This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          K7sS4u4iwVjZW5vjMam+shkOUkkRiX4P18c++KnC+CI=
Subject key identifier:   35:05:0C:9C:46:8D:26:3A:88:18:29:C9:7C:3E:97:5A:63:A9:71:27
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       019C42467B9BC178D1B1417ACCF2C24AB788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          0647
Signing time:             Mon 09 Feb 2026 12:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:41 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: GwJOOar09P7PeNjBOMtfWyjO9v4LEIeocXlzRsBk6jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:7b:9b:c1:78:d1:b1:41:7a:cc:f2:c2:4a:b7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Feb  9 12:00:41 2026 GMT
            Not After : Feb 10 12:00:41 2026 GMT
        Subject: CN=35050c9c468d263a881829c97c3e975a63a97127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:a0:f7:e4:be:66:a4:8f:d8:4a:7f:2c:03:
                    9a:a3:fd:7d:ea:b0:7b:18:1b:9a:e2:9a:3c:39:f8:
                    3c:2c:83:d0:fc:ce:00:1d:bd:d6:76:96:c8:99:94:
                    d4:9b:a4:5b:94:d5:74:06:28:ad:9b:31:e6:3d:a9:
                    04:02:8d:55:1b:5b:4a:7c:fc:dd:61:e3:ee:c3:c7:
                    70:56:27:09:0f:db:c4:0c:c6:31:52:11:09:88:1f:
                    6b:fe:c7:55:cc:2a:71:d6:9d:74:fe:aa:cd:46:7d:
                    3b:51:cc:27:e8:44:33:2f:20:0d:1e:94:03:66:66:
                    97:9d:61:2e:78:a6:16:80:ec:88:f9:6c:f2:c7:c8:
                    ae:85:89:5f:b7:bb:40:f4:cd:d2:76:91:7d:7d:c9:
                    bc:92:93:56:95:f8:29:57:83:4d:e3:1b:ab:ef:68:
                    ff:25:50:18:d2:82:f8:f3:91:6f:68:4d:2b:4d:e3:
                    09:8b:72:f5:49:d4:93:12:7b:b2:8f:47:ae:d4:67:
                    eb:06:7e:4a:6e:0c:b1:d4:eb:04:fa:56:2d:62:2c:
                    b4:01:84:8c:32:62:72:0c:e1:22:6f:c2:1f:8e:a6:
                    66:a4:84:3d:54:a0:b5:7f:85:7e:73:cf:3e:62:5b:
                    ec:1d:e3:2b:93:26:eb:e9:48:d9:1e:f9:1f:09:32:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:0C:9C:46:8D:26:3A:88:18:29:C9:7C:3E:97:5A:63:A9:71:27
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:16:b7:2a:0d:66:a3:d6:c2:53:b6:aa:77:3b:69:bc:0a:f5:
         50:a5:90:f4:ff:ae:fa:a9:9d:a8:c3:da:04:29:60:b8:6d:ee:
         57:27:55:9d:cd:7f:7f:29:e0:cf:89:e3:5f:21:7d:42:c9:91:
         61:96:2b:f0:bb:85:47:3b:22:72:99:a4:17:11:65:5e:8e:96:
         2a:6a:4f:c4:68:19:9f:b6:e0:37:7e:0f:3c:d7:cd:04:9b:f9:
         8d:82:e0:b5:f3:9d:c5:e4:ce:94:8b:8c:ca:aa:d7:2f:0b:ff:
         e7:c3:69:f0:1d:67:cf:b4:fc:a2:21:f2:5d:0c:8f:2b:8a:4d:
         73:1c:87:86:ae:de:72:0d:54:94:52:f9:91:34:09:e7:bf:e1:
         19:6f:a0:1c:2d:03:6b:c2:04:87:f0:3e:36:5a:52:e2:cf:31:
         fb:4a:a2:be:dd:3b:80:05:eb:70:45:e5:55:26:fc:36:f2:8e:
         e6:8e:6d:af:06:f8:20:81:86:05:01:3f:8b:ad:13:bd:ae:a3:
         80:61:d8:f6:2f:ba:08:b1:04:ee:01:20:99:66:4a:90:8a:3c:
         6e:c3:af:a5:05:21:84:96:ae:e2:ca:12:58:aa:46:41:71:3a:
         9a:de:dc:c4:bb:15:b4:66:2f:73:e1:2d:61:51:dc:82:09:0e:
         b4:8d:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:52 2026 by rpki-client