This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          JGjYAFkc9szvD709hVh8jGavg/pAICdgworTI+XBAAc=
Subject key identifier:   0F:1E:CD:61:B7:47:95:08:3D:B0:85:00:5D:AC:E6:9B:38:E8:B0:10
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       019C42465AFFEE198F32DAC40AA6B5CCCA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          05B7
Signing time:             Mon 09 Feb 2026 12:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:32 +0000
Files and hashes:         1: 717UmVfC56DLyzJIkewUlvfIFG0.roa (hash: Xhib9unp/jlsbHbrOLeTYpepAcBI94Ed/fU4OASJBZU=)
                          2: BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa (hash: 9eQOj920J0RKfKOBG+x3ZwJkzFsoj5C4wlDIoVBASe0=)
                          3: _Na7vfMNE6KH8ABANOjjdG6uU4g.roa (hash: ucbQ9Dez3TCtvipedZVK8XnEorKB2QzPJMl5rkm50kY=)
                          4: _fhuGjpkRKlqYVqbCWdqX4nzLXQ.roa (hash: pemjsumjmI0Bd/B3SuE+a27XcI8Ly+FKaqAAHNiWTdM=)
                          5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: 8i8i//WU9zdEKEjYicqasGD478MNzVcgkAC8rK5uxpk=)
                          6: qMXcH8GKPtZKcC7oXNX1oSyED7Q.roa (hash: 1tbxCaHbYh4w/bTWHNKN1f4HzQQFR2Btp4iUYuLrWWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:5a:ff:ee:19:8f:32:da:c4:0a:a6:b5:cc:ca:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Feb  9 12:00:32 2026 GMT
            Not After : Feb 10 12:00:32 2026 GMT
        Subject: CN=0f1ecd61b74795083db085005dace69b38e8b010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:8d:ac:ab:26:2b:5e:0c:08:3f:59:de:11:
                    46:9e:8a:ce:b5:dc:b9:ec:8d:f5:71:a0:85:39:de:
                    82:7b:2a:e1:be:96:44:ad:a5:42:6a:36:04:19:3c:
                    58:ec:bb:92:17:45:a6:06:71:51:a3:0e:e5:0a:28:
                    5c:a6:7b:c8:d4:fe:18:6b:6b:ab:85:b6:ff:2d:60:
                    58:57:c6:9c:2d:22:c4:b6:19:2b:ec:f1:66:53:63:
                    ae:85:87:10:9e:54:d5:4c:ed:70:0c:b2:34:2d:b4:
                    dd:5a:c0:06:6f:14:43:14:41:d8:a7:5f:c8:f6:7f:
                    1c:a7:1f:07:7f:e1:e6:b4:5f:88:cb:a0:2d:0d:20:
                    46:b1:8b:fb:4b:6a:ad:46:e7:95:ad:cc:b3:3d:ee:
                    3a:ee:61:6c:6a:f4:99:21:09:ab:03:94:ce:3c:c1:
                    a2:b2:f3:48:e3:47:ee:dd:39:31:d3:40:ae:e8:c3:
                    c1:82:0f:d3:c8:e5:78:69:5d:f6:52:15:de:81:a8:
                    f3:67:88:3a:34:5c:28:6a:43:94:c9:c6:09:a8:ae:
                    25:c1:41:44:15:c0:c6:f2:92:ec:87:fd:66:8b:76:
                    36:f6:dc:04:b1:40:3c:f6:d0:13:c6:cc:82:41:08:
                    23:a7:b7:5a:e2:ca:24:68:be:d6:81:d5:28:2b:5d:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:CD:61:B7:47:95:08:3D:B0:85:00:5D:AC:E6:9B:38:E8:B0:10
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:87:8d:f7:68:24:5e:05:5c:c5:ed:58:ad:18:13:88:d0:c4:
         86:bc:db:58:a2:80:56:83:d3:d2:ea:50:b7:a5:81:77:d0:46:
         f0:68:95:02:ed:fe:51:c6:e3:ff:17:c9:00:2c:19:e7:ad:65:
         ac:6b:73:ff:9c:b1:5a:bf:0e:3a:bf:33:da:94:1e:e2:0b:cb:
         fe:59:19:5f:db:07:b3:fe:2c:58:5f:01:ce:52:15:12:e1:2b:
         a9:b2:bf:e8:39:d4:02:c3:17:98:c1:8a:84:ae:d0:c9:96:66:
         ea:79:52:e3:e0:95:c2:b6:38:f7:77:9e:c8:20:a2:94:8c:30:
         c4:39:8a:3c:a8:5b:8b:dd:38:f5:ef:42:48:00:1a:69:49:6a:
         3e:1e:d3:82:76:52:87:50:13:c2:be:c3:54:25:2d:03:e3:c3:
         23:3b:7a:94:83:16:21:dd:45:f4:0f:7e:c2:f0:eb:d3:1a:3a:
         d9:13:4e:20:cd:fe:95:d0:19:e0:d1:ed:88:73:53:a1:bf:94:
         77:80:92:10:ed:af:e0:27:f2:1e:c6:49:91:3f:1b:7c:89:4c:
         0a:c8:6b:83:f6:d3:5d:21:fa:bd:1a:aa:a0:e6:78:a4:4d:45:
         a1:14:b1:4e:25:e8:45:32:1f:d9:6c:a4:7f:36:68:c5:dd:7f:
         57:33:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:33 2026 by rpki-client