This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          auzsvmx8b6GXH+SWtcJajFPKV1T56K40VAMJh/iOLyA=
Subject key identifier:   CD:FA:CD:77:8C:C1:5E:F4:76:93:C2:FA:B8:99:AE:4E:74:B1:C5:50
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       019C43C6DE7062A7411733066BE21DAF06DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          181C
Signing time:             Mon 09 Feb 2026 19:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:32 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: cxUeAjCVZVd0LY4hPLfzwaMlBJTpkQ1EjiyISniApgk=)
                          2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
                          3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
                          4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
                          5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
                          6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
                          7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
                          8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:de:70:62:a7:41:17:33:06:6b:e2:1d:af:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: Feb  9 19:00:32 2026 GMT
            Not After : Feb 10 19:00:32 2026 GMT
        Subject: CN=cdfacd778cc15ef47693c2fab899ae4e74b1c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:68:db:24:ce:3b:51:56:34:46:94:05:fb:
                    f8:c3:03:17:97:c9:ca:af:fe:39:86:f9:b2:95:fa:
                    6e:9c:fc:d6:bb:41:8b:ab:bf:8a:c2:37:ef:32:d9:
                    cb:26:0a:80:d1:32:66:8b:ba:3c:fa:ab:b2:1d:a6:
                    2f:9f:b3:f7:7f:a8:ce:6c:fd:85:4f:92:0e:8e:7d:
                    78:19:e3:fa:88:81:f9:ab:a2:66:65:52:24:1e:a5:
                    c5:b7:28:86:6a:11:1f:b5:6f:b4:77:c1:b1:ba:15:
                    27:7c:14:74:c7:b0:43:01:2e:a5:1e:8b:09:98:51:
                    03:74:3f:9f:0b:71:42:80:a4:de:2f:ad:6e:2c:98:
                    50:14:e6:8f:41:14:41:89:02:5b:18:87:1d:30:29:
                    75:dc:d7:63:a1:8e:ec:ac:15:cd:8a:f4:c0:c2:d5:
                    c0:fd:cd:59:b4:d4:99:b7:8e:48:d5:90:52:15:db:
                    29:26:e1:89:11:35:9f:0e:75:f9:52:85:7b:34:d5:
                    ae:23:c3:a8:5b:05:b2:3c:bc:ad:b9:9a:03:2d:45:
                    93:2b:fb:c8:15:c4:18:ce:8b:85:68:4f:8b:7a:4f:
                    90:5c:9c:9e:a1:d1:0a:7b:c7:d4:c4:55:be:3b:8a:
                    33:a0:3e:48:7b:a4:7e:7d:f7:0b:a2:ed:46:1c:33:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FA:CD:77:8C:C1:5E:F4:76:93:C2:FA:B8:99:AE:4E:74:B1:C5:50
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:e2:03:d2:29:21:b2:b1:4e:c9:9a:ae:d6:0c:af:96:68:
         d9:1f:9d:0e:a2:2b:13:c0:ee:f3:23:11:77:12:e4:b0:2b:23:
         18:b7:e9:f4:95:45:06:00:7a:06:a2:59:a4:0b:ef:87:f3:6e:
         2b:17:df:7a:93:38:b8:42:cc:9a:21:a5:eb:bb:7f:20:db:f5:
         88:61:5f:db:22:12:be:f0:b8:35:79:f0:06:4b:a0:d1:84:60:
         14:ad:6c:a9:2b:23:b9:43:04:8d:54:71:f8:46:39:89:9e:6e:
         26:c2:fb:df:98:84:4e:2f:69:80:07:e2:04:e3:e7:89:32:55:
         81:04:99:ff:e8:29:31:57:1e:c3:8e:1f:79:03:61:b8:6e:aa:
         e8:74:16:c4:f1:e6:a0:77:27:ff:89:28:bb:03:39:26:b7:fa:
         f4:0f:56:7c:9a:49:9d:29:8e:5d:5b:6e:ef:ad:2e:54:63:ad:
         2a:4b:5b:97:6c:65:0e:59:f7:71:42:35:45:27:6c:75:c8:d6:
         94:b5:f2:35:d0:fa:0c:60:c3:04:11:64:8a:e7:3d:7b:23:c0:
         bb:5f:b7:fc:bb:88:75:5a:e6:8c:86:26:55:0f:a2:cc:ff:d0:
         f4:98:81:24:0f:ae:4f:59:fc:cc:84:d4:da:a1:59:b1:bb:60:
         c0:92:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:46 2026 by rpki-client