This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File:                     5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier:          JgLR5jycF8EGccmnuAzEnjW+mCk6mlA2au3tmUsj3+k=
Subject key identifier:   EC:0D:15:FC:15:1F:91:F7:93:D0:5B:D6:83:38:9D:9D:51:92:82:29
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer:       /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial:       019C427D0BC3D3DA47A72359A0F0D7275FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number:          0B32
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: 0W0SKLf4tpUWuutxpWSC6LPsltul74iYRrJR9/8UpMQ=)
                          2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0b:c3:d3:da:47:a7:23:59:a0:f0:d7:27:5f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=ec0d15fc151f91f793d05bd683389d9d51928229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ba:9a:fa:13:29:b0:35:02:22:14:33:28:c9:
                    80:22:5d:3e:0f:cf:64:14:d4:04:8e:ab:7a:c8:87:
                    d4:9f:05:3a:28:3f:eb:9b:bf:c9:41:36:b1:5a:e7:
                    93:b7:0b:3b:66:43:e7:24:36:0c:92:7f:6c:af:e2:
                    93:9b:29:73:42:09:d8:1c:e5:df:85:6f:20:a9:8e:
                    61:07:53:b3:48:da:ee:da:69:3e:76:8f:18:34:22:
                    a4:75:cd:bd:d8:ab:dd:b4:c4:9c:99:91:7b:8a:9d:
                    a8:18:70:65:40:66:23:d9:52:8f:67:ff:20:cc:f0:
                    1c:f3:ea:8f:a0:a8:31:a7:d8:b5:f4:5c:60:63:ad:
                    ae:53:97:93:c4:67:0b:65:65:c0:8e:d8:26:00:38:
                    b9:cd:f0:da:db:4b:94:6c:60:7d:87:22:70:45:f3:
                    c9:f5:b1:12:73:f9:9b:86:64:7d:6b:e6:9e:cd:49:
                    cb:6f:8f:4e:34:90:28:9e:80:6c:4e:70:5a:42:c8:
                    fe:9e:f0:b6:16:48:19:fa:ee:f2:fb:a5:b1:c5:bf:
                    97:0d:84:e4:b5:6a:f4:f1:2c:fa:c3:6c:99:94:44:
                    32:b4:c4:3d:68:79:ce:fd:a9:5a:63:58:56:c7:4d:
                    5b:81:6e:75:99:2b:a2:24:54:5a:92:86:ce:a0:86:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:15:FC:15:1F:91:F7:93:D0:5B:D6:83:38:9D:9D:51:92:82:29
            X509v3 Authority Key Identifier:
                keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:7f:c9:84:06:06:a8:9b:df:bd:50:39:c9:45:05:f8:16:
         8b:e7:22:17:de:ac:0f:78:ce:26:65:7f:26:20:7b:7b:ff:6f:
         18:a6:a4:7a:a9:ee:85:9c:02:9d:04:b4:07:2e:21:b7:c9:50:
         ff:5d:de:74:f9:e9:42:d9:bd:84:4f:df:09:df:60:23:bf:6a:
         2e:91:35:91:74:3c:7c:f3:13:3b:50:3d:95:17:6d:77:20:da:
         37:73:3e:c6:b9:dd:93:ae:ee:24:81:95:a2:ad:5e:03:f3:9a:
         5b:5d:0e:41:0d:f8:42:9a:e6:b4:c3:4d:e3:12:5c:56:66:eb:
         f5:2b:fd:42:90:18:49:3f:29:0a:8f:80:58:e6:34:47:74:41:
         f5:e5:34:ae:00:c0:d5:f0:78:4d:46:50:80:b8:23:a4:95:23:
         f7:3c:3d:ff:dd:c3:b4:6b:36:6e:a1:66:8b:93:ea:f8:5b:7d:
         17:22:c0:f0:ce:f6:1d:dc:96:9d:9c:ed:9f:4e:a5:54:e3:1e:
         b6:18:e3:23:90:c6:c8:e7:1b:42:10:61:80:3f:96:63:48:7b:
         10:90:d8:72:f7:0c:8b:3f:5a:03:21:32:70:1a:eb:c7:53:12:
         7e:e3:c6:3c:a5:5b:4d:96:b2:4c:85:20:a2:70:86:80:ab:2a:
         ca:87:de:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfQvD09pHpyNZoPDXJ1+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2M3NmUzYjU0NzdmZmQ0MmEwZmU0YjhjNzgzYWFkMmY5
NmZlNzAwHhcNMjYwMjA5MTMwMDE2WhcNMjYwMjEwMTMwMDE2WjAzMTEwLwYDVQQD
EyhlYzBkMTVmYzE1MWY5MWY3OTNkMDViZDY4MzM4OWQ5ZDUxOTI4MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Lqa+hMpsDUCIhQzKMmAIl0+D89k
FNQEjqt6yIfUnwU6KD/rm7/JQTaxWueTtws7ZkPnJDYMkn9sr+KTmylzQgnYHOXf
hW8gqY5hB1OzSNru2mk+do8YNCKkdc292KvdtMScmZF7ip2oGHBlQGYj2VKPZ/8g
zPAc8+qPoKgxp9i19FxgY62uU5eTxGcLZWXAjtgmADi5zfDa20uUbGB9hyJwRfPJ
9bESc/mbhmR9a+aezUnLb49ONJAonoBsTnBaQsj+nvC2FkgZ+u7y+6Wxxb+XDYTk
tWr08Sz6w2yZlEQytMQ9aHnO/alaY1hWx01bgW51mSuiJFRakobOoIZmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwNFfwVH5H3k9Bb1oM4nZ1RkoIpMB8GA1UdIwQY
MBaAFOTMduO1R3/9QqD+S4x4Oq0vlv5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU14MjQ3VkhmXzFDb1A1TGpIZzZyUy1XX25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81Zjg4ODEtOGE0NC00ODQyLTgwMDkt
MTE2NWQxZDE1NjRmLzEvNU14MjQ3VkhmXzFDb1A1TGpIZzZyUy1XX25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81Zjg4ODEtOGE0NC00ODQyLTgwMDktMTE2NWQxZDE1NjRm
LzEvNU14MjQ3VkhmXzFDb1A1TGpIZzZyUy1XX25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIet/yYQG
Bqib371QOclFBfgWi+ciF96sD3jOJmV/JiB7e/9vGKakeqnuhZwCnQS0By4ht8lQ
/13edPnpQtm9hE/fCd9gI79qLpE1kXQ8fPMTO1A9lRdtdyDaN3M+xrndk67uJIGV
oq1eA/OaW10OQQ34QprmtMNN4xJcVmbr9Sv9QpAYST8pCo+AWOY0R3RB9eU0rgDA
1fB4TUZQgLgjpJUj9zw9/93DtGs2bqFmi5Pq+Ft9FyLA8M72HdyWnZztn06lVOMe
thjjI5DGyOcbQhBhgD+WY0h7EJDYcvcMiz9aAyEycBrrx1MSfuPGPKVbTZayTIUg
onCGgKsqyofeWg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:07 2026 by rpki-client