This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File:                     5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier:          4UBuoz8hMuMCKLeOFnizYC3Qn3/88By+SD8eUr96N14=
Subject key identifier:   39:FC:51:ED:E5:0F:99:16:C6:ED:9A:AC:6D:B5:82:55:7C:7B:5A:5C
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer:       /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial:       019C42EBA00D8F16A5C55CD2AA2AB4A6BECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number:          12F4
Signing time:             Mon 09 Feb 2026 15:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:03 +0000
Files and hashes:         1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: SB/za4zTWBV7zdUbyYFXYggxBCZctOgSgryExAd4IyI=)
                          2: hTC91o4ZtMO-04ZIsmw_aK8gJeA.roa (hash: War1ZIX95W/VPK4FUZA8Xa/ZSNStMaoIUos///YIBIQ=)
                          3: rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa (hash: 0alGeHDZjg/Rc5/CXBTY3qIbzWIm6w6jf9n9/91FunA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a0:0d:8f:16:a5:c5:5c:d2:aa:2a:b4:a6:be:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
        Validity
            Not Before: Feb  9 15:01:03 2026 GMT
            Not After : Feb 10 15:01:03 2026 GMT
        Subject: CN=39fc51ede50f9916c6ed9aac6db582557c7b5a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:6c:22:db:21:0a:47:d9:25:5d:d1:58:73:
                    1c:8f:e8:3b:39:90:92:ba:5c:9f:56:10:af:d3:29:
                    0c:8f:0b:44:da:f1:ce:c8:57:7f:69:64:f6:b6:06:
                    bf:27:c2:0c:0d:91:a1:61:91:74:1b:ee:36:54:0a:
                    7b:12:4a:d8:7c:a5:7f:3f:8d:13:be:2f:dc:87:47:
                    ff:d2:f5:82:d6:83:f8:22:1d:af:6b:82:99:6e:bf:
                    79:c5:91:bb:ec:10:05:b8:59:30:b6:d5:9b:58:5d:
                    bc:95:09:48:83:3b:63:b4:27:33:79:f1:3c:68:e7:
                    22:ff:70:5e:d8:09:42:88:d4:9a:80:b2:15:e3:4b:
                    be:e2:80:4e:f9:a0:ab:49:dc:ec:75:35:e3:8b:6b:
                    4f:6b:1e:69:60:db:0d:80:42:82:ce:d2:d8:3f:6e:
                    6f:91:ab:67:47:4f:ff:4b:2d:f4:ba:8b:87:c5:33:
                    e9:6f:9b:4e:d9:2d:20:bd:fb:10:17:60:a6:0f:ca:
                    be:17:2d:41:65:41:7d:f2:37:7a:d8:86:8a:24:fc:
                    7b:fa:e7:b1:13:11:8e:14:f2:55:9e:b3:fd:ee:e6:
                    6e:57:2f:39:b5:29:1b:dd:12:a2:eb:fb:9b:6b:48:
                    b9:c7:e3:c4:72:28:00:c8:0d:0f:f6:40:e8:8a:ba:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FC:51:ED:E5:0F:99:16:C6:ED:9A:AC:6D:B5:82:55:7C:7B:5A:5C
            X509v3 Authority Key Identifier:
                keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:96:ba:d9:cc:a2:ef:0a:61:96:4e:e8:bb:f1:ad:9d:b2:42:
         14:4c:ba:10:7c:d7:f8:0c:7f:c5:9d:35:97:eb:9a:3c:10:47:
         d8:e6:9f:f2:8b:6e:9e:32:36:79:6b:34:e1:fa:a8:66:d3:b9:
         3d:2d:17:0a:de:cb:19:e9:eb:0f:7f:87:24:d8:73:04:a5:7c:
         66:da:fd:51:c0:b9:00:75:ac:3c:19:bb:91:03:94:4c:ba:71:
         1e:6e:34:84:2e:2a:31:34:0b:d6:7f:f5:45:09:47:9d:ed:38:
         f6:ab:83:3d:c7:67:22:a5:b1:de:81:94:f4:58:d5:00:dd:99:
         44:c7:de:6a:9d:57:22:c2:03:0f:82:32:9f:66:37:c8:72:58:
         d1:22:fc:1b:9d:24:fa:34:5e:d4:87:64:20:a5:ef:50:70:8b:
         c2:6c:95:3b:18:c3:4a:0c:d4:f2:65:18:d0:3a:d2:1d:06:bd:
         15:82:f0:9f:9c:5f:f8:b6:2a:27:b9:bd:0c:3b:ef:15:29:72:
         d9:70:bb:9d:66:b4:f8:6c:16:0f:97:eb:05:53:e4:45:2e:d2:
         b9:74:79:2a:e0:a2:63:13:59:b6:af:35:61:52:e0:dd:a1:97:
         f3:1a:39:6c:e8:70:23:01:c8:bf:5f:b3:17:d4:a3:7a:a0:a8:
         ba:a8:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:49 2026 by rpki-client