This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File:                     AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier:          LfQE7m4Tm+925eXQyD9/CDKkgcosqOCsdQKzKEOIiO8=
Subject key identifier:   EA:0D:C7:82:D9:E5:D4:55:E4:BD:01:54:65:AA:7C:B2:CD:04:4E:81
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer:       /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial:       019C41A1B4D095543F95FAD4BC6F3815492B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number:          0281
Signing time:             Mon 09 Feb 2026 09:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:42 +0000
Files and hashes:         1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: 4km1KRTZblhjXfSEytiG4yu6hDJdtR36NX+AsrkKYXo=)
                          2: sh8M4KLHuLakVIud2TbaHMeCEjw.roa (hash: vWKdYFJEWQq1vzlyAwLNl/BBt4KHaNS4rv484R5g4EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:b4:d0:95:54:3f:95:fa:d4:bc:6f:38:15:49:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
        Validity
            Not Before: Feb  9 09:00:42 2026 GMT
            Not After : Feb 10 09:00:42 2026 GMT
        Subject: CN=ea0dc782d9e5d455e4bd015465aa7cb2cd044e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:b3:27:60:53:4c:32:d8:03:c8:6d:74:98:
                    8e:8f:f6:f9:e9:da:ff:7d:6a:aa:bb:ec:cc:41:05:
                    3e:ae:29:d7:1a:94:f6:07:44:c5:10:49:30:7a:7c:
                    98:c0:17:6f:c0:2e:cd:16:1d:4a:04:8a:1b:3c:89:
                    a5:6a:62:fb:62:a0:e0:50:99:7a:04:7c:89:a6:61:
                    b3:1e:f9:5e:c6:50:0c:88:6b:ff:28:c0:8c:17:7b:
                    d6:ce:01:6f:9c:ac:f7:67:e0:8a:3e:36:9f:72:d0:
                    21:a3:7e:db:ca:7e:a2:de:b8:48:58:c7:ef:c9:1d:
                    42:3c:02:83:26:2f:d9:77:c5:f7:a8:39:7f:4d:69:
                    79:b9:e5:f4:07:e7:59:35:c0:c8:39:99:4d:24:fc:
                    8b:58:43:23:05:da:83:2e:3b:36:a7:f3:9d:2b:1a:
                    24:f1:fe:3e:ca:7f:9a:02:ac:00:9d:8d:8e:c3:6c:
                    0b:8d:34:d8:70:bb:df:c0:32:82:7d:d3:60:e5:0e:
                    2c:70:0d:c6:52:ca:77:38:d3:40:98:2e:18:b3:cb:
                    47:d9:04:dd:86:d3:31:ee:4c:4d:ff:d7:66:3b:f4:
                    1e:06:4e:a1:d9:8a:47:6c:39:5f:44:9f:67:c7:25:
                    19:de:5c:de:c0:1e:94:6a:40:e3:32:3b:25:30:fa:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:C7:82:D9:E5:D4:55:E4:BD:01:54:65:AA:7C:B2:CD:04:4E:81
            X509v3 Authority Key Identifier:
                keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:d7:ff:67:51:1e:9b:5d:cd:d6:1f:9d:d0:01:9c:9f:f7:
         52:57:3b:4e:b2:03:62:e4:78:53:32:64:7b:09:c4:6a:93:56:
         52:8b:9e:7e:dc:b8:5b:45:14:ca:f3:f2:3b:77:66:e0:88:0a:
         e2:5e:93:79:86:06:2a:1c:c8:6a:98:6a:bd:d9:ec:53:09:06:
         5b:3a:1d:8e:cc:ca:b8:34:89:07:8d:b9:6a:a5:f1:b5:1a:94:
         d6:c3:0c:f0:10:45:56:81:1a:b4:60:41:b6:02:8b:66:a7:5d:
         d4:b3:1b:f2:14:e5:ae:85:31:db:6a:96:2a:62:ce:6a:98:df:
         af:e7:d6:32:bb:57:c7:bb:82:ef:54:66:7b:69:fb:42:c3:98:
         be:f2:f6:f1:3d:ab:48:2c:a4:ed:ae:b1:ed:64:1c:1c:12:02:
         7c:fe:e0:c4:87:04:17:d8:1c:14:43:22:0b:e9:05:d5:44:56:
         20:41:b0:ce:dd:41:31:33:26:9e:5e:e8:e4:27:18:cc:2a:3b:
         16:b2:e0:aa:0a:55:b3:b4:90:cd:6b:85:d3:c4:8e:80:d5:16:
         ab:d7:06:6f:67:76:fd:77:50:a1:a3:1e:02:19:df:ff:a3:87:
         0b:0e:b7:e5:1f:57:0a:ae:14:61:9e:a2:bb:d5:21:0b:a9:93:
         38:25:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:08 2026 by rpki-client