This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File:                     rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier:          /40HtSeSA06BGVGM94pqVB7cGy+T8n3ItCRfX1EWgnw=
Subject key identifier:   DC:61:B4:CA:33:1C:5E:8E:FE:67:5C:4A:7D:EB:79:ED:F9:D4:F9:53
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer:       /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial:       019C4390C222A1148CA2B8EFC6956BB9A905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number:          0BB9
Signing time:             Mon 09 Feb 2026 18:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:25 +0000
Files and hashes:         1: mfv_sdF7JkrnlQLBP04nKDAckMY.roa (hash: buDLKj8SbGldH/UZVSAAKpuobU5YXqMLtN+FcDKjF3E=)
                          2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: Rz9K8RPKokNzjedcuZAAeglD0QT+F4ATTFoQSgCaFCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:c2:22:a1:14:8c:a2:b8:ef:c6:95:6b:b9:a9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
        Validity
            Not Before: Feb  9 18:01:25 2026 GMT
            Not After : Feb 10 18:01:25 2026 GMT
        Subject: CN=dc61b4ca331c5e8efe675c4a7deb79edf9d4f953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:cb:36:c3:af:d5:f5:67:86:86:f1:3b:8f:
                    29:6e:b6:63:68:ea:a3:a8:55:5e:ba:2d:7b:6c:ba:
                    eb:a6:95:5f:c9:5a:40:77:86:36:a1:60:bf:80:8e:
                    13:99:4e:50:2b:1e:1d:02:d5:04:90:e3:cc:3d:0c:
                    23:bc:1e:a6:2b:86:df:84:8e:2a:3e:6f:39:fd:c2:
                    8a:81:bf:3e:a4:fe:5f:ac:49:97:3d:c1:bc:4c:d5:
                    00:33:23:6f:4b:d8:e6:fd:4a:ef:dc:9c:2d:ba:d8:
                    1d:00:1d:18:4a:54:e6:85:59:bb:cb:05:61:43:37:
                    88:bd:35:92:a4:9b:6f:2a:29:39:8f:f6:28:88:c0:
                    29:7d:72:d5:c2:8f:be:37:2a:4a:98:de:b2:92:b5:
                    f5:7f:b7:54:d7:ce:bf:a1:f5:de:ff:91:82:db:94:
                    ff:11:11:ee:a6:b3:10:78:74:fb:c1:f1:b0:28:9f:
                    06:dd:dd:ae:e7:d4:23:7e:a8:d5:b6:b1:20:a8:f5:
                    3b:df:36:ef:b7:c1:e9:47:64:8d:e8:90:f8:9f:b9:
                    06:3b:cd:d0:fe:4a:75:f6:82:97:05:bf:05:41:91:
                    94:52:8b:b9:9c:3e:5d:e4:ac:e7:f4:3c:da:d1:5d:
                    b0:d6:52:9f:7a:fc:7d:6f:a2:72:28:1d:39:15:6b:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:B4:CA:33:1C:5E:8E:FE:67:5C:4A:7D:EB:79:ED:F9:D4:F9:53
            X509v3 Authority Key Identifier:
                keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:29:b8:d0:8c:25:86:1a:98:1c:25:cc:0b:5b:40:2d:b7:
         b2:80:6c:62:54:d1:c7:24:fb:f8:8b:2f:a4:ab:a1:b1:c2:9b:
         5c:04:0c:70:2e:ed:5c:db:d3:b5:19:c9:3c:7f:cc:19:c9:bf:
         ac:c5:b9:b6:d1:1b:6a:75:f2:99:18:66:fd:82:98:ad:51:5d:
         1c:f0:c3:d3:14:c3:38:3a:03:7d:44:36:7c:0c:cd:e4:5d:e0:
         bc:df:66:e5:94:f3:94:6d:3b:a4:7c:f6:ca:7d:22:9d:54:75:
         9d:70:a9:01:a5:8d:2a:a0:1e:c8:62:31:54:e8:0d:ef:cf:5a:
         f6:4a:30:73:1d:47:fa:90:03:fb:42:ca:bb:74:72:7b:c6:d9:
         c9:a9:15:5e:e2:bb:cf:db:41:4f:5d:0c:6f:71:15:83:27:84:
         b8:b2:55:e9:d0:db:5c:fd:5e:5c:51:03:3e:1d:6b:b3:c8:22:
         ef:09:09:93:d5:3d:ec:66:19:0e:3e:64:43:6d:2f:cd:af:09:
         2c:38:ec:c3:fe:bc:85:41:ff:f8:ee:79:6f:9b:d6:c6:1c:3e:
         0c:47:17:d0:4c:98:25:47:84:b3:ab:02:79:b3:bd:35:9d:cc:
         a2:3c:cf:f9:bc:a4:6b:a7:e8:f4:ba:4f:29:d9:97:f4:72:33:
         94:b4:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:30 2026 by rpki-client