This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File:                     5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier:          TWKQwoNZ+5vRr9QZr5OO2b199jgXM+pyKoFnBS8EpEU=
Subject key identifier:   4F:DA:4D:13:FA:AC:1C:AA:15:EE:12:36:67:A2:29:B9:51:A8:24:2C
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer:       /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial:       019C427D34ACA42DE1179298D0F5CAA54039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:27 +0000
Files and hashes:         1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: 6igU6tkVDalh+MFS66Vx6/nWD3D8j6swkFH3MzzIZus=)
                          2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:34:ac:a4:2d:e1:17:92:98:d0:f5:ca:a5:40:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
        Validity
            Not Before: Feb  9 13:00:27 2026 GMT
            Not After : Feb 10 13:00:27 2026 GMT
        Subject: CN=4fda4d13faac1caa15ee123667a229b951a8242c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:3f:97:1e:8f:c1:3e:30:1c:99:98:26:0e:
                    12:16:e7:d7:4f:f6:95:d3:ee:00:bb:b2:21:84:00:
                    e9:e6:16:ec:0c:9d:54:04:41:8b:46:39:71:98:09:
                    56:4e:5b:f9:07:61:eb:31:1f:af:dc:07:cb:c2:f9:
                    0c:7a:0c:21:88:19:76:1b:d6:38:f0:12:2f:56:fe:
                    42:91:9b:82:a9:12:51:36:bd:3d:8e:45:e9:7c:27:
                    ce:3e:7d:7a:75:a7:2a:d8:59:72:36:d7:a6:2b:b3:
                    24:b6:b8:df:66:de:65:c7:ee:d6:f0:8b:c5:5c:f7:
                    7f:52:ad:a9:23:2b:2d:16:13:10:ef:d1:bf:ba:dd:
                    51:24:e5:5a:0c:2e:9b:f2:f1:d4:b8:80:81:86:14:
                    44:a7:3b:87:39:92:2d:0e:6c:55:b3:42:eb:4b:a1:
                    12:12:b0:98:14:ae:5e:00:6d:d8:54:91:3a:70:86:
                    99:5b:9a:39:6e:36:eb:21:80:fd:82:2f:d9:48:ac:
                    ce:8b:6e:98:10:70:77:8e:a3:bd:62:f2:70:05:83:
                    d7:fd:0e:4a:d1:bd:0f:5d:62:07:b7:5c:0e:cd:a6:
                    41:21:d2:b6:9a:a6:23:b9:5e:62:25:f3:d9:84:c1:
                    99:0e:8f:b3:75:29:1a:42:66:9d:ab:f1:67:24:d4:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:4D:13:FA:AC:1C:AA:15:EE:12:36:67:A2:29:B9:51:A8:24:2C
            X509v3 Authority Key Identifier:
                keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:95:a8:51:d5:a8:19:4c:23:32:e5:7c:52:cf:58:27:30:d4:
         a5:8e:97:fc:21:c3:db:07:c3:c3:11:2a:25:25:56:8e:57:b1:
         a3:25:b3:1b:8a:5e:ee:a5:ba:fa:4b:04:7e:6f:48:f9:03:74:
         e2:b8:43:9e:b7:12:cd:ab:68:d6:95:88:7f:39:70:c2:d2:2c:
         4e:7d:bf:0c:ef:37:26:c6:7d:43:5f:85:ab:67:a9:e4:83:33:
         c5:ee:a0:af:84:9d:67:24:7f:86:d4:6e:fe:b2:46:af:4f:cd:
         20:96:21:f3:d7:f4:97:60:72:9f:53:b2:11:2d:6a:7d:aa:9f:
         e2:fb:89:44:f2:05:e2:7e:3b:f0:23:99:a5:7c:99:69:dd:a7:
         a4:5d:8e:10:73:eb:55:79:34:1e:35:02:b8:ec:56:22:3e:c9:
         5e:32:72:61:91:ef:52:71:59:52:f9:fc:90:ae:c3:8d:15:0a:
         ba:81:96:85:af:a0:91:be:a0:77:73:86:ad:b6:18:07:c4:c2:
         4b:9d:e2:fb:0f:5c:b0:9d:94:85:c8:2b:39:da:8a:92:aa:7a:
         50:b8:01:20:c7:18:33:fa:8e:ad:5a:13:88:35:78:e2:55:5e:
         b8:40:c2:95:cf:6d:6c:10:e3:d8:21:22:2b:4d:91:89:8d:27:
         e4:6e:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:46 2026 by rpki-client