This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          Au1h7j/E1STaOG7sKq0YYNw/6VBH1NuYNQfyPd4vSsc=
Subject key identifier:   1C:61:2A:7E:AF:3A:36:B7:3C:A2:94:75:EA:F3:3C:39:37:95:4D:3E
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       019C427D214E18A17EB91391A8C5F94708B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          172E
Signing time:             Mon 09 Feb 2026 13:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:22 +0000
Files and hashes:         1: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: JEYNxILIhvW74OHc2tIPRvr00/hXN6a0dhTl19hTdEs=)
                          2: rJGAs6X1h64jP6R35e61qsCTXFY.roa (hash: GVSlFoAaLCK/f0Zjs4b7sBkaI33tH8EXTGwc45c8NVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:21:4e:18:a1:7e:b9:13:91:a8:c5:f9:47:08:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: Feb  9 13:00:22 2026 GMT
            Not After : Feb 10 13:00:22 2026 GMT
        Subject: CN=1c612a7eaf3a36b73ca29475eaf33c3937954d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:5b:03:aa:75:89:f8:61:05:db:97:51:d6:
                    f2:1c:b9:20:33:a6:2a:37:87:13:d0:f9:ba:dc:9f:
                    d6:7b:9a:75:0f:af:fe:71:3e:de:f7:0a:0d:84:a3:
                    d6:96:dc:33:6d:09:cc:a9:ac:e2:c2:cf:d9:ff:bd:
                    40:08:34:16:c6:64:ec:f8:37:60:e5:50:e5:cc:63:
                    19:93:fb:a6:e4:69:ab:d1:67:72:80:e6:82:d9:94:
                    a1:e9:76:86:e3:34:61:3c:d1:bc:f2:56:a1:b9:c1:
                    3d:09:43:e8:d7:ce:c1:91:84:7e:40:4f:5f:db:a8:
                    51:97:9d:0a:7f:10:fa:e8:7f:0e:80:18:e9:bc:b2:
                    38:c3:74:a5:17:e4:9e:48:dd:da:aa:b1:6d:0e:11:
                    d7:02:31:f6:43:4e:8e:49:d9:10:02:91:57:ba:70:
                    1d:f6:e8:7a:03:8a:7b:17:3c:3a:c1:3b:5b:d0:e6:
                    89:2f:68:df:21:0c:98:ef:a9:53:b4:f2:90:e9:ce:
                    18:d7:64:fb:85:cd:1a:d4:dd:3c:34:6e:a6:6b:96:
                    f9:ea:5f:7f:00:ae:f6:dd:5b:77:bf:31:f9:b3:3a:
                    f7:dd:20:85:93:c4:78:64:78:f7:80:4e:8b:c7:8e:
                    e8:ed:d6:a1:43:b4:35:d1:18:fe:3b:e6:47:6f:0b:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:61:2A:7E:AF:3A:36:B7:3C:A2:94:75:EA:F3:3C:39:37:95:4D:3E
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:03:2b:12:35:5d:cd:4d:d0:5a:47:cf:a2:1e:21:1b:bc:77:
         80:66:34:23:06:82:fc:0f:f3:75:9a:68:b5:05:77:b1:bb:fd:
         94:f6:7e:fc:05:f3:c4:2e:14:05:ed:2d:f5:70:04:d6:a6:d9:
         47:24:24:a6:9f:31:ec:6b:a6:22:ed:da:bb:a5:e9:e1:90:be:
         18:be:97:85:e6:81:14:c1:4d:29:e7:34:e1:2a:a8:5d:dd:47:
         a8:52:3b:0d:c5:ce:36:b0:37:5d:00:d5:10:9c:13:0f:4f:61:
         ff:35:08:3d:1e:4c:7f:32:3a:7e:9f:3e:73:c7:39:78:a5:9d:
         b7:14:ca:83:9c:3a:73:b1:78:21:4f:5f:97:14:67:8c:da:51:
         70:6b:e3:95:7f:dc:a5:63:74:65:dc:8c:d9:fe:fa:ec:3b:61:
         da:80:a9:18:c2:7f:ff:a9:cf:4b:34:f8:e4:e5:2c:01:a2:b9:
         a7:6a:cb:6c:8c:b7:8a:f2:5f:2d:bc:50:38:8e:b8:ac:98:56:
         78:3c:83:a4:70:ed:67:0d:1b:90:8f:f7:ca:58:bf:c2:5b:5d:
         9e:5a:91:8a:13:7a:5b:a1:dd:3e:a1:fa:23:92:2a:07:67:b6:
         7e:c3:eb:3b:44:10:24:ff:72:e6:82:ee:e9:be:33:5f:e6:55:
         95:7a:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:27 2026 by rpki-client