This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File:                     eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier:          vpXMfLYeBhIrY3ASmhK/P3YtdMQT2WPCMfv3QKIgid4=
Subject key identifier:   3A:26:70:1D:A7:CA:B9:45:FC:D8:62:DE:94:68:99:CA:DD:E3:07:14
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer:       /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial:       019C427D4271601ABD13CE61C9BA8A339E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number:          0DCE
Signing time:             Mon 09 Feb 2026 13:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:31 +0000
Files and hashes:         1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: TKHHDt2/BDpdme+bjlruv+aMIT0FVdR8bSRSJJqImAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:42:71:60:1a:bd:13:ce:61:c9:ba:8a:33:9e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
        Validity
            Not Before: Feb  9 13:00:31 2026 GMT
            Not After : Feb 10 13:00:31 2026 GMT
        Subject: CN=3a26701da7cab945fcd862de946899cadde30714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:de:5d:e1:11:a9:e5:63:0c:75:6c:07:26:
                    6b:37:69:75:74:2e:b6:0c:b3:4f:6c:f1:e3:83:79:
                    fa:26:ef:cf:4f:3b:af:24:63:45:c9:5e:80:2d:27:
                    00:b5:97:83:96:fa:00:46:d8:c1:80:d5:d4:6e:f4:
                    9b:c3:f6:38:cb:1a:3b:38:ed:4d:46:4b:d8:2d:ae:
                    ab:04:2f:14:0b:ee:ff:ec:f1:14:ee:61:fc:06:75:
                    97:09:33:78:2a:2d:ad:89:fa:4a:f2:87:72:ca:75:
                    08:c6:f1:ee:60:d5:8a:a7:80:b0:58:9a:35:71:19:
                    33:7a:ba:a6:60:20:ad:27:00:38:86:f0:7c:10:f6:
                    d6:2a:21:09:4b:60:9f:f4:22:25:77:2a:ec:c2:b5:
                    c1:4f:5d:80:17:47:da:39:12:5c:fa:3d:b3:99:6e:
                    26:e3:0c:17:34:40:a8:7d:e8:0a:a2:73:41:bf:2e:
                    8b:61:bf:c1:45:34:02:0d:21:c8:e1:eb:e9:91:95:
                    55:35:4f:c3:bb:2b:7a:88:80:c8:fe:3b:cf:65:8b:
                    7e:28:7f:a7:7f:a1:3e:44:69:c7:6c:24:fc:52:e7:
                    73:6f:3b:15:c8:fe:dc:f6:10:f9:48:8b:da:a9:50:
                    07:fb:5c:67:f7:a2:f1:2c:e1:eb:6f:d2:c1:88:be:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:70:1D:A7:CA:B9:45:FC:D8:62:DE:94:68:99:CA:DD:E3:07:14
            X509v3 Authority Key Identifier:
                keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:c7:70:bc:20:f5:0a:d0:b3:2c:eb:bd:c9:f1:07:e2:ad:
         53:45:31:eb:0c:be:6c:5f:88:fe:9d:a5:84:3d:c4:db:c1:ba:
         e8:cb:dc:8b:ec:af:8d:b4:b9:24:7a:14:1d:f3:b7:79:78:22:
         9a:61:eb:c0:ea:5a:3d:90:d0:2d:c9:10:e7:f1:28:ff:7a:49:
         5f:8e:8e:6d:58:7a:2d:56:82:a1:27:8f:f4:ab:c3:bd:be:29:
         0a:c6:fd:78:01:09:d8:6d:26:7f:f4:d0:4d:4f:21:96:56:9a:
         27:1d:15:53:11:31:da:bd:2f:33:db:99:e4:40:d8:e7:08:d1:
         25:1c:81:d9:ca:67:b2:2a:6b:62:a4:9f:3c:05:83:4e:5f:8a:
         4e:a8:bb:56:65:f5:5d:83:00:c5:02:c5:c6:40:c2:1e:42:0e:
         af:af:68:b9:6d:98:17:8f:75:20:66:b2:0b:8d:fa:03:e7:ed:
         a6:eb:74:33:85:24:ed:39:e8:7b:b0:c5:ea:8d:40:5a:80:f9:
         62:d1:ce:d9:2f:a5:36:02:73:40:98:26:14:cf:a9:e3:15:48:
         6f:3f:f7:1b:56:42:65:53:7c:2b:17:b4:f3:a7:28:1a:7e:c9:
         a5:42:43:be:8f:ab:47:4b:f7:1c:6c:b9:f3:56:49:54:c9:17:
         27:40:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:35 2026 by rpki-client