This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          v2o9cRxLUsulXuVnTLwQFlU/8NoSavgGYqwW18Q2YWM=
Subject key identifier:   6F:8D:04:3F:09:C5:FD:D7:47:B0:69:93:E7:E2:49:E7:68:91:78:40
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019C427D696C4CAC94D5989B148FB1D30601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          09DE
Signing time:             Mon 09 Feb 2026 13:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:41 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: BbYPkgjMm6CjNmqd0/V96pKImP96EL/gXgIXvhaMJag=)
                          4: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          5: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (hash: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:69:6c:4c:ac:94:d5:98:9b:14:8f:b1:d3:06:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Feb  9 13:00:41 2026 GMT
            Not After : Feb 10 13:00:41 2026 GMT
        Subject: CN=6f8d043f09c5fdd747b06993e7e249e768917840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:79:ee:e0:5d:74:a4:22:6f:7a:cd:60:23:
                    11:ff:5d:99:c2:50:2f:d5:9f:fb:26:0d:85:41:60:
                    3c:41:ff:cd:52:12:a6:03:ba:a9:d9:ea:f1:b5:2d:
                    b0:2d:f1:7e:c3:8d:2d:25:ba:8a:b0:32:18:9c:14:
                    19:8e:17:8f:22:32:11:09:a6:44:fa:ad:af:16:5f:
                    22:c7:90:c8:64:94:1b:80:7b:94:44:3b:0b:ee:71:
                    17:09:f0:f8:44:4f:b0:20:12:b1:87:e9:6c:01:48:
                    a6:52:d9:c6:d1:17:7e:d6:d1:60:eb:e8:90:d8:d0:
                    99:12:99:79:b4:83:0a:c0:33:b6:fb:51:2a:79:d4:
                    ec:60:6e:58:de:84:9d:0d:28:4d:21:46:0b:4e:48:
                    2b:30:c0:ba:b5:2d:6b:3f:9c:e1:a3:d7:36:8c:a3:
                    ac:10:74:e3:a0:ac:65:8c:24:0f:0f:56:b8:d3:67:
                    9d:d6:11:75:ca:cb:0a:d1:e8:89:f3:57:d5:8a:c1:
                    a8:ba:f2:e2:0f:0b:ca:c4:c6:b1:38:03:fd:83:ba:
                    a9:a4:db:7b:ef:a8:93:c1:29:be:3c:f1:70:0b:33:
                    08:91:f1:99:4a:60:bf:38:8e:cc:5b:91:59:9d:56:
                    94:da:94:ed:87:85:6c:99:d1:44:40:86:d5:e4:a5:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:04:3F:09:C5:FD:D7:47:B0:69:93:E7:E2:49:E7:68:91:78:40
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:75:32:90:4b:1b:d1:58:de:62:f1:74:ea:34:e7:54:db:
         5b:d1:20:c9:cb:f9:d0:48:f5:ad:8e:0d:6d:8f:c8:89:c7:69:
         35:f4:6e:a4:d5:94:b2:42:7e:9d:b3:f9:68:65:f4:30:ac:c6:
         d7:fc:79:f7:21:b9:1f:de:53:fb:e9:fa:29:7d:32:df:61:a1:
         f7:e3:bd:a3:5b:3b:08:c6:02:76:67:22:54:42:61:43:d4:fa:
         01:44:42:20:99:62:ce:de:19:4f:1e:e3:57:58:19:50:d0:a0:
         16:ff:a3:2c:4e:6b:f6:13:07:6c:69:4b:e7:67:e5:94:6b:3d:
         fe:33:1a:82:62:be:c4:c6:11:1e:47:d0:59:87:78:06:37:d4:
         44:e3:da:fd:92:e7:09:1f:18:ce:34:07:05:f2:56:d7:6f:23:
         68:92:1f:21:b0:65:b7:3c:96:d7:ca:4a:ba:37:e3:66:3b:27:
         0d:e3:a7:5f:b0:d5:01:34:46:2d:63:42:0b:cd:49:2e:5f:16:
         9b:61:2b:fc:12:4c:ff:f9:04:c3:86:54:e6:e9:7b:ae:e1:76:
         07:a6:a5:b7:c8:2c:40:21:0a:9f:8d:fb:2f:c3:6c:3b:3c:b0:
         41:63:75:82:a4:e0:4a:bd:2a:2d:2c:4e:16:2f:34:72:f4:ec:
         31:43:d4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:54 2026 by rpki-client