This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File:                     5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier:          Cxy/6sKxPONV1S4tyCQZUr+Jv4LVPgh/RDqWeEdCyAs=
Subject key identifier:   45:A1:17:B6:82:91:B0:A5:9E:25:10:47:04:9B:50:6D:FA:8A:08:B9
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer:       /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial:       019C420FDDCD999DF81A7C87B78C03B1266A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:01 +0000
Files and hashes:         1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: LMg5aBguQxFdcK0DtIJENMnLvs+PNP5+a5LrP79OC6c=)
                          2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
                          3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:dd:cd:99:9d:f8:1a:7c:87:b7:8c:03:b1:26:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
        Validity
            Not Before: Feb  9 11:01:01 2026 GMT
            Not After : Feb 10 11:01:01 2026 GMT
        Subject: CN=45a117b68291b0a59e251047049b506dfa8a08b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:bb:0f:58:b9:49:15:61:3b:bd:dc:c7:8c:
                    69:60:66:45:78:4d:3b:22:53:af:58:a8:7a:b5:69:
                    22:f7:3b:6f:02:76:c3:5e:7d:61:8f:fa:d8:3c:2e:
                    3e:88:d4:11:57:6a:bf:17:97:f6:a7:d3:12:bc:e4:
                    8e:90:e0:04:d3:19:35:22:b9:d8:c1:2c:87:67:f4:
                    a5:36:2e:19:86:0a:0a:f7:0c:0e:f3:16:9d:da:ca:
                    49:86:68:6b:22:4e:79:fb:64:07:65:14:77:71:ba:
                    56:c3:fc:ad:a7:6d:c8:e7:55:cb:06:c6:e0:d3:e4:
                    6e:4a:20:15:41:0a:34:1c:38:3e:b1:5a:04:39:fd:
                    c3:d1:8b:40:f3:da:e1:31:63:cc:27:47:4e:1a:fd:
                    7e:e5:0d:c0:96:fa:c6:a0:4c:ca:73:b8:ec:cc:8b:
                    54:57:c8:1d:b8:af:b4:a0:1b:fc:f0:da:ed:9e:c4:
                    50:f1:31:3e:66:cb:af:31:dd:1a:73:49:ef:5c:b0:
                    15:2e:34:2c:b1:90:91:ba:2e:71:34:bd:d1:3f:41:
                    d1:a0:8b:cb:29:28:7b:47:a7:c2:36:b3:f0:44:60:
                    b3:0f:ff:fa:7e:95:95:88:05:82:3c:59:46:4e:18:
                    6d:7c:e7:44:28:a3:e9:24:d1:79:c8:ef:ea:9f:71:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:17:B6:82:91:B0:A5:9E:25:10:47:04:9B:50:6D:FA:8A:08:B9
            X509v3 Authority Key Identifier:
                keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:85:33:1e:d5:ad:78:a1:df:1b:49:de:5b:f2:a7:62:54:
         98:e3:77:04:aa:d3:75:ef:c1:6f:da:65:30:a0:bd:00:e2:06:
         98:74:60:c1:d6:76:0e:0a:88:03:2e:f8:9f:d7:7a:ba:9c:d7:
         a9:21:97:4d:6f:18:25:e9:cd:82:95:5e:6c:fd:52:5d:fc:40:
         39:04:47:4e:a0:14:af:22:0f:55:87:73:c7:a2:fa:cc:33:c1:
         d8:96:bf:0c:3d:01:44:b0:5b:84:9a:cd:cd:03:9e:fd:86:50:
         24:71:1d:4a:c6:70:fa:87:da:d2:86:6c:d9:12:d6:bf:73:12:
         67:0c:1c:77:ad:ce:9b:62:51:4c:cc:e7:5c:6c:e2:97:32:8d:
         e2:c3:07:2d:85:f6:44:e3:be:0b:b3:97:4d:e1:8b:9f:b3:be:
         be:f1:3d:1e:3e:9a:ad:5d:c7:0f:f7:19:cb:1b:90:7d:ab:75:
         67:5c:0a:b9:9a:65:4c:b9:d9:52:2c:b0:69:e2:4a:46:1f:df:
         e4:4d:46:02:34:e4:e4:5f:03:de:71:7d:ba:5a:be:27:f5:35:
         2f:4c:61:45:11:a1:95:df:60:d2:7c:fe:c3:f9:4f:1c:5d:bf:
         c7:b7:ac:29:ab:2c:6a:f5:26:fc:42:1d:19:6a:d9:69:87:22:
         cc:f8:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:31 2026 by rpki-client