This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File:                     5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier:          IDrXTsze7j7eNq/VJhvc99KD0OozKCy2LpcnnwODnbU=
Subject key identifier:   25:2A:A3:12:95:49:EB:0B:C5:BD:20:CB:71:5C:6C:F2:8E:97:FF:98
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer:       /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial:       019C44A2DA77340365982594973489FD9E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number:          0DE2
Signing time:             Mon 09 Feb 2026 23:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:49 +0000
Files and hashes:         1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: o4xnz00G9GU9fdJ/WPlUijnhN6RM1lPnlayUjNXZsFk=)
                          2: vPg4rxX1m6skDbDCiDcsAk0EFcs.roa (hash: YJ2se2VyY3agIp8kMLK7ttHHu7VzNPvUoX36Tb1G48Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:da:77:34:03:65:98:25:94:97:34:89:fd:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
        Validity
            Not Before: Feb  9 23:00:49 2026 GMT
            Not After : Feb 10 23:00:49 2026 GMT
        Subject: CN=252aa3129549eb0bc5bd20cb715c6cf28e97ff98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:91:ba:9f:fe:cb:c5:ab:6b:e1:10:fd:ce:
                    17:4e:c8:61:e9:b7:82:e7:c7:ce:d7:9a:4d:d7:93:
                    d2:b7:92:54:b6:0b:07:31:b7:83:78:5e:4b:5d:df:
                    5c:b4:9f:c9:68:59:cd:0f:e5:4a:88:25:ff:3e:81:
                    d9:d5:dc:12:20:61:5b:ac:47:41:97:08:5f:26:71:
                    17:9c:c0:d5:41:04:e8:e1:8e:f8:0e:18:d7:f2:8f:
                    ce:8a:8c:cd:fc:3e:2a:31:f9:ee:2a:53:d5:6c:73:
                    2f:c1:81:c9:76:49:6f:89:24:b5:49:7a:95:26:58:
                    86:31:82:4f:fc:5a:60:7f:e0:05:6b:8f:33:c4:c5:
                    94:47:89:38:e6:6a:b5:99:2e:6e:55:e5:2c:59:a7:
                    23:60:94:0d:d8:a8:b1:7a:fe:62:ac:4a:e4:a6:78:
                    70:ae:d9:4f:69:96:53:d4:8d:09:68:bf:60:64:2f:
                    c8:79:30:b3:29:6d:7d:4b:72:1b:65:11:4f:75:d2:
                    e2:23:21:b5:77:43:44:8c:c6:ea:17:8b:9a:bc:39:
                    4c:f3:db:0e:f8:04:1d:79:7a:8b:fe:0a:b5:c8:6a:
                    30:d3:e0:15:96:50:ee:58:d7:b4:38:e8:61:38:03:
                    a6:20:d4:7d:6f:82:38:b6:70:8d:db:32:1d:a2:e9:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2A:A3:12:95:49:EB:0B:C5:BD:20:CB:71:5C:6C:F2:8E:97:FF:98
            X509v3 Authority Key Identifier:
                keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:10:18:cd:e1:49:56:6a:0b:ca:7e:02:74:64:53:57:4b:ee:
         53:64:50:e3:86:8d:98:91:ba:c9:be:12:ea:0e:ba:96:15:56:
         12:22:b7:5e:00:0c:5f:cd:6a:b9:73:34:5d:a1:eb:03:6b:0a:
         6d:c1:02:3c:66:74:4a:24:c9:63:94:47:33:35:48:9e:8a:6c:
         8a:00:5e:19:21:e2:a0:65:55:04:42:c7:59:5d:93:86:60:b6:
         32:64:90:5f:d2:c8:8b:85:f0:2a:4f:7b:e5:4b:e9:a1:58:ae:
         c9:ee:fa:33:b1:3d:17:71:b4:c5:a2:cd:0a:2e:72:a4:39:67:
         9f:f8:c7:32:89:d9:3a:20:a4:8e:99:c0:c8:48:16:e7:dd:1e:
         c9:d2:40:a4:3a:36:e7:98:df:f0:24:10:27:00:3f:82:bb:a7:
         2a:c8:c1:57:54:15:8c:e1:13:f7:cf:0f:b3:5c:22:ba:ef:83:
         bd:41:d2:12:48:17:22:a9:47:7b:c2:57:e0:c9:bb:92:2e:81:
         6d:3d:79:ee:e4:5e:2f:07:2f:0f:c3:35:d4:78:d7:c0:88:e8:
         b1:60:9e:db:5e:69:29:14:ae:14:28:00:62:3e:4f:3b:a0:80:
         48:ac:0d:c7:e5:23:3f:d6:e7:e0:de:8b:5a:cb:51:18:f8:ae:
         23:4f:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:37 2026 by rpki-client