This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File:                     AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier:          +Lz8uDw3y8JyXCg9raj+U27VeCWCqIiVXfqy/fNtZ7I=
Subject key identifier:   D5:CE:33:19:AD:DB:42:32:70:49:02:B8:16:1C:FA:8A:4A:7E:BC:B4
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer:       /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial:       019C42EB62D0FD4F647C9A3E0790870D5343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number:          11E5
Signing time:             Mon 09 Feb 2026 15:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:48 +0000
Files and hashes:         1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: 4aaxpfi1eUE3E8IGAJxgg4/Bz3NHyK+xxi2EuRUz6yw=)
                          2: TIl4ni4I9dnWPD6JhGZ4MT01X9k.roa (hash: xqkMDcDlSk0VZ9Deo2xieEF476AnzgNHWsIFEaEp8us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:62:d0:fd:4f:64:7c:9a:3e:07:90:87:0d:53:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
        Validity
            Not Before: Feb  9 15:00:48 2026 GMT
            Not After : Feb 10 15:00:48 2026 GMT
        Subject: CN=d5ce3319addb4232704902b8161cfa8a4a7ebcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:a9:52:68:80:06:0a:f7:42:75:c8:f1:8a:
                    fb:f3:bc:56:b7:64:9e:f2:d7:2c:f6:41:f1:ac:01:
                    66:4d:a4:4d:4d:3a:fa:84:2b:11:29:39:fb:94:a2:
                    a4:f4:c2:00:d2:c1:2e:72:c9:59:d4:eb:1b:db:87:
                    1d:c3:c5:04:bd:4e:e6:5e:7f:15:63:97:bd:0d:0e:
                    7b:0b:45:1e:22:ee:94:f8:f7:b1:81:81:57:de:eb:
                    16:40:f9:dd:d0:ee:71:ba:15:92:92:9e:b4:9c:d0:
                    06:8a:4d:b2:96:03:a6:d4:f3:66:a1:c8:71:0c:a6:
                    85:df:bc:a2:0b:2c:dc:8f:38:21:b3:ac:7e:dc:42:
                    54:5d:30:22:8c:38:c4:32:ec:dc:ce:a1:48:ba:ca:
                    ef:ee:7e:6c:ed:0c:67:d9:78:c3:73:ae:00:3d:52:
                    dc:d6:3e:f6:14:a2:f4:1a:6f:64:92:d1:da:68:2d:
                    2f:ea:e2:cc:67:d1:e8:2c:31:3a:42:63:8f:ff:3a:
                    17:8a:31:74:ce:32:9b:dd:8b:1d:55:46:e8:68:6b:
                    fc:8a:d4:eb:43:e9:b9:a7:3a:d2:5d:84:30:8f:98:
                    1f:6e:99:6d:e9:55:81:14:3a:fa:6c:54:4b:2a:e5:
                    56:5b:65:50:a3:2c:19:22:5a:42:67:28:97:3c:9c:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CE:33:19:AD:DB:42:32:70:49:02:B8:16:1C:FA:8A:4A:7E:BC:B4
            X509v3 Authority Key Identifier:
                keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4d:0d:30:49:91:2e:42:0d:b3:7e:94:97:61:b2:ef:52:44:
         75:ea:50:a9:4d:26:a7:c8:c4:53:14:45:78:4b:0e:16:34:ec:
         f5:c1:16:4f:7f:29:5e:06:71:48:c4:fe:2a:9f:cd:f9:9c:99:
         7a:3e:ba:31:cf:86:43:5f:53:4b:d3:89:73:5f:cb:e6:f9:b9:
         71:82:b6:fc:80:e5:49:f5:88:fd:5a:80:d7:35:89:a7:26:cb:
         63:c0:dd:0c:f4:cb:b6:73:bd:99:94:d6:1e:00:90:51:56:33:
         c9:0b:06:c1:18:2f:40:34:d8:33:b6:98:c1:36:4e:50:bd:c9:
         5e:64:d6:52:1b:45:60:4f:7d:6d:46:d3:1c:0a:4f:21:f3:80:
         ad:c6:8d:8b:b4:5e:f2:74:bf:80:19:e5:78:bc:cc:83:c0:60:
         7d:ea:94:ad:f7:1a:f2:10:a6:7b:6e:13:a1:af:ff:26:97:0c:
         25:97:25:db:61:85:6d:21:f1:1e:87:a8:9f:80:0c:10:00:e5:
         8d:05:40:65:f9:cc:69:7d:51:99:66:67:d3:6e:df:f2:71:74:
         3a:c7:b7:7e:75:d6:72:f4:8b:49:fb:08:df:a2:57:71:bd:95:
         68:b5:d8:a6:80:50:6b:59:a4:c1:bf:1c:9c:76:c1:d6:10:f4:
         10:1a:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:50 2026 by rpki-client