35:3c:72:a4:28:eb:f1:cf:99:
         7a:de:e4:33:97:d6:e8:26:3c:d4:61:10:0d:e0:79:ca:11:c3:
         a5:c8:02:1f:91:c8:ef:44:99:c2:66:f9:01:8a:3c:8c:f4:02:
         cb:52:63:32:05:42:64:d5:8e:3d:c3:cc:da:b9:ca:37:07:47:
         c4:fa:3c:e4:4e:8e:cc:33:b7:b8:2d:3e:6d:00:aa:a1:bf:89:
         82:27:b6:9d:39:dd:66:95:cc:6e:01:a4:a7:5f:0a:e4:5b:15:
         17:e3:16:f0:e4:da:72:33:15:bc:d7:23:1e:a6:75:89:3c:7a:
         81:4b:0a:2c:11:43:3d:62:65:79:88:77:f8:84:01:59:ab:61:
         92:fc:c2:47:2a:72:c5:95:a1:f5:2a:d2:5d:5a:8e:f0:a4:e2:
         96:ff:dc:88:1f:fd:d5:c9:87:e6:3b:08:2a:89:c2:c2:44:d9:
         59:76:57:94:7f:64:07:60:74:33:21:c7:a5:61:79:3e:1f:98:
         9e:cc:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:21 2026 by rpki-client