This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          9jH+7x36SzPwco/T+dOiUpKRrVkVBqEZg0XJuloqmC4=
Subject key identifier:   BB:4E:91:29:C7:99:7B:E2:29:56:2E:BD:4B:EF:B4:06:88:B7:D2:F3
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019C42B46CAA25B1B8F6250283BC213D21CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0AC4
Signing time:             Mon 09 Feb 2026 14:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:46 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: ozrxEvpbiUmJizCdZkGvgbhhaFnWGQbMiZ232AHWWZs=)
                          2: Mt6QRqdp_WrVkpOaF9FYfafU_u0.roa (hash: JbXZMjWgYdLf0n3lOW4EokZ/+GnyNpMVp+hSo+2kfOU=)
                          3: dAQCpkChDXivo83BdGELDocTtqk.roa (hash: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o=)
                          4: mhM6I7wL_0dpX-c9Bjn2cXjwD30.roa (hash: sj8SfZTxRtzV3SDjhpPFegvK0EBP3hd2bfneJn45Gsk=)
                          5: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (hash: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8=)
                          6: ohbKePXamXXPoWhEA80w3vW0W64.roa (hash: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:6c:aa:25:b1:b8:f6:25:02:83:bc:21:3d:21:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Feb  9 14:00:46 2026 GMT
            Not After : Feb 10 14:00:46 2026 GMT
        Subject: CN=bb4e9129c7997be229562ebd4befb40688b7d2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:22:2a:77:b8:73:1a:e3:28:3a:ed:40:0d:
                    0c:62:54:32:4a:44:eb:06:b8:ce:2d:35:e0:50:71:
                    ee:ea:14:cd:df:08:d5:2d:41:b5:59:a7:d0:be:b4:
                    8c:2f:df:b8:4c:fc:e5:e5:bf:04:82:a8:36:63:0b:
                    41:c4:37:94:11:6e:6b:42:41:f8:33:c4:05:1f:d7:
                    7b:0b:2a:b5:8d:cf:9c:e8:22:23:2d:fb:92:6b:91:
                    00:b8:0b:92:b9:8a:b9:6f:d5:88:ce:f3:82:60:c2:
                    97:73:13:65:47:f1:e2:1e:5a:3e:89:62:92:8b:83:
                    f6:d2:74:a6:c6:6c:ac:42:d6:17:14:ea:c4:ce:17:
                    ce:83:38:a0:b7:76:40:cb:26:ac:63:f9:28:94:c1:
                    d4:e3:c9:4a:4b:d1:bf:e8:ec:2f:47:4f:61:c1:7c:
                    c9:2b:88:ae:5c:32:76:c0:a8:8d:3d:76:b7:73:d2:
                    17:80:8b:2d:9e:fe:4d:92:dc:03:69:4b:03:24:e5:
                    a1:ad:9f:57:b4:52:3d:12:74:a0:84:3f:c5:0d:25:
                    a2:d9:ae:9b:01:76:81:10:cb:a2:65:69:9b:bb:48:
                    e1:5f:3d:15:2e:9f:c9:d5:69:bf:9a:b8:09:fb:7f:
                    1c:f0:cf:1a:97:dd:0d:86:35:23:12:62:44:b9:53:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4E:91:29:C7:99:7B:E2:29:56:2E:BD:4B:EF:B4:06:88:B7:D2:F3
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:b2:f9:80:85:c5:99:96:5a:c3:c1:b8:19:dc:d2:21:cc:
         69:12:80:df:2c:34:b5:c3:06:f9:c5:a6:cb:5f:e0:be:b7:d8:
         78:c2:17:ea:17:0a:09:6b:c4:a8:16:b6:f6:a6:0d:cf:07:89:
         aa:b7:86:65:50:3c:61:f1:2e:6a:65:69:b2:d0:fa:bf:42:92:
         2d:d4:ee:4e:f2:6b:00:b7:2c:d0:df:c0:f7:d5:7d:f2:aa:57:
         74:d7:cc:65:99:fe:cc:de:2c:3a:dc:d4:86:5b:56:bc:74:b8:
         e1:9c:b6:84:3f:1d:2d:3a:0b:2a:79:01:df:28:fb:e0:51:15:
         c1:64:02:4a:d4:70:9f:85:40:d7:92:88:e7:37:01:0e:c7:e3:
         f2:1c:24:63:fd:ae:85:ef:1c:cf:e0:8c:35:d3:e3:85:de:b3:
         89:80:7a:c5:62:1f:00:55:07:ea:6f:ea:fd:1f:3a:94:f6:d9:
         d3:2a:ac:41:18:40:73:0c:fa:1c:8b:b0:e2:68:a3:6d:03:f6:
         3f:cd:28:8b:41:82:97:71:a6:d5:30:52:fc:f8:cf:f5:b1:df:
         74:fa:38:d4:69:34:0a:71:7c:05:29:a2:80:0d:6b:25:6d:db:
         34:bf:30:c8:ea:c9:1e:a1:f8:28:0b:68:a0:8d:4b:44:27:ff:
         dd:1f:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:31 2026 by rpki-client