This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
File:                     5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json)
Hash identifier:          U7JXmaTE1XpkIj4pxZWpaFtrkbOhmzlVebLYCbQTbCo=
Subject key identifier:   2A:B1:96:63:F5:5C:77:8B:0C:3E:AB:78:9B:61:69:3F:1D:7B:E7:E4
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Certificate issuer:       /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial:       019C43C6AAE38D4DB7F76B6D1243C76E9BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
Manifest number:          0FAE
Signing time:             Mon 09 Feb 2026 19:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:19 +0000
Files and hashes:         1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: 9ScaNG+8PRmDAd1S6KhP9tjUCu8zSoSdhriaFyICW88=)
                          2: uFf4NNFgYfbPreMK1NPSq7P_y9s.roa (hash: aCoqG0RsQJOyf3YmgdPoSCd4+nQQ0ofT4kMRhG0IKVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:aa:e3:8d:4d:b7:f7:6b:6d:12:43:c7:6e:9b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
        Validity
            Not Before: Feb  9 19:00:19 2026 GMT
            Not After : Feb 10 19:00:19 2026 GMT
        Subject: CN=2ab19663f55c778b0c3eab789b61693f1d7be7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:65:02:9c:f5:29:d9:f1:8a:48:e0:fe:96:
                    20:dc:5b:15:f5:4d:5e:a7:44:8b:67:fb:20:c2:d5:
                    c3:66:ba:54:2f:28:c1:1a:03:91:44:05:c1:55:ec:
                    2a:c9:e1:a5:9a:39:45:5f:cf:d5:39:85:c8:27:ea:
                    c3:d0:d2:99:d5:b4:3c:a1:e1:00:30:d4:6b:b6:63:
                    63:e8:86:02:f2:a0:07:06:34:7c:92:27:1d:20:41:
                    ba:09:74:60:a8:32:5a:42:11:b2:e1:27:26:7a:9a:
                    e8:e0:47:1c:91:b6:7a:fc:9e:63:1f:b2:ec:7c:72:
                    65:0c:64:29:34:00:f4:ea:87:d9:92:19:32:40:31:
                    9a:21:5a:ed:fa:18:7a:9c:e5:8d:31:69:4a:5e:e4:
                    eb:c2:2c:a2:8b:8f:82:f5:c6:4e:c4:0a:86:20:06:
                    b9:a4:d7:bb:0a:5e:99:c8:a9:33:40:92:37:c2:37:
                    f8:5e:7d:4a:ff:5e:63:e6:36:53:e1:46:99:ad:60:
                    38:d6:0a:5d:50:bd:5c:96:86:2f:f8:d8:29:e2:c9:
                    5f:fe:d2:d6:36:11:b8:5f:ed:3e:73:ad:31:ed:b9:
                    c2:a7:2c:48:2b:4f:e6:22:a2:ae:d4:7e:11:1f:6e:
                    65:f9:f9:2d:14:ad:57:a6:38:50:a6:63:65:cf:ee:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B1:96:63:F5:5C:77:8B:0C:3E:AB:78:9B:61:69:3F:1D:7B:E7:E4
            X509v3 Authority Key Identifier:
                keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3f:85:6c:b9:15:c1:94:d5:d6:3b:a3:16:b4:e2:98:d8:c6:
         45:dd:ba:58:17:0c:07:66:bf:b5:d0:12:bb:3d:17:c8:36:5b:
         46:16:8c:0f:d4:38:1f:eb:c9:c8:a0:d0:76:9c:47:d7:0c:b3:
         ad:46:43:ad:d9:bc:64:73:78:df:d1:ba:2e:94:c3:0d:8a:a7:
         c6:81:01:26:89:1e:59:12:b6:d1:be:b6:46:99:dc:7e:27:0d:
         b7:5f:af:4b:62:97:1c:be:de:4f:da:7d:4b:70:9d:cc:ac:0e:
         74:20:02:b6:3b:d8:13:69:29:69:dd:bb:99:54:a9:3b:1a:0b:
         73:7f:5c:bf:ea:5e:2d:e8:c9:80:c9:9b:88:c5:da:1a:bc:38:
         a5:ad:15:fb:05:88:34:bb:0e:df:f9:d9:d0:5d:a9:7a:95:2b:
         9b:4c:de:25:04:7d:17:06:4d:dd:65:1c:c6:76:0c:3c:78:f0:
         54:dc:10:01:e9:f4:78:06:46:d2:4f:58:9e:64:37:00:50:47:
         54:0f:a5:04:0d:60:6f:7e:de:49:86:ed:d7:4f:b0:81:57:5b:
         07:0c:84:3c:e6:13:8c:5e:c0:ce:ec:01:4b:ea:46:3d:d5:fe:
         a3:96:38:84:19:82:52:c4:99:31:6d:65:71:de:4f:82:85:d0:
         01:34:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:18 2026 by rpki-client