This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File:                     5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier:          I00jk2qWUHEKKeU6lO8LvngYkhrXqKdaj7l3a5r5e6Y=
Subject key identifier:   C2:AF:DF:19:0E:68:65:48:7B:D2:2A:0A:5D:69:34:D2:A6:00:8F:3A
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer:       /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial:       019C438FEE0E87481AEE823C3F7454660249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number:          15A2
Signing time:             Mon 09 Feb 2026 18:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:31 +0000
Files and hashes:         1: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: qOKocWj/vymVWiucEwC8R6DWOxfrfGk5EjVw/GTx1E8=)
                          2: Wu9t7d9tnZW1AA2IWZCyVHCZEmo.roa (hash: kOHm2lN17Qca/qCn59+JS7mNSFFu2Gxe0p/zQAQ3878=)
                          3: ew282-AhNX4FMYFmo40ImlhZsYU.roa (hash: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:ee:0e:87:48:1a:ee:82:3c:3f:74:54:66:02:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
        Validity
            Not Before: Feb  9 18:00:31 2026 GMT
            Not After : Feb 10 18:00:31 2026 GMT
        Subject: CN=c2afdf190e6865487bd22a0a5d6934d2a6008f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:77:62:dc:11:63:cc:83:28:63:30:94:9b:
                    4f:49:00:47:53:94:be:b9:88:60:ed:37:37:69:6d:
                    ad:ea:aa:f5:be:f9:14:12:46:1d:c3:ae:36:2f:25:
                    77:83:78:33:a8:9f:3d:b3:c4:1e:3d:0a:46:a9:27:
                    15:7a:e5:b1:3e:d8:cd:91:51:6f:6f:a7:c5:10:c7:
                    50:7b:29:77:02:fd:3a:f4:58:0a:cd:3b:5f:48:20:
                    29:eb:da:f1:5a:94:3a:8f:28:63:9d:b1:d8:a7:25:
                    29:0d:55:51:0b:d3:a1:2e:cb:af:09:a2:3b:86:b0:
                    6f:c5:0b:29:54:74:b8:02:84:11:74:c5:97:9e:26:
                    70:92:4d:9b:88:cf:4a:c2:e5:02:9c:6e:2d:95:99:
                    24:4d:3f:3c:53:6c:bd:8e:c8:4f:2a:fd:13:fb:22:
                    44:fb:f6:a8:58:36:58:3b:4d:41:d7:75:09:0f:56:
                    28:81:b7:81:3b:d4:88:41:03:60:ff:ef:a4:40:27:
                    65:4a:9b:b1:7b:56:34:28:38:02:af:0c:5f:03:98:
                    0f:f0:22:17:81:fb:c9:51:55:3a:e4:22:2a:37:2a:
                    8b:27:9b:05:30:2b:94:4d:bf:25:07:22:d0:a1:18:
                    58:26:58:09:e3:e3:50:9a:89:80:c8:92:bc:eb:38:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AF:DF:19:0E:68:65:48:7B:D2:2A:0A:5D:69:34:D2:A6:00:8F:3A
            X509v3 Authority Key Identifier:
                keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:2e:42:ec:08:da:36:07:f5:e0:89:c6:0b:b5:b2:87:b1:
         03:66:c8:64:3a:62:3b:62:83:61:71:30:fe:13:98:24:01:9e:
         51:97:a7:a6:03:2b:0f:97:1f:15:b1:73:74:26:31:61:1c:eb:
         a3:b6:a8:32:61:a8:1b:44:7b:ac:5c:ba:7c:89:96:45:d2:a0:
         47:0a:4b:48:3a:90:c2:69:4e:c7:7c:6d:10:fe:ec:3a:26:8e:
         5e:57:ab:f8:5c:89:f9:26:41:bc:4a:78:29:70:f3:cd:36:44:
         51:34:8f:ca:3b:ec:c7:5a:d5:46:e2:2b:1a:94:5c:a3:a4:fd:
         c2:0f:2f:c4:3c:d3:d0:6a:84:c2:f3:f6:7f:da:78:4d:c8:81:
         bf:a7:7b:69:18:24:ef:ee:ac:38:fd:d5:1e:10:1d:bc:fd:a5:
         35:ef:cd:99:a1:da:16:ed:19:7d:17:3f:3a:4f:b5:32:a8:fc:
         00:a8:d6:f5:af:77:da:c8:97:23:a8:16:9e:69:eb:fa:b4:a9:
         14:28:99:2f:6d:3d:b4:3e:a4:03:66:f2:03:14:55:73:38:5a:
         2c:4b:b3:00:0d:70:4d:ca:fc:00:ef:55:d2:1a:75:8b:05:8b:
         2d:b0:4e:e4:97:e1:35:a6:a8:81:f6:ee:9f:8e:f9:da:7f:c8:
         07:44:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:26:27 2026 by rpki-client