This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          BrAOWX62I0M7mvAr5rmulwb3kkKU2BbUSb5srGGsWy8=
Subject key identifier:   95:09:89:F5:27:8D:70:5A:E7:52:97:05:BB:4B:C3:5F:52:A4:9B:91
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       019C43FE7F03EBBC50F76123C8A5E4992816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 20:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:17 +0000
Files and hashes:         1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
                          2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: 9QeN9cc6aVzs7PDqFXjZ5jxoJwv4YEPpV1EkTuw6ekg=)
                          3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
                          4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:7f:03:eb:bc:50:f7:61:23:c8:a5:e4:99:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: Feb  9 20:01:17 2026 GMT
            Not After : Feb 10 20:01:17 2026 GMT
        Subject: CN=950989f5278d705ae7529705bb4bc35f52a49b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:35:a9:92:bd:b5:e4:c8:82:7b:e3:ef:2c:
                    1b:9b:93:1b:1b:44:e3:de:07:5d:2a:25:10:df:bc:
                    3d:c2:55:8c:23:e8:fd:52:f3:a3:b1:3f:24:bf:eb:
                    c1:c2:61:e3:14:2d:f2:db:bd:11:d5:3c:0f:ca:e4:
                    8f:2f:f6:42:e1:21:e6:bb:43:9e:e9:09:68:68:e8:
                    8f:52:2b:9b:99:7c:24:6b:55:05:6d:8f:61:0d:77:
                    f6:80:b0:fe:52:71:70:32:67:be:09:04:da:3c:77:
                    01:d4:23:0b:b6:5f:9b:0a:20:4d:24:f9:8b:66:b4:
                    37:19:cd:e7:88:d1:46:a1:61:5d:25:08:3e:47:09:
                    4d:7a:0f:e9:26:f1:86:b4:90:25:d2:58:5b:17:06:
                    b4:4a:0e:da:6d:e3:6e:77:13:aa:f4:81:d5:5c:22:
                    fa:ba:a4:79:5f:f2:10:4a:6f:7f:61:4e:94:dc:a4:
                    eb:27:d4:f5:1d:ce:89:b6:82:34:a5:96:9c:cc:c5:
                    ef:65:03:a3:43:b6:29:a7:96:9d:a8:36:80:1f:46:
                    db:ab:c4:78:a2:4f:13:aa:72:36:16:b7:86:54:21:
                    01:a2:78:0f:d8:7d:22:f9:72:36:79:f7:09:63:d7:
                    be:eb:20:b1:7b:47:13:b0:62:26:29:99:4c:83:37:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:09:89:F5:27:8D:70:5A:E7:52:97:05:BB:4B:C3:5F:52:A4:9B:91
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:b9:c1:79:7a:48:a2:c8:84:b3:bc:6e:77:95:54:a2:a0:
         aa:1f:16:cb:2c:f4:88:41:5c:0d:be:4f:80:b4:2f:04:38:f6:
         30:09:71:98:ee:24:b7:ba:e8:2f:7c:fb:58:ab:9f:28:16:70:
         be:e7:e2:5a:c2:57:d8:6e:1f:aa:23:2f:44:40:05:b4:32:93:
         4f:8f:ef:36:c3:c3:35:30:f9:c4:6c:ff:2f:4f:ea:27:5c:4f:
         68:7f:11:99:d2:05:c5:5e:fb:d7:40:68:0a:7d:79:7b:af:9d:
         f5:70:64:37:76:7e:97:96:f9:09:47:51:53:e4:5c:fc:47:5e:
         14:1a:ee:81:83:ec:21:ad:b7:0d:49:e1:79:78:fc:3d:d6:bc:
         e1:93:02:4a:30:05:6c:a9:13:95:c6:cd:3f:1a:72:b9:5e:ad:
         a5:0f:fe:60:2a:0d:5a:24:bb:9a:d0:6a:0b:23:b2:fd:62:07:
         65:bf:d6:b8:d5:d5:5c:71:06:94:8a:24:ad:11:6d:71:f8:33:
         ae:0e:4f:b6:14:0b:3f:92:00:f5:d3:03:be:5e:b7:a1:07:78:
         38:cb:ff:38:1b:95:5c:00:8c:fa:67:9f:e5:f4:06:ab:98:8c:
         1a:2e:19:86:83:39:f3:b6:4c:ab:f9:c0:86:bd:1b:0a:6a:d3:
         24:a6:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:21 2026 by rpki-client