This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          NV2S8Jz6GAYmGvLHW7zakUbZNejcDFXNj4kaYEoGi5s=
Subject key identifier:   A0:E3:98:72:E5:88:DB:FB:63:3E:FB:F3:92:19:1B:F2:15:23:88:30
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       019C416AD83EB3AC728E660F8D131188274A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0E0D
Signing time:             Mon 09 Feb 2026 08:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:46 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: Pdl5EN9U1wM9XYVQMbkk95Y2o+V+t9TPlAMteg19bZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:d8:3e:b3:ac:72:8e:66:0f:8d:13:11:88:27:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: Feb  9 08:00:46 2026 GMT
            Not After : Feb 10 08:00:46 2026 GMT
        Subject: CN=a0e39872e588dbfb633efbf392191bf215238830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:48:c2:de:a7:23:34:9d:20:0f:7b:df:db:
                    62:cd:12:0f:73:f9:f1:53:5d:84:d3:9d:70:0e:8d:
                    94:db:01:08:e1:91:6b:aa:19:59:c2:4e:f2:59:ce:
                    c8:92:b6:75:5a:13:ea:31:f6:21:fd:37:4e:76:c6:
                    73:cd:51:f1:e8:a8:b9:89:b4:58:90:ae:ab:06:35:
                    27:8a:27:41:21:03:27:4d:59:34:d3:9a:53:c0:85:
                    37:9e:ff:04:21:6e:66:34:c1:32:ad:83:c1:aa:c1:
                    3a:24:ed:13:2d:39:74:62:95:5d:1e:6c:49:64:37:
                    1e:04:2c:a4:0e:d4:71:23:d8:e4:41:89:89:c6:3c:
                    aa:74:a1:c3:9f:ae:e4:53:77:e7:cb:fc:18:ba:ca:
                    91:1b:2d:fd:c2:b2:c6:96:97:b7:d7:a4:61:80:c8:
                    a2:89:f2:6f:60:40:51:a6:1b:f4:5e:2b:f5:ca:ed:
                    34:cb:cc:f4:41:49:7d:f8:66:1b:09:8f:c0:37:a2:
                    20:ba:ec:c3:a0:65:e5:29:b5:3d:a9:49:dd:b6:7f:
                    83:e5:6b:c0:25:e1:fb:02:6d:93:7c:23:16:c3:8d:
                    17:23:6a:9c:0d:3b:b3:cb:36:56:f6:b5:3d:1e:88:
                    53:bf:fc:e1:59:76:8f:bd:d0:6d:8d:27:1e:27:77:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:98:72:E5:88:DB:FB:63:3E:FB:F3:92:19:1B:F2:15:23:88:30
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:5e:24:d7:2d:2c:bc:76:63:c2:73:63:c5:9b:1a:6b:3e:
         0d:f6:72:19:f8:b0:eb:67:9d:85:15:08:c5:17:5a:66:84:8f:
         23:bf:83:ad:94:8b:da:9c:4a:5b:a7:70:4c:78:2d:a0:7d:be:
         a2:ce:76:33:57:d7:12:f2:a1:af:21:95:de:1d:ae:af:08:5f:
         65:0b:76:74:23:38:d5:86:d1:03:15:4c:ba:ff:a0:01:77:a3:
         14:13:c5:7e:20:dc:cf:40:fa:e9:6b:cf:bf:60:d3:0d:5a:68:
         36:d0:d7:ef:f4:10:af:4d:a3:16:e6:3d:21:35:13:4f:c1:e7:
         2f:a8:bf:b7:c8:31:f8:d1:ff:a6:a8:96:9a:9b:25:e3:99:56:
         92:18:80:17:bf:9a:92:ed:87:86:17:9f:75:c7:a4:84:27:e4:
         86:30:ab:55:ca:ed:8d:aa:e4:ac:f2:c3:16:74:10:2c:83:50:
         f9:9c:9b:1d:05:49:b8:6c:99:97:57:39:32:8c:eb:a5:33:c8:
         84:76:9f:64:32:dd:16:27:c7:d8:04:e1:b2:08:46:31:40:00:
         8e:f7:07:93:c2:07:7a:b0:4a:c3:85:09:3b:15:e3:74:cb:0b:
         7e:a7:ef:87:59:f5:dc:40:fe:c0:64:7f:ad:60:40:df:76:95:
         34:88:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:22 2026 by rpki-client