This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          I21989ti7C2A9XdNruBnjnyhfWwqcNvq4dmkWc6BuKk=
Subject key identifier:   E5:0E:EB:04:81:8F:EE:7A:59:30:31:14:FD:CD:88:3A:26:8D:60:A1
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       019C42B489F16D31260C01B17A20BC8DF85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0E26
Signing time:             Mon 09 Feb 2026 14:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:53 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: WqzbZk2ebUDdJM1eo8X/316aFv/8xPV12GB+xwbN/34=)
                          2: KdkSplDy4QjMpE4fLCxjhJLFG-A.roa (hash: GJjKbZNtY1x/kWqwNINR2VUda7Jb8+5oqTMBWfwhVbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:89:f1:6d:31:26:0c:01:b1:7a:20:bc:8d:f8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Feb  9 14:00:53 2026 GMT
            Not After : Feb 10 14:00:53 2026 GMT
        Subject: CN=e50eeb04818fee7a59303114fdcd883a268d60a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:30:ff:b3:47:1b:f5:5d:a9:a2:f1:a3:59:
                    fa:53:47:50:52:d5:28:f0:a7:4a:c1:7a:f7:0b:ab:
                    9a:68:37:63:c8:fc:a2:41:8d:67:64:86:77:c7:3f:
                    cf:5d:a5:c9:1d:b8:54:00:4e:e8:49:d7:d0:42:c8:
                    1b:60:85:55:f0:d7:a3:b3:ff:68:d7:e4:46:1c:f7:
                    64:b2:99:ff:7e:eb:b4:f1:13:c2:6c:a6:5c:e1:f5:
                    dc:f9:83:d1:22:a9:f7:04:9c:a5:a7:1f:13:7c:91:
                    7b:0e:3e:17:d2:ee:37:32:3f:5f:41:0d:33:3f:30:
                    ba:98:97:68:93:fa:61:29:5f:1b:16:fe:02:1e:de:
                    bc:06:35:eb:7c:f3:3b:e7:84:ba:d6:74:7c:69:6d:
                    17:db:da:28:83:8c:d4:0b:2d:8d:c0:57:73:73:23:
                    b4:11:93:12:16:c2:83:31:45:c7:df:2b:38:4c:87:
                    0c:53:d7:ba:fd:a8:62:71:cf:12:1e:64:1d:6c:eb:
                    fa:e8:65:5c:e7:59:38:b1:a8:89:e5:a4:64:75:74:
                    a9:75:ca:8e:26:16:cf:1c:f0:15:2a:c5:ea:7e:0f:
                    b0:ea:9a:d7:2b:b3:18:f6:7c:aa:62:a4:64:fc:63:
                    81:94:8d:d9:dd:23:d4:dd:61:f0:71:71:d1:45:42:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:EB:04:81:8F:EE:7A:59:30:31:14:FD:CD:88:3A:26:8D:60:A1
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:de:33:e9:3a:bb:75:b1:89:f1:28:f8:e3:a3:98:54:5d:
         45:a4:9c:46:5e:63:39:c6:e5:41:53:2b:d5:83:b6:bd:07:72:
         0b:1b:6a:90:76:0e:42:c8:9d:13:4f:79:ca:da:57:37:a4:e5:
         2f:7a:4d:34:79:49:46:f8:ba:f3:93:e1:44:fd:70:27:b8:bb:
         76:ac:66:59:e4:24:5c:50:53:3d:f9:87:63:41:60:f7:85:de:
         4e:b8:69:d9:ff:99:83:2b:a0:e1:62:2e:4f:fc:05:be:5e:3b:
         b1:78:d2:c1:7f:c2:e1:b1:54:59:ac:6f:f2:b8:57:46:e4:a9:
         af:fb:68:2a:c5:73:09:ec:43:42:6f:4d:8a:18:0d:1c:9b:40:
         40:31:35:1b:53:c9:e3:73:1a:0e:45:88:af:6f:45:36:a0:b3:
         0c:1b:15:c3:b9:ee:6e:09:b7:79:df:b5:60:3b:1a:7a:8b:45:
         cf:50:cd:fa:46:20:46:57:75:c7:35:e6:5b:17:62:1b:9a:d7:
         1f:1c:27:85:38:fe:2c:51:90:d2:c9:6d:cc:07:38:83:d0:71:
         3d:93:59:91:76:b1:e2:a2:02:d0:e0:07:fd:f8:af:22:01:15:
         c1:89:cb:6f:33:36:a3:71:bf:d3:75:4a:f8:27:a0:a0:06:8b:
         ad:1a:0d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtInxbTEmDAGxeiC8jfhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDE3YjEzNjUzZmYxZTNlNzgyMmViMWU1ZTBhMTdmNGQ0
Zjc4ODEwHhcNMjYwMjA5MTQwMDUzWhcNMjYwMjEwMTQwMDUzWjAzMTEwLwYDVQQD
EyhlNTBlZWIwNDgxOGZlZTdhNTkzMDMxMTRmZGNkODgzYTI2OGQ2MGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok0w/7NHG/VdqaLxo1n6U0dQUtUo
8KdKwXr3C6uaaDdjyPyiQY1nZIZ3xz/PXaXJHbhUAE7oSdfQQsgbYIVV8Nejs/9o
1+RGHPdkspn/fuu08RPCbKZc4fXc+YPRIqn3BJylpx8TfJF7Dj4X0u43Mj9fQQ0z
PzC6mJdok/phKV8bFv4CHt68BjXrfPM754S61nR8aW0X29oog4zUCy2NwFdzcyO0
EZMSFsKDMUXH3ys4TIcMU9e6/ahicc8SHmQdbOv66GVc51k4saiJ5aRkdXSpdcqO
JhbPHPAVKsXqfg+w6prXK7MY9nyqYqRk/GOBlI3Z3SPU3WHwcXHRRUKAxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUO6wSBj+56WTAxFP3NiDomjWChMB8GA1UdIwQY
MBaAFObRexNlP/Hj54IuseXgoX9NT3iBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYt
NmFjZDU4MWQ0YjBmLzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYtNmFjZDU4MWQ0YjBm
LzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWLeM+k6
u3WxifEo+OOjmFRdRaScRl5jOcblQVMr1YO2vQdyCxtqkHYOQsidE095ytpXN6Tl
L3pNNHlJRvi685PhRP1wJ7i7dqxmWeQkXFBTPfmHY0Fg94XeTrhp2f+Zgyug4WIu
T/wFvl47sXjSwX/C4bFUWaxv8rhXRuSpr/toKsVzCexDQm9NihgNHJtAQDE1G1PJ
43MaDkWIr29FNqCzDBsVw7nubgm3ed+1YDsaeotFz1DN+kYgRld1xzXmWxdiG5rX
HxwnhTj+LFGQ0sltzAc4g9BxPZNZkXax4qIC0OAH/fivIgEVwYnLbzM2o3G/03VK
+CegoAaLrRoNTQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:35 2026 by rpki-client