This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          61TNCZA5TT1LtPCmTDKRcr8NbY4vP4BH6KG9u1fIfvk=
Subject key identifier:   34:4C:65:83:EA:71:17:0E:0E:CD:86:C7:F4:57:BC:46:42:FD:39:B1
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       019C43C751C9DAE910C7ABCC3F1CBEE9BE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          1352
Signing time:             Mon 09 Feb 2026 19:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:01 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: +ot5/NHcKIq1Ks6FuUC5MklCQ0xmqh6PZTx+UPwvgMw=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: X1C5Q3jf1-ZD6yYqJzqtK8cqHrc.roa (hash: hB+YPktyMceC694vbXkG0rzfVIksJqPCOyiM62e3fn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:51:c9:da:e9:10:c7:ab:cc:3f:1c:be:e9:be:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Feb  9 19:01:01 2026 GMT
            Not After : Feb 10 19:01:01 2026 GMT
        Subject: CN=344c6583ea71170e0ecd86c7f457bc4642fd39b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:ba:b6:9b:8d:28:61:e2:0e:fb:ae:48:5e:
                    37:3c:40:d1:09:7f:21:ce:cd:05:34:7d:06:e3:f8:
                    19:13:2f:1d:33:5b:c6:24:24:de:64:68:35:54:3c:
                    a2:e9:ac:03:25:78:c5:58:06:cd:26:bf:42:13:32:
                    40:94:5b:e6:19:06:bd:9e:be:8e:6b:ff:0c:ef:9f:
                    d7:c9:92:14:ac:35:89:50:22:ea:c9:54:fb:e2:a5:
                    f9:3a:44:e3:d3:b2:4a:a9:ea:e5:5b:55:9e:e0:2b:
                    aa:86:64:61:40:5f:3f:c6:88:38:17:d6:42:83:c1:
                    74:f7:96:9f:c6:8f:5e:bd:a0:d1:3e:1c:6d:1c:90:
                    24:a4:97:44:43:96:fb:5c:10:63:a8:fd:b8:9d:7e:
                    73:ae:6b:d0:23:24:4d:34:ea:ad:cf:ba:9c:fb:aa:
                    07:cf:6e:2a:ca:52:b7:86:f3:95:3d:65:49:7e:43:
                    64:88:d1:0d:f2:69:3d:84:ed:95:4a:a5:12:c3:73:
                    5d:20:f4:70:76:e8:23:aa:e7:29:93:3b:f5:9b:46:
                    35:20:d2:54:80:f0:68:1a:fe:33:36:3e:a7:04:7c:
                    62:e3:2a:1d:44:a9:54:d9:fe:6d:52:2c:0b:81:f5:
                    c0:24:48:2b:93:22:0a:02:fe:c6:77:37:c3:92:07:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:65:83:EA:71:17:0E:0E:CD:86:C7:F4:57:BC:46:42:FD:39:B1
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:c1:fb:32:c5:26:f0:8a:ee:44:94:2e:be:2c:82:df:57:
         16:59:3b:92:cd:af:13:e4:8e:2e:7a:4f:86:9b:c1:ec:91:c7:
         39:05:6d:42:3c:90:bc:c0:29:bb:be:80:9e:67:f2:25:31:cf:
         04:f7:1a:5e:ee:56:7e:80:c7:20:55:e8:12:62:fb:08:63:ad:
         ce:31:cc:d5:13:f8:57:e1:21:cd:c8:83:e2:ed:83:0e:4a:7a:
         c1:01:e5:f9:2f:84:1d:11:f5:00:dd:07:f4:c2:67:9d:e6:b1:
         51:f9:74:69:61:0f:12:ee:c7:02:48:21:ff:38:ea:d3:de:17:
         82:c6:7e:32:19:ca:b2:b3:46:8b:8a:e9:00:dd:e3:a8:af:f7:
         5c:2e:08:31:18:a2:fe:d8:b4:86:30:da:07:65:4d:e0:a0:2e:
         b2:33:20:3e:76:1f:5f:b9:cf:93:0f:82:0d:f4:d2:7a:71:b9:
         9e:5a:f7:9f:f3:52:32:18:4f:9e:c4:23:86:51:fc:77:71:bb:
         b2:1f:18:e6:9a:45:6b:c6:63:45:99:a5:45:87:6d:98:14:73:
         7a:0b:c5:13:6f:0c:ef:a5:5c:d3:b0:ab:81:1a:5e:5d:c6:69:
         c3:34:1f:f4:80:90:4c:32:36:31:ae:61:a6:8a:af:1d:18:57:
         49:c9:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:24 2026 by rpki-client