This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File:                     5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier:          h04XCz9wNqLfPqH4QF1r/UnZizJo9VUWJRCmKQIYoHY=
Subject key identifier:   9C:D7:0D:3D:30:9A:17:18:79:8C:BC:85:0A:6C:81:46:E2:58:45:CD
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer:       /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial:       019C446C2B3D93D7BE0E05AE835BF6E183E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 22:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:05 +0000
Files and hashes:         1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: o6TetXamihg2GOW1tBOyVqnFTiPLZVV/yurG91nL1IA=)
                          2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:2b:3d:93:d7:be:0e:05:ae:83:5b:f6:e1:83:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
        Validity
            Not Before: Feb  9 22:01:05 2026 GMT
            Not After : Feb 10 22:01:05 2026 GMT
        Subject: CN=9cd70d3d309a1718798cbc850a6c8146e25845cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:91:c2:45:3f:54:c4:72:b9:c5:63:45:b3:
                    ce:2f:e9:a7:5d:3d:4d:90:b8:1e:61:97:fb:43:41:
                    8d:4f:7e:ee:08:dd:99:eb:e3:d6:fe:99:8d:4b:e9:
                    db:69:46:cb:9e:f8:b7:ce:55:22:e0:78:15:f1:27:
                    f8:5a:22:de:ae:9a:f6:b9:7a:1c:c9:23:7c:1b:24:
                    13:88:40:e7:2b:1b:ff:a4:d1:3c:b5:86:cb:c5:c4:
                    54:6c:7d:07:3d:02:eb:a5:21:2e:15:68:3c:b5:68:
                    af:03:7d:24:9d:8a:f5:54:11:e8:19:b5:67:3d:6d:
                    77:1c:e5:27:29:96:d4:f3:a6:03:f2:d5:aa:1e:ef:
                    9c:69:1c:18:4e:1e:0c:68:73:e0:53:d5:59:e2:1d:
                    8b:a8:a6:6d:a1:36:bd:48:14:c5:bc:41:2a:2d:07:
                    e9:69:58:50:c3:9a:f3:28:0a:e8:02:e7:40:68:2f:
                    6d:e3:e5:25:13:4f:9e:31:70:3e:98:85:f8:d2:d9:
                    10:42:c0:10:6b:ee:b6:4a:65:ec:6d:14:b8:96:05:
                    5b:22:1e:cb:ae:fb:99:0f:cf:48:54:04:35:aa:0f:
                    c1:cb:75:29:45:1c:91:50:e9:4b:de:64:e8:6d:64:
                    12:ee:2f:25:02:e3:c9:31:3f:3b:65:b6:b8:61:8a:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:0D:3D:30:9A:17:18:79:8C:BC:85:0A:6C:81:46:E2:58:45:CD
            X509v3 Authority Key Identifier:
                keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:43:0b:50:fe:dc:e8:3a:7d:71:67:ce:cf:f7:7c:d9:fd:
         da:15:d1:90:07:ac:0e:db:24:ee:4d:96:07:93:1f:c7:50:ed:
         b8:a6:12:f9:02:1d:6b:11:69:fb:07:25:3e:6c:c6:07:cf:51:
         06:9b:ce:b7:5d:2a:8d:d6:55:5d:d6:a6:16:89:81:79:11:01:
         6f:56:aa:0f:6a:48:f6:10:48:f6:93:c8:8d:d3:01:23:1a:2f:
         65:6d:9d:06:1d:57:dd:ee:f3:7d:2d:15:b1:90:80:9e:09:fd:
         cd:60:e0:96:9f:04:31:0e:4f:93:97:6a:e9:56:7a:e4:ae:62:
         74:0e:f5:ca:aa:72:bc:5f:16:54:06:bc:17:7a:c3:29:8d:2e:
         27:e5:e6:cf:65:39:5f:66:61:9b:bd:f9:24:dc:c0:26:b7:e8:
         b1:eb:b8:60:48:3a:2c:28:64:2f:4c:27:be:aa:1c:ff:96:1c:
         04:fc:c4:92:21:c5:e8:1c:b5:bf:92:21:47:62:49:50:ac:12:
         7a:53:38:b4:53:b1:f6:a7:47:0e:00:e6:21:62:4c:b4:ac:38:
         3f:af:aa:cd:e9:cf:9b:f3:59:b6:59:c1:5b:27:7c:bb:31:f5:
         47:f5:7e:29:43:19:e5:a6:27:9e:71:4a:3a:42:f3:f0:c3:d9:
         83:79:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:06:41 2026 by rpki-client