This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
File:                     5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json)
Hash identifier:          y6Cm0ifQfQ3DlRxLrYbliX2ICYRjStz4s38FJzlx5Pk=
Subject key identifier:   02:6B:C4:41:64:04:33:B0:4B:EE:F3:70:41:58:D1:8C:33:57:DF:59
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Certificate issuer:       /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial:       019C427D6ED4A25F9845C5E640CB99EA2713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
Manifest number:          14A3
Signing time:             Mon 09 Feb 2026 13:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:42 +0000
Files and hashes:         1: 2FfewzchtBOlT_1-bM1KbwVEptI.roa (hash: XCreExSvtYmion6efW1Ds82lk+nlI9Ef/9JOGZG0IwY=)
                          2: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: Ac7iYQofZ44xms/Xeom/+Wf3CvTg3YO5FZMexksQ7NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:6e:d4:a2:5f:98:45:c5:e6:40:cb:99:ea:27:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
        Validity
            Not Before: Feb  9 13:00:42 2026 GMT
            Not After : Feb 10 13:00:42 2026 GMT
        Subject: CN=026bc441640433b04beef3704158d18c3357df59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:6d:ee:1d:ba:e8:fc:51:f0:3f:b6:ac:a0:
                    a8:b3:80:39:54:bd:39:f4:f0:67:a7:6b:a8:8a:78:
                    e3:c7:80:ae:9d:eb:0d:96:7d:39:01:19:03:06:1a:
                    db:f1:ed:ab:8f:77:b1:9c:e3:dd:f4:e8:e6:4f:ba:
                    19:fe:96:81:26:2e:7f:87:3e:81:bb:3e:7d:bb:1a:
                    4f:2c:4b:ec:52:e3:30:3e:ba:e1:9d:fe:ce:01:e7:
                    d1:f5:b4:2b:e3:28:ad:18:4b:10:f5:c3:3e:a6:88:
                    03:53:0b:ff:b4:a3:b4:6c:f3:45:be:d0:32:cb:78:
                    b9:47:b9:ea:eb:3d:dc:35:e8:c4:bb:44:a2:0d:36:
                    42:92:2f:f7:3d:07:ff:55:71:5a:e0:37:d0:47:ca:
                    2a:e3:de:09:3b:2e:48:a7:2b:c0:6e:8c:c4:85:86:
                    b2:1b:70:8c:2a:08:3b:28:cc:ad:9c:51:21:78:cd:
                    45:28:da:bd:9e:81:4d:95:03:97:20:ba:ae:e3:1e:
                    6e:0d:21:9d:07:94:32:e3:00:01:14:9c:5e:f3:3a:
                    c3:e2:8c:4f:75:5c:a9:a3:39:52:68:8b:92:85:52:
                    f2:dc:4a:c1:c2:ab:b2:1d:28:06:93:bd:b7:84:d3:
                    8d:e4:ff:90:66:3c:54:7e:a7:da:ff:32:5f:b7:68:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:C4:41:64:04:33:B0:4B:EE:F3:70:41:58:D1:8C:33:57:DF:59
            X509v3 Authority Key Identifier:
                keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:28:a6:16:86:93:f9:a0:6b:21:08:53:d0:1e:6a:9e:e7:
         c9:1c:93:1a:a5:8f:17:fa:9b:8d:56:87:32:39:73:7a:aa:67:
         08:0d:7a:0f:9c:8d:60:9f:f9:9c:ee:6d:40:a3:4d:1d:2d:dd:
         de:14:df:b0:67:1b:76:e7:bc:ab:23:7b:36:48:bd:c0:f8:82:
         0c:95:a6:50:78:da:55:95:48:48:9f:b7:77:90:ce:be:01:75:
         09:05:a5:89:08:e5:0c:02:a7:9d:1b:31:e7:6c:fd:6e:07:1c:
         bb:7c:45:3a:e9:b5:af:7f:eb:75:2f:fb:a0:ea:52:21:78:ef:
         5f:21:e4:cc:e1:c6:4d:23:02:4e:62:c3:46:e8:7b:e2:84:f2:
         f7:b8:d7:dd:aa:dc:2a:b2:ae:33:8e:b1:bb:a9:ca:ee:0d:1b:
         4b:4d:0a:27:61:49:91:75:92:2e:e0:84:74:bd:3a:77:0e:bb:
         2d:a1:38:2a:19:80:cf:21:d6:56:ef:8b:6a:81:6b:69:5e:61:
         f0:29:24:33:ec:35:4c:c8:9c:ae:32:f0:81:a9:b2:f6:ca:1b:
         fd:91:66:3c:a0:64:05:1f:36:33:02:e2:2c:87:e3:95:06:d4:
         0f:ba:a4:e0:08:07:e9:52:42:a8:e7:ca:96:69:7e:ee:a4:57:
         3f:6c:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:49 2026 by rpki-client