This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          GUT/fJ/WDOqOm7q1l9BjRht724KOWWpK2U4v5tea69I=
Subject key identifier:   26:1E:09:B1:F0:88:B9:08:B5:10:B0:77:F1:91:89:09:07:6E:90:C2
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019C4510F65878358B249A2D1D028EF69A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          1085
Signing time:             Tue 10 Feb 2026 01:01:05 +0000
Manifest this update:     Tue 10 Feb 2026 01:01:05 +0000
Manifest next update:     Wed 11 Feb 2026 01:01:05 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: IpBVQBgThJG0cAIaU9w8AHsuKgBEmlP9d2jZgd1uM68=)
                          2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:10:f6:58:78:35:8b:24:9a:2d:1d:02:8e:f6:9a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Feb 10 01:01:05 2026 GMT
            Not After : Feb 11 01:01:05 2026 GMT
        Subject: CN=261e09b1f088b908b510b077f1918909076e90c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:f4:85:36:01:6a:72:d7:c4:8c:71:89:47:
                    96:bb:c8:a7:73:ba:2e:0b:35:98:aa:a2:7b:3d:81:
                    18:0a:9d:1a:d6:c6:3b:c4:27:71:c2:98:e3:5f:05:
                    e2:dc:8e:ad:3e:dc:98:07:d8:80:78:5a:b7:eb:9f:
                    e8:3a:e0:74:57:16:b3:a5:8c:95:fb:ba:71:37:91:
                    14:27:8b:8b:36:9e:99:eb:9c:0b:63:d0:75:cb:fe:
                    c3:f5:fb:37:43:01:52:b7:4d:e6:22:0a:d1:f6:c7:
                    45:88:7d:f2:1a:05:69:ca:6c:14:0f:f7:cd:a2:6e:
                    eb:86:71:c7:88:01:39:a7:0c:14:2d:6c:2d:51:90:
                    92:da:25:c8:bb:94:55:bd:0f:7c:12:56:08:a7:25:
                    77:a3:76:f1:6a:6e:a6:aa:e4:fa:16:b1:65:9b:7b:
                    28:ad:7a:6a:4d:cf:ea:15:d3:a8:52:9b:5e:c5:06:
                    bf:93:6e:1b:1b:d4:85:db:61:6a:84:3d:18:a2:bd:
                    de:84:f4:53:e5:24:45:3b:5a:39:22:a5:e1:71:93:
                    9f:ae:db:62:fa:94:dc:9a:0c:96:9d:a2:e6:12:d3:
                    fc:de:09:cf:36:9d:20:f6:af:7c:57:e1:33:6c:62:
                    85:8e:55:d1:2a:1b:13:6e:57:30:b6:9a:23:f6:95:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1E:09:B1:F0:88:B9:08:B5:10:B0:77:F1:91:89:09:07:6E:90:C2
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:68:51:c6:f3:87:9d:47:0e:4a:fb:76:61:34:7d:55:37:
         17:f1:a3:75:bc:52:be:3a:85:15:81:62:70:ae:9e:04:af:63:
         1c:41:68:5b:c6:4c:ee:24:9a:61:6b:5a:29:7d:cd:78:42:55:
         e3:77:71:d3:eb:ba:17:14:5e:1a:e9:ab:7d:83:53:1c:9b:33:
         9e:d4:2d:60:27:a2:0f:89:bd:e4:cf:56:67:c6:16:6a:87:12:
         cc:71:fc:43:0f:60:d6:a3:68:08:30:48:7e:60:9d:ea:aa:37:
         fa:2c:7a:fb:81:13:24:c1:24:45:c6:8b:3c:4c:1e:aa:df:be:
         ef:e1:29:d8:29:7a:fb:33:00:0c:b0:9e:a5:3b:7c:bf:75:b7:
         b2:ff:f1:0d:3b:ae:8a:38:bc:f2:0a:b5:73:03:e2:21:7a:97:
         d0:c6:55:a1:77:e6:d7:a8:7e:c2:ea:27:a6:72:a8:74:88:54:
         39:ba:1e:08:b9:69:ff:af:2d:39:8b:f5:ae:94:9d:3c:7d:7a:
         c5:3a:cd:68:c3:91:91:e6:01:74:21:fb:e3:06:b6:ef:ee:93:
         96:0f:71:d7:c4:55:af:73:a5:da:18:19:33:92:2f:91:f1:c8:
         1e:79:39:fe:1a:84:0b:27:e1:5d:1a:3f:da:74:65:54:68:cf:
         04:c0:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:31 2026 by rpki-client