This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          0bPNVctQ0dQnZ9+fRvc+dkQ/1rQJOGBA1IUiScXtIRg=
Subject key identifier:   62:0C:17:A1:08:0E:BC:AB:22:E4:12:45:49:B8:FB:87:D4:5D:98:58
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       019C41A1895B519D13F63AE624097C11171E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          11E3
Signing time:             Mon 09 Feb 2026 09:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:31 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: KhdaUVG+mwb4g4DRDyTck2GaAUDTTXgmtT3oQZRbNg8=)
                          2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:89:5b:51:9d:13:f6:3a:e6:24:09:7c:11:17:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Feb  9 09:00:31 2026 GMT
            Not After : Feb 10 09:00:31 2026 GMT
        Subject: CN=620c17a1080ebcab22e4124549b8fb87d45d9858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:b5:a5:a1:27:ca:94:c1:56:8d:08:d9:2c:
                    5a:9e:0f:33:d0:a5:48:23:b3:b5:c8:b1:fc:fb:20:
                    82:76:58:05:37:e8:bd:9d:4a:d3:30:d9:97:1f:2a:
                    ee:c2:ee:72:5d:93:65:8d:6b:cc:b6:3d:0d:30:18:
                    58:43:4e:e0:8a:6b:f2:5b:09:8e:f6:a8:ce:92:d7:
                    13:43:4b:bf:82:6a:63:ec:7e:a5:73:e9:16:67:67:
                    a3:e8:f2:72:87:66:e7:3d:53:cd:1f:37:eb:d3:61:
                    06:52:ea:16:d1:05:dc:d4:23:a8:ba:3e:c4:e7:5c:
                    24:7a:79:aa:49:26:47:75:09:45:43:8a:b4:49:4b:
                    2b:34:33:1c:a5:02:5a:fc:16:13:15:78:fe:a6:39:
                    de:5a:55:08:2a:c3:50:52:2b:f1:3c:d4:7d:d5:32:
                    19:1d:70:f5:41:30:56:c4:43:d5:ce:eb:b4:70:7c:
                    af:3d:15:58:09:e0:93:7d:c4:ce:02:cc:6a:b6:c8:
                    57:74:ea:33:18:b4:a9:d4:6d:fe:6b:1d:a7:91:1e:
                    af:40:a1:72:a4:6e:d6:35:1d:03:0d:87:85:f9:58:
                    0a:49:d0:b3:95:57:30:2d:49:4f:4b:b0:0a:bc:ed:
                    9d:f6:b9:72:bc:d8:a5:70:14:1a:80:1d:0b:81:6e:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0C:17:A1:08:0E:BC:AB:22:E4:12:45:49:B8:FB:87:D4:5D:98:58
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:48:0a:e5:66:1a:77:b9:05:9e:92:7e:0b:2a:86:35:1c:
         6d:85:5b:84:ef:1c:98:59:fa:9f:4c:26:bc:0d:49:b8:6c:d9:
         ba:cb:7f:36:da:7a:74:8d:4a:ea:6e:03:60:56:ef:1e:5d:7b:
         4d:33:a2:0b:57:f9:ff:f6:50:48:c4:a4:a8:b1:35:67:e7:5e:
         47:81:58:6f:b5:f1:96:81:63:ec:c9:01:91:57:9e:32:72:de:
         56:f2:8a:25:03:dd:ec:25:c1:61:cb:39:2d:71:c9:2a:a6:91:
         fb:69:dc:12:51:46:5b:b2:29:de:0e:4b:c8:b8:fb:9e:c3:3c:
         11:3d:36:3f:9c:0b:bd:77:d9:e1:1f:9f:74:66:5f:13:74:d3:
         87:c2:b3:fc:09:d8:b0:8a:de:f4:16:ca:4c:c0:a5:88:ec:dc:
         9c:f4:0a:ef:45:84:37:84:5f:f0:05:1c:3f:37:ff:f8:a5:13:
         e3:7d:7b:b3:72:cb:56:88:c2:d2:75:e3:b0:9b:39:fc:15:33:
         40:e8:29:b3:1a:e3:4e:d0:ab:b0:93:6c:85:97:41:55:be:df:
         b9:76:5b:36:f8:77:73:ab:f6:45:02:85:eb:e4:d5:4b:70:29:
         59:c2:af:ec:be:c7:af:63:30:a2:81:01:6a:91:ec:82:92:81:
         99:c8:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:38 2026 by rpki-client