This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File:                     eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier:          il+7Nn5BltBfKzGpqOENFw9cIjh7lstM8G/u6TCRfg4=
Subject key identifier:   54:58:4A:6A:C2:D6:F9:33:3D:56:16:B6:42:39:98:66:73:37:64:FC
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer:       /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial:       019C4321E374770D4697B1218821491630B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number:          12E8
Signing time:             Mon 09 Feb 2026 16:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:20 +0000
Files and hashes:         1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: 6+Z2k93LWJlze94iJv5Jlg7w5ZshxPlUfGI48349sTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e3:74:77:0d:46:97:b1:21:88:21:49:16:30:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
        Validity
            Not Before: Feb  9 16:00:20 2026 GMT
            Not After : Feb 10 16:00:20 2026 GMT
        Subject: CN=54584a6ac2d6f9333d5616b642399866733764fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:89:34:cf:ae:71:ba:52:82:46:04:86:2d:
                    93:d8:34:bd:70:b2:aa:db:04:a6:75:e2:d1:50:5f:
                    b2:20:34:85:96:8d:88:f6:0f:9b:39:d9:b9:28:51:
                    b3:ea:a8:d2:14:d1:73:14:83:96:a8:8a:91:9a:40:
                    5d:08:bf:b2:c0:93:f3:83:03:bd:b8:4d:85:c9:6c:
                    f5:4d:3e:7b:1d:80:e0:ad:fb:8e:95:2a:93:00:7b:
                    3a:a4:e0:22:ab:fe:5d:4b:72:c0:f8:6e:e3:41:37:
                    14:2e:f5:0b:fd:65:53:71:ae:d6:22:af:ae:b0:ae:
                    b2:71:16:3e:9b:00:2b:d3:ed:4a:b4:47:74:9e:f8:
                    bf:3f:0e:fb:22:8b:9f:23:cf:18:83:b9:ba:fc:6a:
                    c5:f0:7b:28:59:b6:52:db:33:97:c5:6a:3e:45:b0:
                    6c:b4:e2:b1:f4:1e:5d:72:4e:e9:a0:4f:5e:37:24:
                    d1:1f:5d:52:ac:b1:fd:79:ff:43:4d:9e:e4:53:c7:
                    ad:08:fb:08:f8:82:0f:b6:c4:bb:45:6d:b0:74:95:
                    6c:4f:31:55:9e:22:af:0e:de:c6:44:1e:5d:73:60:
                    40:c6:6b:14:12:5b:bb:44:f4:01:ed:33:54:1d:32:
                    a5:12:ce:14:1d:1b:9e:c1:55:7f:79:c9:81:8f:25:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:4A:6A:C2:D6:F9:33:3D:56:16:B6:42:39:98:66:73:37:64:FC
            X509v3 Authority Key Identifier:
                keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:ec:aa:88:c7:f4:69:cd:09:d8:ca:6d:56:40:d7:4d:bd:
         71:3c:40:98:ed:ea:17:b6:58:ed:b3:58:f4:4b:f5:00:3c:5e:
         6c:f6:0e:10:8e:ed:b5:e3:1a:78:c8:43:12:48:97:a9:9b:77:
         66:c6:43:30:b7:7f:f8:0a:db:cc:64:b3:91:cc:0f:c9:a6:39:
         bf:1d:d3:1b:f8:bc:80:f0:ef:df:30:9a:a4:ea:b4:47:76:3c:
         0d:1b:54:c8:d6:87:ef:37:0e:35:69:31:df:73:4a:4c:10:27:
         34:f5:03:2f:69:26:7e:61:4b:d9:2e:a1:3c:6e:d3:6d:51:1f:
         cf:61:83:e9:79:37:30:51:50:e0:57:ac:b9:5a:8f:d8:7a:ca:
         7b:d5:4e:63:a9:4b:1a:ac:91:f9:f9:01:ef:5b:5a:24:b4:33:
         52:fa:aa:af:f1:55:fe:d0:7f:fa:46:e7:b5:be:04:40:a3:e3:
         12:bd:99:9c:61:cf:75:19:ac:c3:40:51:e5:9b:40:3c:95:ba:
         6a:22:7d:3d:89:65:ff:39:25:2e:90:6e:27:b4:47:f3:7c:f4:
         08:44:5a:24:fc:6b:09:38:e1:d5:c8:95:54:75:c6:1e:3f:4b:
         4c:f8:69:d7:f0:ef:a0:2b:f7:f6:d8:27:b7:e8:8f:5c:81:59:
         cd:c0:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:16 2026 by rpki-client