This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File:                     cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier:          AKNyEBYKr8L74DP+zAYsxB90XUASUIzvuaxi3B7trYA=
Subject key identifier:   2D:F3:0D:A7:DC:C7:02:83:D9:A0:19:B9:D6:BE:90:0D:63:31:19:E1
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer:       /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial:       019C435960EBF69294777DE03455EDBCD689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number:          05E5
Signing time:             Mon 09 Feb 2026 17:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:56 +0000
Files and hashes:         1: G6cwUHqt5rs7RBIFalSUJyMf9D0.roa (hash: fmLCgkdrA2EMgV+Qbi1vfUfbXeKr1iQ/NLq5KKaaLfQ=)
                          2: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: BZpBkXnxVA3S8ewCfoCZFoxROoN/5sOnQizARgXPCf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:60:eb:f6:92:94:77:7d:e0:34:55:ed:bc:d6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
        Validity
            Not Before: Feb  9 17:00:56 2026 GMT
            Not After : Feb 10 17:00:56 2026 GMT
        Subject: CN=2df30da7dcc70283d9a019b9d6be900d633119e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:01:de:0a:03:47:df:ab:84:67:27:c9:10:
                    cf:a3:90:79:77:7b:a9:ce:4a:ac:90:af:e8:cd:b3:
                    9f:f2:58:11:ca:ec:b8:1c:27:16:ed:cd:46:f7:7b:
                    f8:55:bd:55:a9:34:eb:64:85:c6:a3:74:65:76:a6:
                    cb:b1:50:3b:e2:b0:26:af:30:1d:af:e9:00:49:7d:
                    e6:66:6a:2e:35:8f:7a:d5:58:56:d0:38:92:0e:0c:
                    e8:d1:bf:8e:1f:5a:3c:82:ad:c5:30:fd:f3:4c:fb:
                    28:36:20:c5:f5:5f:35:4a:00:7f:da:ef:4b:8d:c2:
                    b8:c9:88:ec:d7:9a:bc:0a:6a:7d:01:74:02:10:60:
                    33:a2:9b:15:c9:08:36:d0:69:b6:63:1a:b7:f1:31:
                    4a:a0:a3:a3:11:21:fc:c2:03:41:26:9d:bf:da:31:
                    4c:59:58:cb:4e:de:19:6c:b1:37:4b:9a:ac:22:5d:
                    eb:33:03:fd:05:d5:7f:ab:97:91:e6:9c:98:c3:0c:
                    49:2c:0a:b5:31:9a:48:9c:36:6b:67:e3:0d:09:fd:
                    b4:79:dc:16:b4:2e:4d:75:97:08:42:49:35:91:d8:
                    26:d8:c5:44:65:b0:ea:24:08:75:0b:0c:32:9d:bc:
                    92:2b:45:39:21:a7:12:45:6d:fc:a4:f8:e3:2d:54:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:0D:A7:DC:C7:02:83:D9:A0:19:B9:D6:BE:90:0D:63:31:19:E1
            X509v3 Authority Key Identifier:
                keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:39:3b:71:c5:b1:b7:3a:f9:62:ca:d2:91:d9:41:69:0b:17:
         89:7a:6e:23:c9:1f:51:8f:74:f8:b9:86:8e:da:72:93:8c:66:
         8b:d6:df:7f:90:12:4c:99:8a:11:bf:93:9e:13:be:e4:df:dc:
         47:37:da:c0:de:89:58:e0:f2:04:e5:6f:6e:7f:0b:00:5c:cb:
         7e:f0:ad:85:2a:54:c0:e7:e3:e2:52:0b:00:12:0d:a2:b4:b3:
         71:1a:ec:0c:f8:8f:b2:0c:cf:b5:24:49:12:3d:17:5b:e3:8e:
         69:6e:55:a7:f1:f3:7f:41:b6:5c:fd:2d:11:71:6f:0b:98:8a:
         09:7a:82:97:aa:a4:de:8d:aa:de:77:8d:ea:30:27:90:cc:12:
         cb:2d:bc:a0:d8:5f:6e:23:c6:a4:9b:b3:2e:99:96:70:68:de:
         77:39:a2:6a:fb:26:a7:65:a4:ad:a7:11:eb:4b:4b:c3:8a:1c:
         ad:2a:f6:40:78:ac:c5:b2:aa:65:e1:20:13:5c:d4:e3:58:69:
         98:85:09:a6:f4:ed:f5:37:1a:b5:75:f2:ef:8d:e2:73:ff:87:
         ed:06:72:f0:96:b6:e4:e6:bb:5a:5a:e1:7b:d8:d3:f8:35:c5:
         d8:00:a1:d0:bd:90:02:4d:91:5e:3b:ed:cf:b3:7d:00:e2:4d:
         2e:aa:ea:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWWDr9pKUd33gNFXtvNaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw
MjBhOWQwHhcNMjYwMjA5MTcwMDU2WhcNMjYwMjEwMTcwMDU2WjAzMTEwLwYDVQQD
EygyZGYzMGRhN2RjYzcwMjgzZDlhMDE5YjlkNmJlOTAwZDYzMzExOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFAB3goDR9+rhGcnyRDPo5B5d3up
zkqskK/ozbOf8lgRyuy4HCcW7c1G93v4Vb1VqTTrZIXGo3RldqbLsVA74rAmrzAd
r+kASX3mZmouNY961VhW0DiSDgzo0b+OH1o8gq3FMP3zTPsoNiDF9V81SgB/2u9L
jcK4yYjs15q8Cmp9AXQCEGAzopsVyQg20Gm2Yxq38TFKoKOjESH8wgNBJp2/2jFM
WVjLTt4ZbLE3S5qsIl3rMwP9BdV/q5eR5pyYwwxJLAq1MZpInDZrZ+MNCf20edwW
tC5NdZcIQkk1kdgm2MVEZbDqJAh1CwwynbySK0U5IacSRW38pPjjLVSrnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3zDafcxwKD2aAZuda+kA1jMRnhMB8GA1UdIwQY
MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct
Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2
LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzk7ccWx
tzr5YsrSkdlBaQsXiXpuI8kfUY90+LmGjtpyk4xmi9bff5ASTJmKEb+TnhO+5N/c
RzfawN6JWODyBOVvbn8LAFzLfvCthSpUwOfj4lILABINorSzcRrsDPiPsgzPtSRJ
Ej0XW+OOaW5Vp/Hzf0G2XP0tEXFvC5iKCXqCl6qk3o2q3neN6jAnkMwSyy28oNhf
biPGpJuzLpmWcGjedzmiavsmp2WkracR60tLw4ocrSr2QHisxbKqZeEgE1zU41hp
mIUJpvTt9TcatXXy743ic/+H7QZy8Ja25Oa7Wlrhe9jT+DXF2ACh0L2QAk2RXjvt
z7N9AOJNLqrqkQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:53 2026 by rpki-client