This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          FY8WDq/8Cw2KBAxo84JTLG+Md400GtvuUkC8PNoMObQ=
Subject key identifier:   04:04:F2:59:4F:5C:B5:C0:A8:E3:60:2A:CB:1F:A5:39:18:9B:2B:4A
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       019C4322A16C1C724A9E7DD165E792451C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0ED0
Signing time:             Mon 09 Feb 2026 16:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:08 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: Bw4sojQRSn7kakqKJ9UMd1wBCYTqzIJdLl3KcEQgTxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a1:6c:1c:72:4a:9e:7d:d1:65:e7:92:45:1c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Feb  9 16:01:08 2026 GMT
            Not After : Feb 10 16:01:08 2026 GMT
        Subject: CN=0404f2594f5cb5c0a8e3602acb1fa539189b2b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:f3:84:2c:18:3c:72:ef:26:28:31:fb:37:
                    7d:6d:49:6d:94:e9:e2:db:15:da:86:04:a9:70:3a:
                    ef:ce:c4:df:a0:9b:4c:63:10:95:92:3e:b4:65:2f:
                    6c:0c:58:a5:cb:f3:51:75:48:32:f4:d6:a8:d6:1d:
                    76:66:fe:ad:44:96:fb:d8:fb:e8:9a:8b:f5:48:17:
                    e4:2d:91:72:97:49:82:27:19:4a:e3:2e:28:e8:9e:
                    ad:92:e1:c0:08:76:36:e3:92:77:14:55:c7:b6:1d:
                    2d:fd:34:fa:1b:2a:04:4c:e0:a7:36:b3:dc:bb:10:
                    6e:ca:02:8c:f7:4d:75:06:6b:4a:00:fc:42:de:e0:
                    e2:8d:90:e0:00:e1:9b:69:24:7c:7e:bb:8c:3d:09:
                    52:54:bb:82:3f:76:85:88:44:48:69:72:3d:e1:c0:
                    6f:f2:db:93:8d:43:d5:da:1a:d6:ca:20:73:2b:3d:
                    9c:9b:29:51:5c:9c:f1:19:ca:8b:b4:43:ca:31:86:
                    69:01:fa:22:ed:b0:f9:32:46:1b:d9:08:e9:a3:09:
                    e2:b1:4d:1c:4c:0c:68:70:49:92:cb:4d:cc:91:0c:
                    b2:85:5a:8e:7a:ea:25:f1:af:b6:80:11:88:c6:e5:
                    82:17:13:b8:60:9f:55:8d:9c:92:fc:47:e8:e7:54:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:F2:59:4F:5C:B5:C0:A8:E3:60:2A:CB:1F:A5:39:18:9B:2B:4A
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:8a:7c:d5:45:ca:df:3a:9b:51:79:31:af:e0:42:ee:1d:
         36:9b:b2:72:01:b1:18:f6:e1:db:eb:42:e8:3f:9d:af:ce:78:
         2d:8b:82:cd:21:09:1c:9a:e0:68:e1:92:b8:f0:73:d8:22:62:
         8b:92:f9:c5:77:ec:20:b6:b3:05:8a:ff:0b:b1:14:c0:c5:60:
         f3:cd:e4:e5:db:6a:c6:ec:77:06:9c:9f:e1:71:75:b1:6d:a5:
         55:60:53:c5:76:17:73:2f:f3:07:e5:1b:41:eb:c3:aa:64:23:
         3c:ab:88:5b:db:3f:c8:43:db:65:7e:18:af:6b:5c:93:e0:f3:
         bc:ad:4f:9d:bc:60:8b:cf:2b:27:b4:63:9d:6b:e0:fb:77:d9:
         7d:30:f9:a8:56:19:bb:f2:99:68:f9:06:38:61:62:ac:31:8f:
         35:8a:a4:c1:a4:8a:34:a6:f0:bf:69:05:a7:b1:2b:a1:6f:f9:
         78:9c:d3:11:28:a5:4c:31:64:ab:c6:c2:dd:58:86:46:6e:86:
         c9:f8:5b:d9:bf:d9:03:71:27:9f:cb:ff:46:a3:4d:75:0c:f4:
         7a:7b:0b:9a:31:8a:fb:d3:25:a2:77:b5:08:33:9e:be:a3:07:
         9f:fd:f4:ac:d5:1c:3b:dc:c5:be:e6:26:51:ff:c9:b6:72:19:
         a1:56:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:43 2026 by rpki-client