This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File:                     5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier:          Vs5o1S/uSzvADpFpdUn8C26p22Ju6hz537Xtb/z+PuY=
Subject key identifier:   25:4F:E9:4A:89:CE:88:4C:08:E3:7A:B4:C1:1A:96:B8:3D:F5:00:05
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer:       /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial:       019C43596309D52828ACCC5F5A41C2EA0FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number:          17A1
Signing time:             Mon 09 Feb 2026 17:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:57 +0000
Files and hashes:         1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: /T8KO+E9hdPPhheN6CTdA0VH1d3LfVSaTUpFXL/aEAk=)
                          2: 8sL7bBvUgTkJCvQisEREV4oTHTY.roa (hash: UVYp1CMTJL6S6Pi+AsLy1eQnDuTmz/e2tO8gZBGHYuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:63:09:d5:28:28:ac:cc:5f:5a:41:c2:ea:0f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
        Validity
            Not Before: Feb  9 17:00:57 2026 GMT
            Not After : Feb 10 17:00:57 2026 GMT
        Subject: CN=254fe94a89ce884c08e37ab4c11a96b83df50005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:52:29:b0:65:b8:ae:18:04:6a:96:89:20:
                    b1:6b:b1:69:ab:77:36:39:5d:aa:37:b8:33:2d:3b:
                    12:2b:54:ab:7e:df:8e:3d:37:2e:27:d8:c6:29:6b:
                    fa:5d:22:5e:91:2b:f0:78:8f:c9:a0:6f:1e:9b:92:
                    9e:58:42:76:fb:aa:de:73:db:45:bf:e6:f8:5b:9a:
                    a5:c5:50:26:76:50:69:2b:30:c6:03:37:36:54:53:
                    c4:0c:4a:3b:da:2d:09:8a:69:80:eb:06:0d:40:6d:
                    57:67:2b:30:b4:bf:d2:1f:ff:00:48:73:f7:f6:c3:
                    60:60:cd:12:2a:b7:ec:28:b9:8b:40:22:03:9c:25:
                    43:84:a5:cc:33:dd:64:5d:9e:19:b3:5c:c9:29:17:
                    25:a5:1f:05:f2:5c:15:c9:12:d0:fb:3b:b3:cc:77:
                    70:c2:1e:2a:b2:35:6d:68:a9:14:cb:27:6b:f5:e5:
                    b3:56:69:40:98:e0:f7:71:1c:56:60:47:9b:52:4e:
                    22:de:fe:49:93:c3:b9:0f:0e:82:4c:7e:01:86:25:
                    54:db:f2:3f:d8:06:30:a4:0a:9e:1b:cf:72:df:e9:
                    a8:dd:8f:b4:68:d5:64:fd:07:47:54:8c:2f:7d:3c:
                    01:dd:f0:18:87:b0:65:5c:ce:a8:74:b8:82:ac:7c:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4F:E9:4A:89:CE:88:4C:08:E3:7A:B4:C1:1A:96:B8:3D:F5:00:05
            X509v3 Authority Key Identifier:
                keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:97:c1:69:fa:21:16:a3:d7:3a:dd:81:84:c6:9b:f4:ad:e4:
         11:9e:da:f7:a8:53:ad:3c:1e:b6:c2:7d:54:93:5b:56:25:28:
         b2:ac:e8:68:b9:a2:c4:4c:33:1a:34:ee:c0:cd:2a:86:cd:df:
         16:bd:be:13:d9:ac:44:ad:28:f6:63:56:37:8e:49:d1:93:4d:
         ca:77:40:db:62:2c:6e:d0:2a:1d:0f:dd:9d:c9:90:e2:07:be:
         15:f4:7c:24:08:0d:81:30:c5:19:57:2a:41:6e:3b:d9:7c:4f:
         04:10:48:05:e3:a3:70:35:7f:24:ba:16:db:da:fc:36:0a:6b:
         ac:14:e6:f7:76:db:49:51:3d:9d:4c:9b:53:4a:8d:93:24:f2:
         11:24:12:60:2c:ea:65:77:35:f2:fe:23:17:46:cb:1b:81:59:
         fd:4e:f2:ae:be:00:97:0a:4e:50:f4:43:dd:cd:c4:4f:a0:ad:
         1a:5a:c2:e8:2b:20:4f:39:f4:be:cd:5a:09:66:24:08:e6:80:
         39:06:08:37:54:18:ed:60:bf:9c:7a:2c:ed:47:5b:a2:86:b2:
         84:93:3a:53:a8:06:43:69:d4:7c:9a:59:7e:9e:7b:d9:0d:b1:
         b3:e2:3d:a8:80:a3:fa:22:e5:2c:91:ca:3b:53:bd:92:d6:04:
         2a:3d:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:00 2026 by rpki-client