This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          mBEOjJHVp7x7ZhRvr42ow16dh07muGXnMn+xRO3yzQM=
Subject key identifier:   E3:B3:AA:FC:5E:07:51:1D:EB:C3:E4:85:E9:0D:04:3F:3D:E3:57:1F
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       019C42101008CE73FEFFB3D0AECC61BECA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0EDA
Signing time:             Mon 09 Feb 2026 11:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:14 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: Lb4JRN8IN2seU0zQ50exGbiNIuc3w9KeOTEsYN/GTTw=)
                          2: xf_QUU1oboJfw8GDN5-xVx0M_-E.roa (hash: rDjY7MiBuFT4JV2RH/A0NQJ6KgI0D96lXBHlUo5cGuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:10:08:ce:73:fe:ff:b3:d0:ae:cc:61:be:ca:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Feb  9 11:01:14 2026 GMT
            Not After : Feb 10 11:01:14 2026 GMT
        Subject: CN=e3b3aafc5e07511debc3e485e90d043f3de3571f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:a0:52:78:ae:6a:5d:0f:df:da:a6:8b:2f:
                    8e:36:15:49:ff:19:68:bc:c8:c6:e2:8e:32:78:be:
                    a2:d0:4f:09:fb:06:1a:9b:5c:56:56:2f:46:94:be:
                    5f:7a:0e:c5:e8:10:ec:d3:74:11:1d:bf:a3:80:ee:
                    66:04:46:79:f9:f1:d0:d1:50:64:51:30:3c:95:20:
                    75:82:68:6a:c3:9e:46:a2:ed:f6:74:ce:32:44:97:
                    a7:a6:f1:8e:c0:b2:3e:0d:76:ac:4c:bc:5c:d2:09:
                    cf:63:7e:49:d4:19:64:38:09:c2:28:92:ed:87:0a:
                    93:98:f6:11:80:04:53:2f:35:6e:dd:e9:55:24:55:
                    e6:f7:50:d6:d7:a8:10:01:a0:b3:c4:62:4f:1c:e6:
                    63:70:a7:82:63:9d:cd:d2:cb:1f:19:ae:cc:b3:31:
                    8e:d6:e8:fb:5e:d1:86:e9:45:06:7d:e5:89:19:a3:
                    3c:82:dd:00:bb:3b:22:73:c2:78:d1:68:c3:c9:8f:
                    b5:e7:76:6b:be:12:80:7f:e9:99:57:b6:b0:c1:6c:
                    77:ec:1d:c6:36:80:db:25:5a:6c:bb:4e:ba:15:c5:
                    cd:f3:f5:e8:b2:8a:b8:96:47:2d:d3:5f:c9:94:58:
                    15:a2:01:32:4e:c7:5b:17:22:9a:4f:1d:b0:cd:c5:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:AA:FC:5E:07:51:1D:EB:C3:E4:85:E9:0D:04:3F:3D:E3:57:1F
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:d8:e6:23:fc:5f:9b:7c:24:ab:54:42:90:d8:e3:02:0c:
         88:fd:21:03:05:4c:6c:ac:c3:68:d9:b0:d8:7a:95:3b:22:29:
         f4:fe:5a:b5:a7:a9:9c:ed:ac:38:83:20:25:fb:84:2b:0b:d4:
         90:3e:ac:5e:43:fc:06:2a:07:d5:8c:e7:ab:cf:42:f6:29:e3:
         f8:36:42:62:eb:de:45:8c:e6:81:07:91:2a:a0:d1:d8:da:8d:
         57:e9:74:98:72:b5:53:c0:9d:25:cd:b5:2b:3d:ab:9f:b5:5a:
         51:bb:d1:ec:98:28:cc:d5:bd:e2:5a:80:b5:2e:0c:cb:e9:88:
         c8:54:19:dd:84:24:69:82:14:a1:ad:4d:f6:88:8e:f0:4f:2c:
         16:5f:ad:3a:61:65:6e:10:8f:93:09:4c:8b:76:5a:6b:a2:71:
         f8:81:f9:d1:01:83:87:d5:1a:48:e8:22:b6:a4:b2:fa:ec:b9:
         7d:c8:ff:1f:07:cb:bd:ac:7f:a3:82:0a:66:53:4a:e5:97:f3:
         4f:1d:53:f9:78:4e:33:a7:55:c5:64:5f:ce:a3:cf:37:ce:aa:
         18:22:9a:cd:ce:42:f9:ae:dc:bd:6b:21:ce:96:7e:be:87:f5:
         47:cb:65:a2:4a:d2:c9:61:62:2d:a1:32:1f:2b:8e:97:23:36:
         68:cb:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:35 2026 by rpki-client