This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File:                     m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier:          7XvIfHShgJmD5aqgijUhG/tsMYA8meAh490+Ax33yGc=
Subject key identifier:   FD:1C:73:D8:09:5E:25:79:FC:8A:71:DF:43:B0:7A:F9:4A:43:24:8A
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer:       /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial:       019C41A1AC0E10EF026FFF0CFF2F78B0C062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 09:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:40 +0000
Files and hashes:         1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: cN7EgQnTJJRlBaAtMkJNxQspz5XxKZJEZ7mTSMCRRaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:ac:0e:10:ef:02:6f:ff:0c:ff:2f:78:b0:c0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
        Validity
            Not Before: Feb  9 09:00:40 2026 GMT
            Not After : Feb 10 09:00:40 2026 GMT
        Subject: CN=fd1c73d8095e2579fc8a71df43b07af94a43248a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:9b:05:99:c9:13:4c:e1:59:f4:2a:65:9f:
                    79:2e:a6:b9:cd:04:3e:bc:12:58:75:5a:21:e4:bb:
                    a9:fd:b7:27:38:86:0c:18:62:e4:fa:d7:b7:7a:0b:
                    54:c5:7e:9b:f5:c0:bf:a9:9c:96:49:3e:cb:f4:7f:
                    5a:d7:9d:2c:46:af:8c:3e:f8:e0:bb:40:dd:75:3c:
                    d6:21:84:37:33:1a:4f:8b:53:00:f6:82:4f:13:40:
                    25:77:df:ed:66:aa:f5:e7:17:8b:5f:12:20:22:99:
                    86:9a:9b:9a:d4:df:8e:82:b5:9b:99:84:ce:3d:5b:
                    84:08:d7:54:74:d3:fe:c0:e4:18:0e:e6:f0:e5:74:
                    19:ee:70:9c:e1:b7:ac:0e:b7:d9:03:47:98:93:ad:
                    e0:84:60:5e:bb:72:1c:35:e9:e8:d7:08:36:30:77:
                    a3:19:c2:49:ec:ec:cf:72:15:cd:d8:33:74:f7:fc:
                    5f:de:df:63:f5:00:36:76:e8:eb:1c:3f:32:b2:c3:
                    67:1b:97:74:e7:d3:9e:c9:96:50:e2:3c:3a:90:11:
                    fa:76:44:01:b7:a0:76:83:20:d9:8e:c0:db:d8:5f:
                    74:4c:54:78:ea:e3:d0:48:f3:ef:d6:a3:40:7d:16:
                    c9:cb:bc:8c:2c:e3:fc:8b:17:c1:04:d8:e7:2c:d7:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:73:D8:09:5E:25:79:FC:8A:71:DF:43:B0:7A:F9:4A:43:24:8A
            X509v3 Authority Key Identifier:
                keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:f7:61:d8:89:dc:bc:57:7d:be:2e:81:cb:72:39:06:bd:
         73:6d:5d:5a:7a:ec:a9:69:66:b1:bd:64:56:05:2a:ed:c5:14:
         f1:64:0b:6e:59:85:36:b7:d8:47:70:e5:de:4a:3f:d9:89:1a:
         6f:ea:db:ac:36:f6:0f:cd:62:ab:d4:07:a1:ad:24:30:48:76:
         b6:24:ed:13:12:c0:ec:58:22:ba:22:38:d2:1b:8a:68:18:1a:
         a6:49:3c:ae:b2:64:8c:38:a6:e8:e2:94:d7:47:f6:28:2a:12:
         5b:60:3e:62:3a:62:b0:4e:77:00:19:7f:05:9d:ba:6e:b3:49:
         7c:59:df:f8:6f:7f:c8:6e:a8:34:53:39:ff:d0:bb:15:dc:b9:
         fc:74:fe:61:9e:f4:02:5a:e7:c1:2a:d0:ce:5f:b4:fe:18:ce:
         d3:5e:f1:63:c4:66:1a:73:6c:89:a4:ef:32:1b:db:d0:8d:41:
         25:6a:49:4a:23:ae:e1:8a:9e:3a:cb:08:01:07:87:2a:75:29:
         45:4c:c8:df:96:0e:7f:f2:b2:5b:aa:ff:68:02:91:34:34:d5:
         68:45:c5:25:ab:f6:d2:65:9e:7e:32:1c:a4:c9:83:b9:d4:67:
         2d:f3:5f:6c:ff:cb:9a:b0:96:64:9c:74:b2:dd:d3:0a:40:5a:
         99:b3:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:48 2026 by rpki-client