This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File:                     5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier:          u257mHpl4g+Xm60BiR66CjAPg5BGb9jxcznaFNbPT4s=
Subject key identifier:   A5:7D:7A:9A:6A:86:A9:61:CA:9E:1B:7E:F2:73:1A:5E:DC:3D:E9:C5
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer:       /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial:       019C420F2F061206D80B6D5F3FDBB6F1CC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number:          04DE
Signing time:             Mon 09 Feb 2026 11:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:17 +0000
Files and hashes:         1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
                          2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 4EayNdZrXXlCS64RtHg4Nrjkj3ftWvNCiC9S+2pEGyE=)
                          3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:2f:06:12:06:d8:0b:6d:5f:3f:db:b6:f1:cc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
        Validity
            Not Before: Feb  9 11:00:17 2026 GMT
            Not After : Feb 10 11:00:17 2026 GMT
        Subject: CN=a57d7a9a6a86a961ca9e1b7ef2731a5edc3de9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:32:65:fb:12:8d:4b:ee:2f:79:4a:07:ba:
                    f1:cf:a9:51:47:15:36:5a:6c:f0:76:b1:5e:0d:ad:
                    a5:b4:4b:cc:64:f0:02:1e:03:74:38:07:97:fb:a3:
                    d5:23:ca:0a:c8:ed:0d:26:ba:7f:d9:64:a1:f3:31:
                    db:30:1f:85:5c:d6:56:bc:04:bb:85:c2:6f:e8:7d:
                    eb:6e:67:00:55:10:a8:cc:ee:4c:63:44:40:9d:6c:
                    69:29:91:86:85:48:2d:d7:c5:83:91:91:1f:84:1e:
                    ef:8d:66:75:7a:a5:26:35:3e:55:d0:80:02:54:95:
                    54:f0:7e:27:74:5d:99:f1:ce:18:81:70:1e:76:73:
                    75:4a:8d:83:c4:05:e0:97:77:7c:7a:30:13:b2:c1:
                    a3:82:5c:45:20:9d:0b:f4:e0:5d:e5:b9:35:44:1a:
                    c5:31:8a:7d:98:d0:3d:ac:a1:fb:80:91:c9:b8:16:
                    bb:a7:c5:e0:ef:f4:a8:6d:32:01:bc:17:d7:44:cd:
                    4c:28:8d:e5:5f:2b:24:7f:7c:ef:b7:d5:88:ca:3c:
                    e7:b2:9c:e0:52:dd:65:c2:60:a2:ee:f0:22:d9:b2:
                    78:b7:99:41:f5:88:72:58:b9:81:1f:29:47:b2:ca:
                    d2:52:e6:3b:21:d7:e7:05:df:d6:31:04:6d:2b:03:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:7A:9A:6A:86:A9:61:CA:9E:1B:7E:F2:73:1A:5E:DC:3D:E9:C5
            X509v3 Authority Key Identifier:
                keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:00:72:ac:24:e0:d8:d5:74:3a:a6:af:43:72:16:f8:6e:be:
         42:fc:25:73:93:14:77:f3:1c:6e:76:49:ee:68:bd:e8:8d:b5:
         ac:73:3c:8e:4e:74:74:80:7a:93:30:03:24:f2:cf:65:96:a6:
         7c:7c:c6:01:56:50:18:bd:a3:35:35:48:71:56:14:95:ac:22:
         5e:ad:fc:d4:a0:c1:3f:e9:31:bf:68:06:7a:97:47:c9:5b:4a:
         0a:08:22:fc:7f:56:db:9a:e1:c3:5d:c3:0b:0e:ae:60:8f:95:
         ae:53:bd:65:e0:1e:07:7f:5b:66:f1:1b:d1:a7:12:77:2f:fe:
         b4:49:2d:65:54:c7:7b:c1:13:b3:6a:4b:5d:44:35:b9:4b:67:
         e2:05:26:3d:30:20:ef:a7:fa:09:7f:6a:fb:28:84:13:52:60:
         a1:62:31:07:b1:90:74:2c:b5:1b:78:a7:c6:ea:da:ae:9f:41:
         2b:63:89:d4:0a:9c:58:82:15:81:71:d7:a5:49:dd:01:b1:21:
         3f:f8:84:c3:0b:4c:88:20:c9:de:83:5d:d4:ce:e7:96:7a:17:
         ce:13:07:dd:46:60:8b:a8:1c:3f:95:c4:92:73:49:82:35:37:
         18:03:73:94:95:e8:3a:6d:f5:4f:4f:d0:e4:5a:16:bf:76:26:
         c8:d0:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:43 2026 by rpki-client