This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File:                     5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier:          NOklON65BGNnFgNB/rt9MD9gghpky62rEkxeWOHeoww=
Subject key identifier:   AF:98:9C:7B:03:CB:F8:E1:35:26:D7:D1:DD:88:82:B9:F5:50:C8:9C
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer:       /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial:       019C40FD7259B7D26A589356F6DE04CD5C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number:          1408
Signing time:             Mon 09 Feb 2026 06:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:17 +0000
Files and hashes:         1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: XuiFGnx4d9QLNl4u5H4OTxHftyPEISTQhX80h3pQuHs=)
                          2: JZiy3r9PkYB8MElyL5xGJo1pVPk.roa (hash: xvNOkN38iMVfLqxF6m1PTaRdbwBZf+HM7rmKu9Qh53U=)
                          3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:72:59:b7:d2:6a:58:93:56:f6:de:04:cd:5c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
        Validity
            Not Before: Feb  9 06:01:17 2026 GMT
            Not After : Feb 10 06:01:17 2026 GMT
        Subject: CN=af989c7b03cbf8e13526d7d1dd8882b9f550c89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:59:51:4b:ab:34:82:57:4b:2a:ec:77:1a:
                    94:fb:2f:34:19:ee:75:a0:fd:5a:d8:2d:a5:82:99:
                    71:60:00:19:9e:b0:ff:0c:39:7f:76:50:d1:98:64:
                    93:03:68:cc:db:1d:d8:08:62:c4:f2:6f:9f:98:50:
                    ac:12:d3:8c:b2:a4:27:1d:1e:17:4c:b5:e4:1f:f2:
                    ff:e1:75:4a:f2:bc:74:1f:2f:60:47:74:18:b2:91:
                    5f:f6:81:ab:de:d3:4f:59:d3:ce:e1:65:25:31:30:
                    78:02:eb:6f:21:8c:d5:69:0b:19:47:10:77:16:cb:
                    8b:a8:57:66:ce:9a:d3:a0:39:8c:44:1e:10:12:86:
                    a5:6d:8e:d6:7d:93:75:84:f7:bd:af:2f:35:63:87:
                    43:ab:4d:a3:2c:a5:b9:af:87:4d:5b:fd:18:40:cb:
                    dc:a7:3a:60:55:86:b2:06:d6:f6:51:be:db:7d:ff:
                    f7:e9:76:65:bb:72:2f:36:c5:28:e7:b1:a5:e8:fe:
                    54:3f:9b:89:bb:ed:e3:54:69:c0:79:e5:c4:70:e6:
                    43:32:c8:55:e6:f3:26:84:27:2a:09:47:58:44:0a:
                    c0:12:96:3b:d2:9a:9b:2e:73:fc:dd:b2:2d:36:8f:
                    68:ec:59:29:25:5a:5c:66:1c:9a:ba:f3:25:68:05:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:98:9C:7B:03:CB:F8:E1:35:26:D7:D1:DD:88:82:B9:F5:50:C8:9C
            X509v3 Authority Key Identifier:
                keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:43:c0:02:f7:f8:ff:23:10:8a:14:7a:67:eb:e4:88:17:08:
         3d:17:5d:e2:ad:b2:a4:92:54:3c:c4:59:2a:8d:b8:2e:db:15:
         94:6d:00:b1:17:2e:a1:eb:38:a6:cc:fd:c1:4c:02:ca:7b:b5:
         e8:73:ca:af:fa:fc:7a:f0:50:a2:69:ee:bb:54:69:bc:ba:d8:
         12:08:6b:e4:23:ca:04:49:c6:da:c9:8f:64:91:98:02:6f:c3:
         72:84:b8:b4:6e:46:7c:c7:97:27:d4:9d:2a:73:19:e4:3c:42:
         3f:af:6c:fb:df:61:9d:31:97:b0:7e:1a:30:de:28:74:f7:56:
         a1:cc:ae:7b:1c:79:85:9a:cf:c2:d7:89:61:b9:9c:bc:04:85:
         32:56:c4:3f:6b:c2:63:66:ab:89:55:cd:14:48:59:8e:0b:03:
         87:41:62:eb:98:5c:18:34:2c:f0:86:36:5d:c3:3d:06:3e:c2:
         10:17:4a:37:c4:66:92:a4:b4:07:dd:80:bb:0c:b0:d4:9b:fd:
         7b:93:37:f9:58:bb:ee:74:17:31:52:b5:14:1c:66:75:e0:f4:
         e7:83:26:cc:68:00:bd:af:ad:c7:53:c9:2c:14:20:95:14:2b:
         fb:c7:81:70:de:d7:e4:1f:8d:be:36:80:4b:94:39:b6:84:aa:
         1c:e5:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:47 2026 by rpki-client