This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          9klevseBOfyF22wcqPxjTI9ttpbqSvbzGevcJAf4G1M=
Subject key identifier:   67:B9:57:CF:11:8D:86:8A:5B:87:03:DA:BD:14:47:4D:3F:9E:29:65
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       019C41A21C2F980C3805F18A5C345AF9504C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          17A0
Signing time:             Mon 09 Feb 2026 09:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:08 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: Y8CeChqKxXb6d9iiG/8Us8C1qgsloxWB2S3Yjl9//y0=)
                          2: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (hash: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:1c:2f:98:0c:38:05:f1:8a:5c:34:5a:f9:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: Feb  9 09:01:08 2026 GMT
            Not After : Feb 10 09:01:08 2026 GMT
        Subject: CN=67b957cf118d868a5b8703dabd14474d3f9e2965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:b8:87:01:c4:82:6e:1c:56:bb:6e:a0:05:
                    85:d6:a0:b7:72:c6:c8:b2:17:be:9f:22:8f:43:42:
                    fb:1c:02:6c:d7:f3:1b:28:c5:3b:6f:f2:ae:cc:cc:
                    15:c0:88:a3:00:7a:62:71:5f:89:50:11:d6:d9:96:
                    87:2d:86:9d:89:55:a0:80:69:e4:e1:0a:b1:7d:ff:
                    a9:e2:f6:91:89:d9:e4:dd:87:9b:92:c9:62:56:16:
                    04:17:d5:10:97:c7:ce:e2:b8:9a:04:c6:26:29:ae:
                    0d:0e:c0:48:f6:2a:9c:6c:a7:2a:23:22:db:c8:ca:
                    ec:2a:28:35:ab:cd:7f:ec:9e:6f:f2:0c:05:db:d2:
                    47:3d:2c:40:3f:a8:09:47:90:f7:d6:d3:6f:6d:6e:
                    2c:a2:db:5f:a4:fa:bf:e1:0e:ef:dc:61:60:e1:03:
                    4e:df:7d:8e:48:4d:ef:17:22:7e:14:7c:c8:df:9a:
                    8d:b0:55:29:dd:30:79:b3:c5:23:9e:72:e2:e3:2f:
                    85:21:5f:b5:97:36:01:1f:39:59:c6:9f:d6:69:3c:
                    a3:d1:46:2d:38:6c:5b:76:93:7e:45:65:94:ff:b2:
                    5b:bc:0c:53:ee:df:af:ef:1e:66:c8:00:16:74:6a:
                    a4:6f:9c:51:89:e1:be:c1:1f:92:1f:10:77:3d:d9:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B9:57:CF:11:8D:86:8A:5B:87:03:DA:BD:14:47:4D:3F:9E:29:65
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b8:e7:ff:af:b7:64:fe:dd:24:d1:d4:bc:79:b4:b7:ee:ca:
         7c:76:64:b7:a2:6e:ff:9c:ca:cb:23:a0:50:13:be:be:d7:d3:
         f9:c1:f9:26:21:e4:34:57:26:23:c5:47:3a:d9:0b:85:13:22:
         34:7b:d3:2a:2a:12:9b:82:91:a4:7a:20:e8:c6:ff:a2:33:62:
         e9:fa:17:fe:7a:19:a0:c4:59:29:f7:44:ca:c0:b6:95:4e:41:
         ea:4d:78:48:44:e9:0c:a9:be:cb:8d:e0:06:09:48:04:63:81:
         41:be:1b:14:b9:f6:ea:1c:c9:d4:ff:6c:b3:82:bb:22:f6:db:
         b1:a7:df:e5:40:53:aa:e3:55:52:f4:a6:0c:f4:7f:32:83:7c:
         ba:60:47:e6:1e:39:90:3d:da:ec:18:60:6e:70:71:86:2a:08:
         c4:76:d7:5f:0f:40:d0:33:66:aa:64:3d:16:af:dc:47:a7:a9:
         e7:04:85:4c:1b:ec:5d:c4:56:39:dc:b1:99:33:37:a0:c6:96:
         55:cf:81:f4:f3:ec:5f:0a:5c:12:47:0c:7a:77:bd:6d:97:41:
         2b:9d:a1:e8:5c:d6:08:7f:90:df:f9:7e:e9:69:17:fb:0d:2d:
         ac:b0:66:26:7c:70:a7:f1:3f:8f:85:15:89:ef:55:27:6c:25:
         70:e7:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:43 2026 by rpki-client