This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File:                     pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier:          8EMQMShY8XnruPcH6cTyduwRlIPz3zFwRNCUjTPsewE=
Subject key identifier:   E9:92:05:4E:2E:4E:95:A4:A3:53:9B:10:3E:A3:ED:B1:89:CC:B4:74
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer:       /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial:       019C43C6EF4EFAED9DF391658CD8DE06FFE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number:          0EE7
Signing time:             Mon 09 Feb 2026 19:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:36 +0000
Files and hashes:         1: 6qcrdhxsXntUBfmqIofqw1-iJPY.roa (hash: GiOc4UHObExccKeqBRzv/DUsn92kIZYjDxqeAxX9Y0Q=)
                          2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: ayJmX2W5VZYB0YSqxZSEecNzEcu+m8kvqjGWLDKoD3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:ef:4e:fa:ed:9d:f3:91:65:8c:d8:de:06:ff:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
        Validity
            Not Before: Feb  9 19:00:36 2026 GMT
            Not After : Feb 10 19:00:36 2026 GMT
        Subject: CN=e992054e2e4e95a4a3539b103ea3edb189ccb474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:d4:a7:c7:36:be:23:ed:65:94:e8:42:bd:
                    4b:aa:da:23:33:c4:71:d7:f8:d7:62:d4:1e:37:60:
                    b1:5f:a5:2b:85:d3:d9:15:32:80:f6:36:1d:7f:bf:
                    a8:36:13:99:87:b2:59:f9:cf:d7:88:ad:09:df:8b:
                    d8:62:0d:5c:5c:a6:70:d2:bd:0b:f4:17:d2:73:a0:
                    f8:af:8c:07:46:0b:16:17:6d:9e:21:5a:1a:81:44:
                    b8:81:46:da:ff:44:df:62:f3:f5:01:a0:cd:7c:1d:
                    03:a6:34:db:ab:57:f6:ff:04:d6:29:30:c9:23:bf:
                    06:61:9a:db:2b:1b:7a:5b:ba:76:3d:a2:b4:29:a2:
                    24:a8:8e:6b:be:bf:34:f1:4c:df:ec:c5:54:f0:12:
                    54:42:59:1a:a8:65:bc:08:13:69:8a:49:76:08:e9:
                    d9:40:91:2e:62:10:8f:1e:1b:b0:0c:1b:62:7b:84:
                    1c:70:e0:16:b7:27:04:d2:4b:69:0a:bf:75:22:d4:
                    25:ce:46:f2:4c:67:ed:95:25:02:02:2e:9a:af:1e:
                    01:df:b8:ae:0f:fc:a7:c3:19:d9:72:9e:49:65:f8:
                    f4:9a:6c:f3:8c:a0:7e:e7:36:6c:1e:2f:07:92:24:
                    5c:23:82:6c:42:9a:9b:f0:ba:46:73:f2:ac:f5:86:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:92:05:4E:2E:4E:95:A4:A3:53:9B:10:3E:A3:ED:B1:89:CC:B4:74
            X509v3 Authority Key Identifier:
                keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c9:7a:01:70:a2:4c:8c:d7:92:4d:68:fb:58:2e:f7:b6:08:
         a3:0f:72:13:f5:eb:f5:70:2f:27:ae:46:e4:26:d6:99:0b:55:
         7a:9c:ab:80:ca:59:60:1c:af:2d:39:0c:6b:b8:bc:2a:ec:50:
         d6:bd:55:96:f6:5c:18:24:62:d2:fa:73:ac:48:6e:00:5e:61:
         0d:68:f9:d8:bf:fb:e4:f4:f0:b4:4c:57:df:e3:32:0f:9c:22:
         65:6a:4e:5f:3d:18:dd:61:d5:85:d6:ba:dc:27:00:9c:73:e0:
         09:65:e2:be:b9:2e:e0:4e:0f:94:21:7c:41:05:f2:e5:1d:c9:
         70:bc:7d:67:03:ec:d6:ad:69:d5:81:65:8f:89:82:9c:84:7a:
         a5:5f:fe:23:8f:6e:4f:3c:b1:db:2d:64:9d:00:6a:f2:30:7c:
         71:c2:92:c1:77:07:27:97:76:19:b7:fd:65:eb:9a:44:9f:9f:
         6a:03:a5:97:7a:ea:ac:19:41:48:c7:e5:4a:90:a8:5d:6d:53:
         d1:53:d5:89:2e:c8:59:71:5f:e2:18:9a:a4:03:80:cb:53:9f:
         bd:b7:93:b4:28:06:2f:9b:94:e4:b7:27:9f:ed:02:d1:30:eb:
         72:8f:01:5b:b9:1f:15:b4:76:7f:05:1f:6a:01:b8:e1:97:35:
         89:9e:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:00:45 2026 by rpki-client