This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File:                     5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier:          9HePbvAeuHgHT0e5ZY+UpjgN1l0vfxEDy5x6fCM0qB4=
Subject key identifier:   D0:25:90:65:B4:01:97:76:1F:64:52:CF:25:61:95:40:1F:03:DD:54
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer:       /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial:       019C446C2345B0BEA5D28F7360323979A680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number:          12A1
Signing time:             Mon 09 Feb 2026 22:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:03 +0000
Files and hashes:         1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: mjwSP/fmB7A9WuCXSnjmdfGoyx3QPYuL4jqyMQaQMt8=)
                          2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
                          3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:23:45:b0:be:a5:d2:8f:73:60:32:39:79:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
        Validity
            Not Before: Feb  9 22:01:03 2026 GMT
            Not After : Feb 10 22:01:03 2026 GMT
        Subject: CN=d0259065b40197761f6452cf256195401f03dd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:1f:9f:6c:65:ca:e8:71:71:f8:4c:46:f6:
                    be:69:f3:f8:a3:02:69:23:f1:23:6e:51:d0:5b:63:
                    a3:41:8e:ad:8a:fc:e1:0d:17:22:78:f4:60:6e:f1:
                    58:57:53:e3:f3:6b:2b:e5:9e:7d:29:b9:4f:ad:cb:
                    06:22:b2:5a:34:06:2c:e6:f4:69:75:90:04:33:28:
                    2c:c3:5c:a2:ae:c3:91:0d:b8:54:a0:c8:03:0e:35:
                    54:d2:de:b9:af:76:c4:52:dc:de:7d:a2:8c:a4:30:
                    ee:c4:ff:94:3d:31:26:00:21:41:b7:0a:c1:70:73:
                    7c:bf:0b:46:88:9c:83:e1:a6:df:6d:eb:88:b1:fd:
                    89:57:10:b8:c3:de:26:26:e0:24:e6:1f:38:2e:6d:
                    b9:59:e9:53:93:ef:f7:0a:8b:61:fe:fc:4f:8c:f7:
                    56:38:02:76:98:88:37:1e:6a:7d:07:5a:5c:8d:f6:
                    2c:38:dc:67:ad:d0:6c:87:6c:6f:21:4a:ef:cd:44:
                    9d:8d:0e:e4:de:62:dd:1d:58:21:aa:0b:cc:b5:58:
                    a8:d4:9a:03:4a:03:50:66:29:b9:0a:bc:f9:d4:07:
                    91:44:92:2f:5a:81:3e:55:8b:2f:19:57:b0:be:02:
                    5b:e6:5d:c9:a1:15:e7:99:39:86:13:c3:47:11:b7:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:90:65:B4:01:97:76:1F:64:52:CF:25:61:95:40:1F:03:DD:54
            X509v3 Authority Key Identifier:
                keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:27:74:a3:73:bf:7f:6d:87:38:af:5f:dc:6e:12:90:b5:2d:
         96:c8:e6:dd:82:c2:d5:c5:e0:cb:e0:27:2a:2c:34:d6:b4:66:
         cf:e2:f7:df:7d:b0:68:b9:81:6f:82:57:6b:8a:db:a7:88:af:
         2d:c5:a6:42:70:d9:35:da:46:36:22:06:5d:c7:d3:be:af:91:
         48:bf:13:94:b5:82:19:d0:88:3a:65:5c:bd:47:de:48:04:f5:
         e9:c2:fd:e7:f7:20:31:f6:c7:43:12:fa:dd:f5:76:8e:3a:1b:
         04:6c:55:2b:49:3d:fa:f6:da:a4:42:3a:50:a4:c4:3f:3a:c8:
         b7:b6:21:a0:cf:fc:1c:ac:7d:93:1f:89:4f:59:60:e5:27:37:
         c4:28:51:6e:f4:52:e1:bc:17:27:9f:65:8b:4c:0d:83:80:50:
         b4:dd:0e:92:c9:2a:60:e1:0f:d6:72:42:1a:6a:84:cf:98:68:
         09:a9:77:99:a4:d1:3d:99:82:92:9a:ed:09:e2:d7:52:7e:53:
         33:79:a6:fa:10:69:69:d7:13:41:a1:2e:12:01:16:a9:7f:cd:
         10:47:ab:f7:8b:93:48:07:e0:74:ba:b8:05:27:e5:15:18:9f:
         99:b4:e8:24:18:db:82:6a:55:5e:21:a1:37:cd:aa:23:16:62:
         8a:b3:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:12:33 2026 by rpki-client