This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File:                     5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier:          Zm/j1YrmXjF6qpZmnfIMB5TK+dL+BxNvQZAs7jqxwJw=
Subject key identifier:   A2:8D:96:87:16:BE:B3:F8:81:F1:82:D7:08:92:8E:D5:3A:08:14:F4
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer:       /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial:       019C43227276B30F700AAC89334A6FB09E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number:          1141
Signing time:             Mon 09 Feb 2026 16:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:56 +0000
Files and hashes:         1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: yYpdTLZltPuEYYKkg5Kd5av5VmILjyis/CFs6tvXBkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:72:76:b3:0f:70:0a:ac:89:33:4a:6f:b0:9e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
        Validity
            Not Before: Feb  9 16:00:56 2026 GMT
            Not After : Feb 10 16:00:56 2026 GMT
        Subject: CN=a28d968716beb3f881f182d708928ed53a0814f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:76:d2:f3:84:6d:a7:55:ff:31:35:83:f5:
                    c0:f4:63:ac:66:ae:00:4f:de:bc:95:56:25:96:fb:
                    65:85:45:57:56:2a:ac:53:32:e5:fe:7d:49:aa:21:
                    7a:d9:a1:8e:2c:02:9c:a2:46:ec:18:fb:73:92:c3:
                    90:f3:5d:7d:80:fc:e2:84:d9:f0:9f:04:2f:77:8b:
                    5b:71:bb:61:6d:8c:2e:0b:e2:01:14:b8:aa:50:03:
                    bf:f9:81:fe:53:2c:60:9e:07:4f:e3:47:35:cc:e8:
                    c8:79:86:ef:43:28:24:33:22:14:55:f1:40:56:6d:
                    e1:35:ec:b4:81:15:de:c5:fd:e1:0a:a2:00:c4:45:
                    e6:ec:a5:39:98:ff:b7:f2:ab:10:74:2f:4f:93:72:
                    d5:53:4b:b0:f4:a7:8f:15:ef:f5:3d:8f:c8:af:af:
                    72:50:75:4c:0c:a8:73:a6:42:73:14:26:5e:8a:11:
                    42:51:0a:e4:9d:21:ef:ec:9e:80:e4:3b:9b:08:f3:
                    fd:a8:81:9c:0b:d9:dd:c1:05:86:74:fd:a4:c5:4e:
                    74:ed:d9:c8:f0:0f:cb:96:b1:f5:d6:cd:ec:29:83:
                    a2:33:bc:22:76:1f:00:7d:32:84:84:25:ed:f7:35:
                    d5:cb:90:11:27:2f:b3:9f:6f:ed:ba:89:9f:97:ac:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8D:96:87:16:BE:B3:F8:81:F1:82:D7:08:92:8E:D5:3A:08:14:F4
            X509v3 Authority Key Identifier:
                keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:de:6e:19:58:07:b2:d5:bd:de:a9:1c:ae:d5:e2:13:7c:ac:
         93:ec:e0:0e:36:9f:a3:fe:75:77:2c:62:72:75:2b:65:41:78:
         44:bb:fe:86:89:e0:65:f4:47:2c:5c:34:df:53:b2:1c:a7:4f:
         26:f7:bc:4e:48:04:1c:12:f3:69:2f:1a:82:21:72:7f:52:e6:
         80:7e:c5:ac:b0:f9:47:c1:15:a1:d8:30:4f:f1:98:bd:f4:1f:
         0a:ab:de:07:19:68:63:bb:44:45:e2:7a:10:5f:8d:ce:03:7c:
         5a:21:ff:be:ad:13:92:af:2b:84:d6:58:91:83:ba:b7:70:3e:
         0d:93:0e:f2:6c:df:70:2c:1a:aa:dd:0e:82:01:35:53:1b:4c:
         4d:22:79:c3:0b:cf:7f:3a:98:04:a6:90:2e:d1:f8:35:1b:01:
         9f:8d:6c:b0:79:2e:b1:8f:d9:66:26:42:a6:52:67:08:32:e1:
         a6:ff:d0:34:8f:c8:c5:17:14:c5:08:01:3d:38:03:42:9d:e9:
         86:a6:28:fd:a4:cd:c1:d0:ba:01:da:c9:9c:5a:ab:1a:f8:a6:
         35:3c:ba:6e:f6:db:be:59:5f:84:8a:94:9e:fe:27:a3:9f:95:
         cb:a2:09:cb:51:a0:4a:23:82:0d:fb:81:a1:f1:00:26:df:c0:
         87:bf:fa:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDInJ2sw9wCqyJM0pvsJ6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjBkMzYzYTBhMTdhMDY4NDUxYTg1MTQ1Y2U0ZmE0NjRk
N2ZhMWIwHhcNMjYwMjA5MTYwMDU2WhcNMjYwMjEwMTYwMDU2WjAzMTEwLwYDVQQD
EyhhMjhkOTY4NzE2YmViM2Y4ODFmMTgyZDcwODkyOGVkNTNhMDgxNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf120vOEbadV/zE1g/XA9GOsZq4A
T968lVYllvtlhUVXViqsUzLl/n1JqiF62aGOLAKcokbsGPtzksOQ8119gPzihNnw
nwQvd4tbcbthbYwuC+IBFLiqUAO/+YH+UyxgngdP40c1zOjIeYbvQygkMyIUVfFA
Vm3hNey0gRXexf3hCqIAxEXm7KU5mP+38qsQdC9Pk3LVU0uw9KePFe/1PY/Ir69y
UHVMDKhzpkJzFCZeihFCUQrknSHv7J6A5DubCPP9qIGcC9ndwQWGdP2kxU507dnI
8A/LlrH11s3sKYOiM7widh8AfTKEhCXt9zXVy5ARJy+zn2/tuomfl6wjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKNlocWvrP4gfGC1wiSjtU6CBT0MB8GA1UdIwQY
MBaAFOSw02OgoXoGhFGoUUXOT6Rk1/obMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxEVFk2Q2hlZ2FFVWFoUlJjNVBwR1RYLWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80NzUzZDMtYTFlOS00ZmQ1LWFlZmUt
N2M3ZDhhNzhhOTYzLzEvNUxEVFk2Q2hlZ2FFVWFoUlJjNVBwR1RYLWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80NzUzZDMtYTFlOS00ZmQ1LWFlZmUtN2M3ZDhhNzhhOTYz
LzEvNUxEVFk2Q2hlZ2FFVWFoUlJjNVBwR1RYLWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd5uGVgH
stW93qkcrtXiE3ysk+zgDjafo/51dyxicnUrZUF4RLv+hongZfRHLFw031OyHKdP
Jve8TkgEHBLzaS8agiFyf1LmgH7FrLD5R8EVodgwT/GYvfQfCqveBxloY7tEReJ6
EF+NzgN8WiH/vq0Tkq8rhNZYkYO6t3A+DZMO8mzfcCwaqt0OggE1UxtMTSJ5wwvP
fzqYBKaQLtH4NRsBn41ssHkusY/ZZiZCplJnCDLhpv/QNI/IxRcUxQgBPTgDQp3p
hqYo/aTNwdC6AdrJnFqrGvimNTy6bvbbvllfhIqUnv4no5+Vy6IJy1GgSiOCDfuB
ofEAJt/Ah7/6eQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:28 2026 by rpki-client