This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File:                     5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier:          6OsDpen2JNM/5e9/cq7Z6JvKj60NjTJVuEbYDhc8S0w=
Subject key identifier:   ED:55:EB:B4:7C:0B:5A:B0:14:32:0F:7A:89:6C:0C:8A:AE:2E:5C:C0
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer:       /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial:       019C438FAF3584A521F9DC5EEAC5534CF0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number:          14C2
Signing time:             Mon 09 Feb 2026 18:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:15 +0000
Files and hashes:         1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 1VBgbYefsdkCCbE9OuS5kVPI1RFAmE2FCII3ZRCfb7U=)
                          2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:af:35:84:a5:21:f9:dc:5e:ea:c5:53:4c:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
        Validity
            Not Before: Feb  9 18:00:15 2026 GMT
            Not After : Feb 10 18:00:15 2026 GMT
        Subject: CN=ed55ebb47c0b5ab014320f7a896c0c8aae2e5cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:bc:8f:a7:cd:7c:fa:80:1f:2b:f8:d6:05:
                    cb:9e:52:e3:bb:f6:85:1c:d1:fa:67:32:0c:8a:3d:
                    13:db:b6:41:1b:58:35:a0:ec:04:10:58:a6:bb:94:
                    d8:90:6a:b2:26:4f:d4:e5:c6:2b:86:28:6b:d6:7d:
                    f3:b6:32:89:e9:de:2b:89:6e:50:cf:ea:2b:81:d9:
                    32:a9:bf:c5:92:32:fb:b3:85:df:25:39:55:10:f6:
                    90:94:7d:4a:70:24:e1:7a:2f:5f:f2:fa:c0:22:3d:
                    ef:f9:44:fa:2c:dd:20:b5:4d:58:2f:6c:b0:d3:0e:
                    f6:f6:e5:4c:5b:1d:1c:dd:f6:b7:2f:4e:ad:ce:91:
                    f2:eb:56:14:b5:d9:2d:a9:30:f5:26:66:68:8e:be:
                    d1:df:4d:9b:a5:6e:1a:bb:e4:c7:95:1e:da:ce:a0:
                    4e:de:f2:d2:05:f2:d9:b5:42:d1:c6:de:15:2f:f3:
                    d1:f0:1a:66:09:88:6c:87:ea:69:54:2d:f1:4e:f3:
                    a3:85:e0:16:a1:db:2c:cc:01:87:c7:a6:91:fa:1b:
                    53:f5:67:f0:7c:63:82:bd:4b:9a:0b:2e:03:54:54:
                    48:e4:5d:b0:47:58:2b:cf:34:fb:73:41:87:86:17:
                    40:38:cc:05:e9:5a:88:25:88:ce:5d:a7:f9:b7:fc:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:EB:B4:7C:0B:5A:B0:14:32:0F:7A:89:6C:0C:8A:AE:2E:5C:C0
            X509v3 Authority Key Identifier:
                keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c6:cd:cb:57:6a:8a:90:6c:9b:43:76:27:b9:33:32:c1:a9:
         42:01:f0:e6:d8:97:44:77:f3:23:bc:03:aa:c3:32:a0:97:29:
         cd:56:30:06:4f:22:0b:21:d5:75:bd:28:c1:a3:03:3f:25:dd:
         6c:b9:a8:15:5c:39:e2:d6:99:eb:9e:ea:85:50:bd:14:da:a8:
         d6:34:77:da:ae:17:b6:90:96:fa:65:d6:9a:68:fc:54:b4:dd:
         9d:82:e0:63:83:be:8a:b4:34:fe:01:52:02:11:e2:cf:de:df:
         60:f1:43:6c:a8:c5:83:47:13:ed:73:80:72:7e:ad:c3:11:08:
         55:89:f1:82:37:ea:af:9f:9b:84:58:d5:3f:cb:11:9b:38:da:
         a2:28:e9:eb:49:8f:8a:81:87:64:74:a6:32:68:b4:16:ee:b7:
         df:45:c5:79:6d:57:52:97:a9:cb:14:42:63:cc:e1:85:69:a1:
         b3:45:8c:05:fe:d6:db:e1:12:1b:a7:ab:cc:95:fd:23:58:a6:
         01:32:f5:05:0f:6a:de:16:7b:ca:f6:3e:2f:69:b2:56:9e:32:
         7b:7d:ab:66:92:99:99:16:0a:f9:8b:a6:79:3f:d4:20:0b:9c:
         38:f7:3a:94:71:bb:bd:7e:23:45:6c:40:18:aa:43:61:ea:a4:
         cc:c9:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:35 2026 by rpki-client