This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File:                     5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier:          LZM6ZcelQAMPX6HmwXNk/xXykXvh6JfsAtratB7NRMI=
Subject key identifier:   89:D2:43:D2:D7:8C:0A:53:62:F1:5C:5B:1D:62:C4:B6:7C:C2:60:CC
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer:       /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial:       019C2698EB68FE42DA799DDB560404BDFBF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number:          0EBB
Signing time:             Wed 04 Feb 2026 03:01:21 +0000
Manifest this update:     Wed 04 Feb 2026 03:01:21 +0000
Manifest next update:     Thu 05 Feb 2026 03:01:21 +0000
Files and hashes:         1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: XOLOgVm/rqwA3P/D4hLS4qgz6VIyP9hqoLgWhnpH9bs=)
                          2: JB8RpMy8Elqc90uZwoSTL7Ub9OM.roa (hash: EhChNPxJv+f83uqvMXFZRPaKproZQgsDNAIW+MBK7d0=)
                          3: iRQgfXGareNueuLCIctR3v98BqA.roa (hash: kAKY6Tag+JlVYUh6YTHrUL0leqbQ2DPtbgkhBL53tDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:98:eb:68:fe:42:da:79:9d:db:56:04:04:bd:fb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
        Validity
            Not Before: Feb  4 03:01:21 2026 GMT
            Not After : Feb  5 03:01:21 2026 GMT
        Subject: CN=89d243d2d78c0a5362f15c5b1d62c4b67cc260cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:c4:f2:bc:60:0c:19:56:aa:36:1f:25:93:
                    80:90:df:5a:7d:b7:a4:48:4d:47:25:f0:15:8d:3e:
                    10:96:13:37:dc:27:1a:98:10:30:3b:ae:ba:1e:2a:
                    b6:79:8c:0b:c9:5c:92:b0:cc:c5:9d:70:ab:6b:c3:
                    ae:00:87:8c:9f:44:22:5f:95:9c:2b:c7:e2:d4:d5:
                    3e:70:7e:7d:ff:7d:21:48:fc:a3:ed:25:4b:ac:7e:
                    bb:3a:96:6b:80:c1:a7:41:f9:d5:5a:90:3d:7d:2b:
                    14:07:25:88:4c:1f:43:bd:8c:73:53:61:82:05:20:
                    31:f6:38:72:78:b1:f6:a0:e5:a5:45:20:63:7a:e7:
                    37:12:d5:52:e8:b6:fc:11:c1:94:a3:68:ed:c0:3e:
                    fd:0b:2e:e3:f2:ca:89:d1:43:36:f5:d3:14:2c:4d:
                    ae:07:a4:eb:0a:73:02:b3:04:04:45:33:62:21:65:
                    97:c3:0f:2d:5f:94:77:4e:c6:4e:fc:3a:2f:04:a6:
                    27:91:15:52:b0:ac:de:e8:12:60:2d:a3:db:82:6e:
                    8e:24:04:ec:0c:9e:89:fa:1b:bd:e6:f4:01:a8:ee:
                    1c:ba:00:cc:88:84:1e:fd:94:70:75:ed:12:b9:a9:
                    65:54:43:aa:93:db:5a:ae:37:75:03:50:61:6a:51:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:43:D2:D7:8C:0A:53:62:F1:5C:5B:1D:62:C4:B6:7C:C2:60:CC
            X509v3 Authority Key Identifier:
                keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:50:89:37:30:c1:b7:2d:72:b5:01:4b:35:4f:f5:5c:e7:
         be:a5:ea:73:86:ce:5b:4b:f8:87:a9:a6:74:90:f7:de:e6:9a:
         48:e5:13:ee:a0:b2:37:dd:a8:79:d9:3f:64:13:22:9e:92:53:
         ac:94:f0:a0:e3:c6:df:47:6a:5f:51:d4:3f:ca:06:e7:27:47:
         ec:19:d3:7b:b0:71:8f:98:af:92:42:f5:de:2a:63:5e:03:57:
         20:0c:72:d5:06:de:c4:f7:80:6c:a7:f1:8d:6d:7a:14:b1:43:
         22:65:45:26:c4:68:eb:c7:a4:2a:20:d8:5e:c1:20:37:b5:f4:
         07:f6:16:dd:30:80:9d:90:b1:e4:89:43:39:0a:ab:bb:2f:60:
         c8:6a:80:59:b2:e1:e4:3b:d4:1e:0d:74:b3:a7:aa:21:99:63:
         1c:84:12:2d:95:ff:5f:fa:9e:d5:9f:b0:5f:a3:6e:9c:55:2d:
         1d:e2:c6:39:61:7d:91:9f:f6:65:d0:cb:95:d7:95:12:08:bb:
         3a:e3:35:c3:c2:d4:86:c2:05:c3:1a:2c:8c:51:e6:e1:a3:32:
         5d:cd:6b:70:72:2e:14:8b:dc:0b:a1:bd:8f:a3:99:2f:5f:33:
         a5:a8:ba:53:0c:12:d9:d1:c0:a3:99:ec:bf:ae:ee:11:e4:48:
         77:24:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 08:30:29 2026 by rpki-client