This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File:                     5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier:          OG5e5nJpvycm3cu/kKKRJ4yfMtUrJBsDlh0he+Jgr8s=
Subject key identifier:   40:D9:F6:C2:4C:BC:02:42:89:B3:B4:47:EC:B9:10:4B:7E:90:34:0C
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer:       /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial:       019C41D874EB2AC381FCC5DD0D0840336EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number:          042B
Signing time:             Mon 09 Feb 2026 10:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:30 +0000
Files and hashes:         1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: FQZZYx/V8kbFJOoMvu2t9+nD8BeXzx5hQBPi2gxqmGw=)
                          2: rhEDto9LAcb21HwkdYYZj263_-Y.roa (hash: vpJNUlsikgDQkbTcXSuN12zAPLHXSB+mONKm4pukuXs=)
                          3: yD0u6CnOVpuk9WvVpytgxRU4D0s.roa (hash: hrSKknGCTUHrpDRk30g1RyFkiWwqNDnyIxOmbM3GicI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:74:eb:2a:c3:81:fc:c5:dd:0d:08:40:33:6e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
        Validity
            Not Before: Feb  9 10:00:30 2026 GMT
            Not After : Feb 10 10:00:30 2026 GMT
        Subject: CN=40d9f6c24cbc024289b3b447ecb9104b7e90340c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:5d:fb:af:df:bc:0e:b0:15:62:57:df:da:
                    6c:42:7f:32:19:fd:94:e8:93:3e:1d:1d:4f:53:4f:
                    b1:d4:31:38:6e:2e:e2:48:ac:52:4c:01:cc:bb:18:
                    25:94:19:b0:6d:63:31:1c:8c:fb:8b:00:7b:f0:be:
                    79:c3:2a:5d:a7:1c:64:4c:60:e3:e0:87:04:1d:2b:
                    6b:b9:31:cf:13:7e:ca:e7:b7:2f:ad:83:98:50:12:
                    81:be:b1:11:07:db:71:c4:2f:6e:b7:0d:35:6f:24:
                    74:32:53:ad:be:b8:47:96:11:60:d4:47:49:23:66:
                    eb:28:f9:b2:b6:47:27:16:e6:29:e3:cd:09:61:1f:
                    15:79:a4:16:0f:4f:6f:b6:d0:57:da:ec:36:91:08:
                    a0:eb:d3:39:c4:ba:e8:6a:08:f6:66:33:47:41:cc:
                    81:a8:f1:2e:d5:a2:6d:ea:b2:ae:10:23:c3:06:ad:
                    37:c0:f7:a7:2e:c9:fd:5e:de:f9:87:8e:bf:bb:3a:
                    4d:57:d1:e8:3f:13:8b:b5:2a:2e:c9:5f:c2:b2:01:
                    a0:70:8e:de:e7:a7:8b:7e:0a:38:a9:ec:f0:e3:b8:
                    c7:4c:24:47:42:df:85:3e:c6:94:1f:76:95:b1:20:
                    19:f0:e0:90:e0:99:ef:64:a1:37:41:80:ae:6a:db:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D9:F6:C2:4C:BC:02:42:89:B3:B4:47:EC:B9:10:4B:7E:90:34:0C
            X509v3 Authority Key Identifier:
                keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:3d:60:c7:21:30:86:13:f6:24:93:9d:6f:49:a4:4e:db:
         bd:d0:98:81:b1:9c:25:68:bf:db:c1:74:94:67:1e:07:df:a5:
         09:be:94:9d:1e:38:0d:3e:3b:57:33:50:a7:ce:b8:20:1a:61:
         f1:4d:4b:9c:93:08:fb:01:e5:ca:7e:d9:19:8a:58:2e:28:d4:
         8f:07:7b:d2:9e:43:36:aa:ed:dc:4d:a1:85:6a:3a:0b:c4:d2:
         8d:25:20:60:30:34:49:4b:0b:7b:70:51:3a:dd:ae:68:67:cf:
         00:75:71:93:83:be:47:d0:09:41:c1:83:b8:86:d1:2c:05:2a:
         04:a8:23:d0:0c:53:e9:5f:c9:0c:bd:b6:6c:6c:65:0a:b3:9c:
         08:bf:1d:c0:c5:5c:29:dc:16:ad:da:33:fa:cd:0d:de:ff:d8:
         dd:77:0d:87:c1:38:3d:ec:96:bf:09:e0:ab:a8:05:96:cd:09:
         a4:8a:c8:b6:31:4b:84:32:9e:99:4d:bf:b9:ec:ac:5b:67:53:
         13:0f:6f:3a:a3:f5:01:a1:cf:8d:82:f2:97:c8:6f:ba:5a:86:
         9c:9c:28:1d:7d:f8:02:44:5e:03:22:0d:19:e3:23:2e:62:12:
         dc:82:a7:31:80:5c:ad:fd:fb:e0:4c:89:ab:2c:91:38:7f:df:
         77:a2:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:33 2026 by rpki-client