This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File:                     EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier:          jomIEDTzYYW/oLVnu3bTjz8AI6lhWAnVE8Gi7ZsaZmw=
Subject key identifier:   29:39:10:C2:B0:F5:56:06:C9:A9:51:94:F6:15:80:19:94:B9:D1:D9
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer:       /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial:       019C424669824F2855455CEBDE583F53D190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:36 +0000
Files and hashes:         1: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: Zbu3NjovB8Z8Eagox7kB+WIKOCqzuShQ0N9siPjPwmU=)
                          2: KTLrylbaPZVc2tcqKn9wzCh_kXU.roa (hash: fYS788ZlufFWPud3/HvTQbZGHC7LPz9v9l4mgngmvqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:69:82:4f:28:55:45:5c:eb:de:58:3f:53:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
        Validity
            Not Before: Feb  9 12:00:36 2026 GMT
            Not After : Feb 10 12:00:36 2026 GMT
        Subject: CN=293910c2b0f55606c9a95194f615801994b9d1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:c1:c2:56:8d:11:d8:91:46:68:d4:d4:64:
                    ed:c8:bc:72:ac:ed:53:32:93:b9:9e:f2:e9:2f:8e:
                    ca:2c:ce:4e:f1:88:16:44:a8:99:d2:95:6b:be:6b:
                    dc:c7:40:70:9b:a9:ee:ac:94:54:6d:9c:35:55:02:
                    6a:d4:6c:32:33:bc:df:60:43:5e:17:d8:e3:74:41:
                    57:e1:8b:65:cd:54:6e:1c:8c:61:a1:76:c6:0a:df:
                    8a:8f:37:c6:49:a6:1e:03:b5:a8:34:20:3b:31:cb:
                    8e:2f:8f:59:b9:3c:12:36:2a:49:47:92:a4:4b:44:
                    d7:e5:61:f1:bd:aa:d2:79:0b:e9:4d:0d:13:cd:33:
                    7f:b3:9e:0e:16:bc:18:c1:94:4f:e6:cd:2e:dc:ab:
                    66:e6:a0:b1:f3:46:c0:a4:a4:80:d1:b3:40:a4:3a:
                    b9:f6:2f:61:d1:a6:13:ce:b1:12:3b:d5:c4:12:9d:
                    f1:7d:43:87:0f:c7:b4:14:97:60:3b:cb:92:86:b5:
                    55:be:b1:ca:cb:b3:cf:c7:03:1e:1e:c5:9d:78:d9:
                    1f:95:4a:67:4e:af:48:e9:d4:2c:7e:72:8c:27:8b:
                    72:74:10:9a:1c:48:04:6e:92:04:2b:5f:e5:19:02:
                    37:2f:a6:eb:3f:39:d4:09:42:6f:10:e7:fa:9f:c3:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:10:C2:B0:F5:56:06:C9:A9:51:94:F6:15:80:19:94:B9:D1:D9
            X509v3 Authority Key Identifier:
                keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:c6:bb:23:5b:1d:ba:8e:69:98:db:eb:6a:17:e0:26:4f:
         fb:d1:03:bb:c1:cd:12:e8:34:93:02:3a:16:69:a1:f2:ec:57:
         f3:79:8d:c9:46:92:10:a8:0c:b9:71:0b:57:a1:2f:4e:37:8e:
         a3:78:ad:b6:de:53:49:eb:26:7f:49:9e:0d:fb:54:85:91:41:
         5e:26:8e:12:2e:10:4d:d9:be:16:19:f8:3c:69:43:ff:81:a2:
         71:fc:cc:ba:3c:1f:36:e4:70:0d:71:cd:fa:69:3e:37:48:80:
         47:ce:df:b6:fb:fa:45:7a:bb:79:10:a1:22:41:76:31:52:78:
         d2:81:15:12:3f:e9:86:ed:03:c5:a8:96:18:24:50:53:80:d0:
         c4:fd:3d:8d:bd:21:f3:be:3a:50:bd:5b:54:6b:38:4d:2f:a4:
         61:a5:6b:3f:b9:db:23:40:8b:8b:a0:4f:d2:3f:d1:e0:17:ce:
         3e:40:df:88:4d:80:49:80:8e:c2:27:c7:16:97:09:82:19:ab:
         bf:f7:d4:0b:2c:38:71:84:39:42:ee:2b:b5:ae:8c:8b:65:88:
         86:05:c4:d6:58:f9:6e:91:f6:77:23:1e:be:c7:bf:87:d6:fa:
         01:94:ab:7b:6d:49:e3:e6:57:ef:49:1c:15:b5:5f:82:8b:a1:
         a9:e3:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:26 2026 by rpki-client