This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File:                     5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier:          BL1SDJd+U4ne7gCdmmoVR1GKyubmSn7EphPI/yn4PwY=
Subject key identifier:   97:DC:2B:E6:AF:7B:5B:2B:5E:25:27:33:64:50:28:48:6B:0C:5F:75
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer:       /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial:       019C4659E537006E94647BCA7D3DED282B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number:          1812
Signing time:             Tue 10 Feb 2026 07:00:22 +0000
Manifest this update:     Tue 10 Feb 2026 07:00:22 +0000
Manifest next update:     Wed 11 Feb 2026 07:00:22 +0000
Files and hashes:         1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: E6ybMpxJSy2vEXu0cTJGXRcIt1yJ/n4WpEno4n4yznE=)
                          2: IEPEUKY4ypkI5czUw-7D3lVNpYU.roa (hash: UT1ZxTsCU7M0PXyb6IAXHjMFZ0pzwPHMcsChBp8nX6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:59:e5:37:00:6e:94:64:7b:ca:7d:3d:ed:28:2b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
        Validity
            Not Before: Feb 10 07:00:22 2026 GMT
            Not After : Feb 11 07:00:22 2026 GMT
        Subject: CN=97dc2be6af7b5b2b5e252733645028486b0c5f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:f9:9e:dc:ff:4a:02:0b:14:3c:70:76:7a:
                    03:15:f9:55:b4:26:c1:bc:6e:56:7d:28:c3:db:60:
                    33:4b:15:7e:3e:be:ec:5e:2c:6e:b3:52:d1:b8:5d:
                    10:20:87:5c:ea:ff:ae:ca:e7:f6:e6:ab:05:b4:68:
                    fd:21:6c:30:06:b0:46:23:7c:2e:bc:b0:5e:7f:59:
                    27:88:78:86:68:40:05:1a:39:34:44:98:b0:7a:49:
                    c9:fd:11:8a:2c:39:cb:ea:14:3b:1d:d1:b4:3b:e2:
                    3c:92:5e:d7:b8:ab:7b:8d:8e:a8:83:af:d0:6b:51:
                    bb:1d:9c:93:f3:3d:1f:f9:16:f4:47:54:70:9c:75:
                    50:e9:34:80:3a:14:1c:0f:9b:dd:0d:d4:26:79:00:
                    bd:8c:2a:e0:77:27:31:54:e0:84:43:5c:96:ef:b1:
                    42:40:bd:f2:d1:e6:cb:1f:a1:7f:d1:dd:ca:51:1b:
                    2e:f2:b1:5b:a0:a0:2b:30:ee:58:c7:32:da:f0:4f:
                    0c:72:66:0d:2c:06:a3:e0:08:cb:6a:15:20:27:db:
                    9b:4a:69:2b:79:a9:6c:f4:47:8c:d4:75:18:21:69:
                    d3:89:46:01:fd:b3:af:31:34:03:ab:ab:4a:70:6a:
                    f0:32:22:b3:3c:64:cc:7a:38:24:00:2c:8e:aa:53:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DC:2B:E6:AF:7B:5B:2B:5E:25:27:33:64:50:28:48:6B:0C:5F:75
            X509v3 Authority Key Identifier:
                keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:21:71:e2:8b:6b:38:fc:ef:47:26:8b:48:69:16:46:fc:
         0a:e9:58:2c:bf:66:bd:5a:16:0c:41:bc:8e:3c:4d:3c:b2:39:
         57:68:fc:44:c8:92:c3:92:71:a9:93:3f:61:03:9b:e1:2f:be:
         62:eb:11:e3:59:fa:63:06:37:83:31:54:ae:41:44:46:88:3b:
         84:30:32:85:f9:c8:28:6b:cb:99:2c:ba:e7:f7:ef:ca:9b:08:
         54:0c:6f:b4:84:61:fc:a4:82:14:9f:ca:e7:f7:09:30:67:ba:
         86:34:e9:4b:c7:43:79:15:fb:49:d9:c7:b6:94:a2:c8:aa:c9:
         14:6f:49:d8:89:22:27:ab:f3:c1:b4:af:34:03:01:02:fb:7a:
         22:70:9b:5f:d1:41:1e:36:62:d9:ea:66:5e:d3:a3:0e:19:d3:
         7b:95:ee:68:75:7f:69:a7:f3:71:0a:fb:91:a2:d3:0b:7c:6d:
         aa:b4:74:c2:26:a3:0d:c6:e5:f0:81:a6:cc:c0:b0:76:f0:82:
         4b:00:cf:23:ef:88:a0:d6:38:99:28:f9:83:43:01:d9:db:f4:
         f7:a2:b4:cf:df:1d:dc:11:c0:79:37:35:a5:d3:0d:b4:86:de:
         8f:e7:d7:9d:d7:b6:8a:91:78:1f:a4:0a:be:26:85:aa:87:00:
         9f:9c:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 13:32:51 2026 by rpki-client