This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File:                     _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier:          2YQ5QHRqLrBymj0rgI7hOQHn5xw9wgwc20NBDF/dcOc=
Subject key identifier:   E1:17:B5:42:1D:B0:80:78:67:99:AA:05:ED:07:BD:8F:9B:07:9E:F4
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer:       /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial:       019C1DCC5A2DA0BF0867319670B02A726448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number:          0279
Signing time:             Mon 02 Feb 2026 10:00:57 +0000
Manifest this update:     Mon 02 Feb 2026 10:00:57 +0000
Manifest next update:     Tue 03 Feb 2026 10:00:57 +0000
Files and hashes:         1: 9J2k_v-AhLXeWsx0gyZ7MSycihA.roa (hash: KdEABeI7OUulamOMnpjJAOHhCOTUaC4bju9UuYK4BXI=)
                          2: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: DV4viHy0fcgwt4TXE3wRMps5aJddRkcYbvYDviO5RT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:5a:2d:a0:bf:08:67:31:96:70:b0:2a:72:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
        Validity
            Not Before: Feb  2 10:00:57 2026 GMT
            Not After : Feb  3 10:00:57 2026 GMT
        Subject: CN=e117b5421db080786799aa05ed07bd8f9b079ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:96:09:43:aa:85:cf:4c:5d:a0:68:c8:83:
                    25:a1:44:95:e3:8a:c3:0f:29:9d:ea:0f:47:bc:33:
                    d8:8b:c2:22:4a:ff:dc:a9:0c:ff:02:27:80:62:f4:
                    b9:b6:d7:78:e9:c5:14:1e:59:68:3b:83:33:a4:71:
                    cc:a6:17:78:3a:6c:ef:f7:3b:71:d6:a9:8d:21:bd:
                    6c:81:1d:b2:e4:68:48:5f:15:c0:9a:6d:fc:ac:59:
                    c6:9f:02:82:99:49:2b:f3:51:fb:18:a8:bf:5d:90:
                    5d:15:b8:28:24:1f:26:06:b8:e1:ec:72:41:37:93:
                    99:30:10:95:87:6a:5c:12:6d:eb:8c:ca:16:10:77:
                    16:2d:06:31:24:f5:3b:1a:be:b0:39:28:29:f8:2b:
                    27:63:61:77:09:fc:ff:c4:98:a6:13:12:78:60:5b:
                    31:0f:87:3e:52:5f:49:83:c3:7f:22:57:b4:47:dc:
                    a9:59:68:49:d9:f5:72:57:0e:b0:dc:01:ca:88:da:
                    d8:53:da:08:6b:69:10:25:ad:3d:8a:48:68:bd:7e:
                    98:53:5a:f8:9f:7f:73:a9:e1:d2:fd:5a:90:33:ee:
                    eb:94:7b:b9:fe:33:5f:77:75:ef:f7:2e:03:f3:39:
                    6d:ae:f9:53:95:15:8f:f1:e9:e4:9b:03:c4:86:7d:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:B5:42:1D:B0:80:78:67:99:AA:05:ED:07:BD:8F:9B:07:9E:F4
            X509v3 Authority Key Identifier:
                keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:63:a9:3e:03:4b:3f:92:6f:cc:e6:0a:44:05:19:7a:e8:
         b3:eb:ad:26:0c:3b:1d:a6:25:29:c6:89:0d:cd:c0:44:8c:7b:
         bc:c6:8b:81:3d:e2:54:30:19:d9:32:56:97:3c:43:74:ad:a0:
         98:27:f1:26:b1:37:c8:f7:22:e1:18:e4:6a:88:e6:9f:4b:32:
         c2:31:42:b9:94:86:2b:00:4e:e1:fc:73:65:95:a1:48:a8:28:
         18:76:2f:82:9c:8e:80:11:f8:38:9f:84:4e:d0:fd:04:83:1e:
         e0:c3:d4:6f:1d:84:27:10:25:4d:01:8b:de:01:c3:bb:57:51:
         b9:d0:1c:1f:af:f3:82:07:72:e1:2d:52:ec:96:58:be:a8:8c:
         38:d0:2e:63:7b:59:f0:d3:a7:10:5e:cf:63:88:fb:26:5a:82:
         40:98:1b:69:72:69:ef:69:74:7a:8b:38:ff:0b:a7:4a:95:97:
         d2:96:2f:fb:45:8a:3e:4a:68:e2:62:57:b6:2f:45:08:cb:ce:
         35:53:1f:6c:03:f8:6a:e3:cd:b4:96:9e:4b:a9:da:2f:78:49:
         f6:75:58:26:65:86:02:f7:73:a4:a5:cb:85:ce:84:7b:51:f6:
         0f:af:06:af:08:aa:a9:f9:75:61:06:e2:b5:49:32:38:bd:24:
         ce:f5:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:57:56 2026 by rpki-client