This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File:                     5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier:          z0h3WZPpIcEDG9yW7lTElOFcJxyunU4dpvTXWNc6Tl4=
Subject key identifier:   E8:57:F1:81:90:80:EC:AE:EB:EB:1F:CE:75:6A:0F:AD:DA:34:A9:A4
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer:       /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial:       019C42B40979140C17371E6343E0B0764BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 14:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:20 +0000
Files and hashes:         1: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: ptlkxsIbk1/pK6w3ictD/QcW4I6UBCgQPhq/8Eqvb1g=)
                          2: thh1OM4lsFyzTf1SS98D2NKoCSE.roa (hash: oxxghEjHibaYZKGUuvnL5JvUvMs1tKy3he9xg0XR7pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:09:79:14:0c:17:37:1e:63:43:e0:b0:76:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
        Validity
            Not Before: Feb  9 14:00:20 2026 GMT
            Not After : Feb 10 14:00:20 2026 GMT
        Subject: CN=e857f1819080ecaeebeb1fce756a0fadda34a9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:14:b9:1f:4e:0f:cd:b9:b8:8c:99:48:ca:
                    42:39:00:24:e8:dd:ec:5b:eb:f1:71:98:a8:13:01:
                    02:82:91:25:a3:b2:5c:16:c4:ad:ff:b8:d1:74:17:
                    66:ae:8f:c2:de:81:71:aa:3d:37:1e:51:48:45:e7:
                    52:77:29:d9:cf:69:fc:c2:ff:2b:5b:6c:43:d5:c4:
                    7c:4a:b8:48:a1:96:35:f1:68:85:fb:ff:d5:44:08:
                    23:f0:8b:4b:b1:ba:c9:bd:6e:7c:7a:d1:ed:d1:1c:
                    bb:53:05:56:e2:7f:08:c9:bd:fc:42:db:e7:11:6c:
                    37:31:d0:31:77:c7:64:26:f1:a5:49:3c:db:e9:98:
                    2b:e7:7a:89:67:72:62:8f:0e:b7:3f:33:d6:a3:9f:
                    55:aa:54:40:3c:41:dd:7a:f6:b4:5e:1a:47:6c:97:
                    dc:1e:39:b3:d8:c8:ad:09:7d:07:5e:16:2d:88:f0:
                    1e:84:65:a1:84:92:4e:4c:6f:99:51:fc:63:7b:b6:
                    7d:f1:84:8b:27:14:6d:31:b6:49:0d:a6:8d:e9:fa:
                    13:7e:d5:40:7b:f9:a4:60:3b:4d:d5:8e:98:16:cb:
                    9d:7d:af:44:82:56:a4:1e:83:17:ff:04:0b:82:5c:
                    ba:c7:52:3f:95:94:74:51:0d:71:cb:3f:c3:db:56:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:57:F1:81:90:80:EC:AE:EB:EB:1F:CE:75:6A:0F:AD:DA:34:A9:A4
            X509v3 Authority Key Identifier:
                keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:a0:f6:15:d9:f5:31:78:7d:30:e1:77:c4:40:00:13:4f:
         b9:3c:86:5b:da:20:fd:1f:f6:a1:01:a9:e3:9f:e2:e2:76:5b:
         a4:bd:c7:55:fd:12:65:e2:90:37:ca:f0:f0:bd:1b:a1:62:f1:
         67:95:ae:14:6c:db:97:c6:2d:22:b2:e6:71:ef:1b:25:e4:4e:
         a8:b0:00:60:aa:b7:b2:4d:9c:7e:c0:64:ec:e5:cc:76:9e:fa:
         89:99:45:0c:e0:47:e4:39:9c:cf:e3:d2:70:ed:0f:04:dc:c1:
         35:35:39:33:73:e7:45:98:1a:dc:52:c9:c7:6e:32:20:6a:72:
         41:c7:ba:39:bb:2a:59:9c:93:e5:40:28:16:1c:48:e4:d9:7a:
         18:94:d9:fe:b8:6e:45:5f:46:8e:cc:48:98:23:8e:4c:f9:63:
         9c:44:20:26:08:cd:ec:8e:a1:03:ba:7b:e6:14:d0:56:7b:38:
         10:09:85:e1:70:6e:c4:7e:ef:94:c7:42:20:24:27:44:03:9b:
         52:5d:f3:d8:39:18:36:34:1e:8a:03:05:02:cf:02:f3:df:2b:
         b6:71:30:81:70:3f:af:5a:f9:21:3d:9a:e8:9b:89:94:85:1d:
         6a:a3:68:2c:cf:bf:30:f0:95:33:89:c4:7d:22:b6:65:a8:55:
         fd:12:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:55 2026 by rpki-client