This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File:                     B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier:          JC4Nnni36H2knsvaHvqVvsxizimdScMj1nh28ouciws=
Subject key identifier:   A7:05:F8:A0:C2:78:4A:2F:EA:F5:7D:02:AC:90:4B:CB:95:DF:18:B4
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer:       /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial:       019C42100B0D391F56A1BCD51087692178E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number:          0F5F
Signing time:             Mon 09 Feb 2026 11:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:13 +0000
Files and hashes:         1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: 5cn5INDRXqVs3Jb47XYRO7t1Qf/nBAum968Z9CF1ROg=)
                          2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:0b:0d:39:1f:56:a1:bc:d5:10:87:69:21:78:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
        Validity
            Not Before: Feb  9 11:01:13 2026 GMT
            Not After : Feb 10 11:01:13 2026 GMT
        Subject: CN=a705f8a0c2784a2feaf57d02ac904bcb95df18b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:d5:2a:a6:59:31:eb:f9:da:b0:3a:b9:9a:
                    3e:ae:18:67:13:2a:c7:2a:aa:4b:cd:34:cc:67:d3:
                    68:ed:75:a3:56:4d:11:66:7d:c8:c9:cc:78:94:7d:
                    7c:f6:1a:c5:cc:3c:b8:5d:43:19:24:90:e9:21:21:
                    2f:1e:f1:72:23:ee:2f:44:0d:08:5b:6a:0f:11:ed:
                    24:3e:cc:1d:16:50:15:57:fb:fb:65:b9:08:c0:cc:
                    f5:5c:0d:0a:05:1d:d9:e8:c2:1f:91:51:69:eb:00:
                    36:cd:99:70:6b:07:6b:dd:45:6c:dc:33:d0:45:14:
                    cc:24:9d:12:67:a0:7d:24:85:f4:8c:61:95:eb:5b:
                    ef:3a:8a:b7:8b:da:c8:49:9f:0f:e3:e9:1d:13:5b:
                    cc:48:20:fd:c1:4c:fa:bf:63:67:98:c7:0c:57:f4:
                    88:8a:bb:c2:c1:60:43:0f:ad:58:06:32:9f:4f:a4:
                    42:cb:f1:d9:db:28:54:4c:b5:f5:2e:e1:70:95:a7:
                    e1:91:62:43:b5:cb:d5:57:84:e5:60:3f:72:5c:73:
                    3e:98:49:60:f5:2f:bd:8a:21:de:86:3a:36:25:2d:
                    b9:b2:39:0d:ce:50:25:f5:7d:93:b4:27:79:02:22:
                    89:e1:73:23:05:37:0d:8c:77:22:65:26:22:9a:48:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:05:F8:A0:C2:78:4A:2F:EA:F5:7D:02:AC:90:4B:CB:95:DF:18:B4
            X509v3 Authority Key Identifier:
                keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:45:ac:76:bc:f6:7c:18:e6:1d:80:90:dc:2f:83:18:a8:
         44:3c:61:16:fb:84:f1:e8:9a:e3:c2:45:82:81:0f:3f:58:80:
         26:5e:4b:d3:e8:09:61:9b:d2:03:6e:22:57:f3:02:b7:a2:1e:
         f3:3f:58:06:57:ce:4f:45:85:cd:25:0f:51:6f:78:bb:4f:ef:
         84:aa:b5:5a:4a:6b:7e:95:e5:0b:64:8b:8d:0e:b1:04:fb:f8:
         9b:95:a9:fa:82:1f:39:6a:b9:4a:cb:da:05:f4:03:c1:50:4e:
         98:7f:35:ae:4e:5f:77:da:ff:fc:39:8e:3d:7f:ef:5b:9e:3f:
         ef:5e:2e:15:10:3b:53:8a:5c:e1:b1:51:6a:aa:5b:d1:81:d4:
         ec:37:6e:d6:24:aa:8b:eb:75:eb:19:f1:36:29:6c:b5:5a:a9:
         90:85:0a:8f:e2:df:af:92:b9:ae:35:00:e1:4d:fd:29:15:f1:
         cb:df:cd:22:68:b6:a4:a5:5b:5b:7c:8e:c9:a4:be:bc:47:47:
         d4:36:d8:8a:8e:4f:c1:68:8d:15:b9:23:92:c6:8f:b7:c0:c3:
         dc:f2:08:f2:21:b9:12:52:2e:32:d8:4f:8e:01:d7:57:de:c4:
         dc:4d:af:04:0c:d6:0b:38:ce:a0:fa:4f:3d:8e:4f:2c:7b:f3:
         02:0e:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:24 2026 by rpki-client