This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          sFQqElsA5vB4k9mifP+OCjRoM+3lrCrCLRR9UpVmm3I=
Subject key identifier:   BE:3F:41:4C:10:EF:D6:5B:ED:35:8A:18:0E:7C:EA:4A:92:E9:DF:6E
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       019C4434979669681090BD75847E77F532C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          0A20
Signing time:             Mon 09 Feb 2026 21:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:23 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: iQX1O6JU+Pu7Rsvan5Vr7UUvPQDk4j1DxfG8maBk5vk=)
                          2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:97:96:69:68:10:90:bd:75:84:7e:77:f5:32:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: Feb  9 21:00:23 2026 GMT
            Not After : Feb 10 21:00:23 2026 GMT
        Subject: CN=be3f414c10efd65bed358a180e7cea4a92e9df6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:bc:6c:55:6b:7e:d7:8b:3e:06:19:c2:2b:
                    45:68:b4:09:95:19:90:19:82:f8:84:b2:59:8d:4b:
                    80:1b:36:70:2f:59:f1:cd:eb:2c:d4:ea:72:e6:3f:
                    f1:51:5e:13:45:e5:f7:b4:c8:dc:b7:ee:6c:10:0d:
                    37:5d:40:12:e5:53:af:98:28:85:6d:32:be:01:f1:
                    71:12:cf:56:3c:85:74:e2:51:42:53:8a:53:de:3b:
                    c0:42:a6:85:df:a7:cd:dd:30:65:d0:c9:f4:ba:01:
                    c4:cb:25:9b:77:ae:b2:3c:bb:e1:58:09:04:6f:a3:
                    c3:8e:2b:00:8a:77:f8:b8:6e:07:14:77:6c:a5:e7:
                    44:f7:ef:85:2a:57:f0:fd:93:35:a5:4a:59:51:03:
                    68:4b:ec:aa:ea:c5:e7:8f:c2:05:db:29:f7:98:38:
                    4d:7a:34:b6:2e:cb:0d:58:67:39:d4:30:d2:d9:3d:
                    a6:23:5a:cb:e9:3f:1c:0f:16:d0:82:53:f7:49:4e:
                    c3:84:26:a7:09:7a:ce:00:e6:77:40:ff:f0:72:cf:
                    12:74:6a:d0:62:06:07:09:4c:e7:95:57:20:3a:05:
                    2b:3c:8a:15:87:54:a9:5f:57:87:98:74:a3:90:0d:
                    f2:ab:84:39:2f:b0:47:bd:49:6f:33:c6:3c:b4:28:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3F:41:4C:10:EF:D6:5B:ED:35:8A:18:0E:7C:EA:4A:92:E9:DF:6E
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:a0:e7:6e:0d:3c:5c:b1:b0:d1:40:56:65:5f:92:32:df:
         86:d5:29:dd:3a:ce:20:02:01:f1:25:c7:51:e2:68:17:e8:4c:
         96:9a:cc:60:a9:54:1d:17:97:11:79:71:0c:7c:11:23:a1:84:
         78:eb:96:d8:df:8c:7d:7c:0d:48:32:31:2b:16:cd:d4:23:3a:
         75:82:8e:fb:b7:c2:10:3c:47:0f:16:c6:a3:24:b1:42:6b:82:
         29:40:83:cd:1e:ed:ea:4a:dc:12:e4:16:a5:4f:dd:54:08:e0:
         4f:b7:96:1e:f3:43:99:c1:3d:74:f2:27:26:63:06:92:16:65:
         ac:1d:b9:c7:4a:58:72:60:6d:6e:99:34:46:bd:37:29:e7:86:
         04:33:2b:52:5a:4e:84:c8:1b:fa:9f:8b:77:fc:cf:df:6a:0c:
         e7:47:de:d7:77:5f:8b:c3:a8:18:f7:7e:0b:99:60:56:14:42:
         bc:95:16:f8:1d:0e:21:0c:29:72:f9:99:47:8f:b4:ea:af:20:
         bc:89:e2:00:e0:7f:32:24:e8:3b:fe:51:a8:e8:51:87:4a:35:
         57:25:ce:93:b8:b3:2b:16:bb:54:de:e9:dd:e2:99:66:3d:ad:
         9b:9d:4b:7f:70:93:e4:0f:8f:f9:e6:96:ab:09:11:3d:3b:31:
         80:27:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:09 2026 by rpki-client