This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          AOGH0DJqLFEyCn0dQpc4MePDWDLYCa0Guiy4vfiDswM=
Subject key identifier:   32:41:BE:E9:7C:88:98:6A:1C:AB:95:E4:C0:70:FE:6F:00:D7:3E:5B
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       019C43FDABDE0ED691499CCEF5C560F968AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          1111
Signing time:             Mon 09 Feb 2026 20:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:23 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: LsJyLcRdN2faBBCwqTpTlKwHrsJMtddM6Q831j0uMs4=)
                          2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:ab:de:0e:d6:91:49:9c:ce:f5:c5:60:f9:68:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Feb  9 20:00:23 2026 GMT
            Not After : Feb 10 20:00:23 2026 GMT
        Subject: CN=3241bee97c88986a1cab95e4c070fe6f00d73e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:ed:21:60:6f:06:d5:b9:3c:9b:15:a6:77:
                    97:84:e3:25:00:ea:64:a9:a1:e8:50:80:ee:95:14:
                    b4:69:d2:f9:b8:2e:17:30:40:37:ec:5d:7c:ad:31:
                    20:0d:77:f6:f3:7e:d4:3c:fa:fd:8c:a3:bb:88:33:
                    d8:91:fb:3f:af:47:12:d4:5e:00:12:83:19:bc:8e:
                    85:e2:d9:ed:ae:39:c2:c3:a1:3d:ec:fc:99:f3:9a:
                    a8:14:81:91:f9:69:8f:0c:f6:a6:a3:ca:80:fa:80:
                    af:c2:b3:db:68:7a:7e:30:75:e8:dc:32:50:4b:fe:
                    d7:5d:1e:da:bb:c2:14:76:fa:18:54:26:09:1f:dd:
                    d1:ae:4c:6b:1b:f3:6e:89:44:9a:22:78:28:d2:e2:
                    c2:cd:e6:af:62:df:64:21:ba:c3:e3:f4:bc:2b:dd:
                    da:eb:aa:85:74:33:eb:2d:0c:35:4a:9a:28:ea:b0:
                    20:57:64:24:0b:01:ec:3f:7e:d0:14:50:f5:e8:4b:
                    0b:d2:ac:99:f4:3a:ee:28:b7:e3:50:f1:08:59:39:
                    4b:da:b3:38:02:e7:50:fd:b4:77:0e:5b:60:ce:99:
                    2c:59:14:a8:e3:48:66:a5:3a:78:25:f7:b2:7c:1a:
                    d7:c0:c0:18:7c:b5:3e:05:53:28:50:fb:82:3c:37:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:41:BE:E9:7C:88:98:6A:1C:AB:95:E4:C0:70:FE:6F:00:D7:3E:5B
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:fe:89:0a:71:21:63:b0:a1:63:a3:16:ed:3c:ea:a6:c9:
         94:c5:b0:80:a5:c2:4a:80:cc:8d:ec:e5:85:16:47:f3:63:18:
         87:71:a2:dc:39:c2:0a:1f:f1:c7:30:2f:de:dd:a2:f9:bd:b2:
         ea:10:ac:74:20:de:f7:24:77:e9:40:ac:7c:ad:08:4a:8a:ff:
         6f:78:70:06:b9:35:cf:e7:ce:bc:25:88:60:3b:7d:99:29:15:
         6a:14:36:37:5e:85:10:e4:eb:77:08:36:24:5e:24:e5:71:0f:
         b8:82:63:0d:61:97:74:73:30:90:7a:82:36:74:89:c8:d0:d4:
         f8:7a:f8:e3:b5:d7:07:26:1e:a0:a6:ef:e2:d5:13:27:b0:e3:
         24:92:59:17:45:ed:7b:99:cf:ae:05:6e:c6:d5:aa:d2:34:37:
         a5:f3:60:ec:2e:93:4c:fa:b8:51:26:63:9a:d0:b7:97:88:62:
         79:94:06:c8:d6:09:09:1c:cf:83:20:e9:c7:54:a1:d4:1d:b2:
         d9:bc:35:f8:54:ec:bf:39:72:41:d3:50:5c:04:f2:5f:8c:24:
         f3:68:53:2b:c0:b5:2a:c5:b4:92:20:0d:a8:cc:3a:9a:9d:0f:
         95:a3:fa:7c:08:d6:c7:ef:75:42:1b:21:22:76:8a:c6:45:ff:
         bc:4c:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:50 2026 by rpki-client