This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          phGj92JMLmLxKxLLd50Ccbo9znWfAchmufv+EW0kkDw=
Subject key identifier:   38:27:5D:66:0B:6B:30:4A:3C:DC:D3:EB:AE:ED:99:9B:C7:F6:88:0A
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       019C420F6916B2595E886B97F50B9ABEB1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          0A4E
Signing time:             Mon 09 Feb 2026 11:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:32 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: plnn/QAY7mGh6LF9hlzkhWjSoBUm2v4uAa51HCOp/+s=)
                          2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:69:16:b2:59:5e:88:6b:97:f5:0b:9a:be:b1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: Feb  9 11:00:32 2026 GMT
            Not After : Feb 10 11:00:32 2026 GMT
        Subject: CN=38275d660b6b304a3cdcd3ebaeed999bc7f6880a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:83:25:10:88:94:6b:52:63:d9:e8:e7:55:
                    16:c5:65:75:fd:ba:14:2e:67:37:b4:0e:5e:d5:4a:
                    5d:ae:3d:0e:fa:97:a9:7c:b3:18:9a:2c:cf:2c:4c:
                    c7:f4:70:8a:28:90:fc:aa:94:2f:f1:e4:8f:90:e8:
                    04:06:07:8d:19:4c:a3:50:42:76:a6:9d:46:f6:4e:
                    cd:e4:f7:9a:9d:31:c5:32:08:e7:68:91:70:cd:5c:
                    2a:a4:53:a8:c2:e9:dc:18:23:d8:be:2c:da:5e:c0:
                    07:12:34:4b:5f:9f:73:d5:1e:4f:a7:63:1a:4f:32:
                    d0:e9:fe:27:e9:3d:a1:a2:b3:05:09:49:e9:a1:9a:
                    86:67:71:cc:00:ed:3f:4a:af:cd:db:66:8a:53:cf:
                    79:cf:30:5a:34:6b:4e:14:df:99:44:39:92:ce:73:
                    c1:35:2f:a6:80:0c:a9:19:dc:f5:76:57:6e:f7:be:
                    b7:df:46:16:be:fb:40:7c:68:02:92:57:65:45:b8:
                    8e:da:5b:37:00:73:aa:03:4b:8e:d3:83:19:b0:b9:
                    89:6c:c6:d9:55:00:c5:d8:86:a8:70:a2:b5:4e:49:
                    f1:76:c7:a2:64:25:ff:fa:fd:bc:43:21:06:46:93:
                    01:5b:c1:04:fe:c9:1f:74:b3:8a:94:c9:21:29:ec:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:27:5D:66:0B:6B:30:4A:3C:DC:D3:EB:AE:ED:99:9B:C7:F6:88:0A
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:c1:1f:ee:a1:c6:eb:02:21:71:85:23:6c:7f:60:86:77:
         da:5e:69:87:5d:58:41:9b:da:a7:30:a8:a1:33:4a:2f:10:22:
         37:fb:91:2b:9f:7e:9a:5f:70:b8:aa:d9:d1:7f:53:a6:19:51:
         69:4c:03:72:da:dc:d9:45:b1:51:3e:b5:a1:77:7f:bf:9e:b2:
         69:77:ce:ea:7d:19:10:34:0e:db:2f:ff:fd:bb:1b:4b:e2:4c:
         3c:5b:ec:93:44:47:3e:3a:2d:da:7d:8b:20:24:c8:cf:6c:7d:
         05:94:06:66:55:30:fa:9c:88:4c:50:42:09:3a:6b:69:ce:cb:
         97:bd:b9:ab:ab:f7:09:70:76:42:43:28:73:ae:bc:0e:7d:9c:
         66:c0:0c:74:54:b8:21:1a:17:68:bc:b3:36:92:10:a8:0d:ec:
         b1:0e:a8:c5:20:e7:8d:f5:72:20:6a:3b:cd:20:02:22:8c:f3:
         c8:84:73:67:b1:14:46:aa:c5:eb:af:d2:e6:85:4e:a6:02:6c:
         c2:65:ac:19:5a:76:8c:2a:11:51:42:9c:de:e4:b6:05:43:80:
         ad:79:c1:e9:c3:fd:e6:ed:4b:5e:38:9b:5f:b3:07:a3:11:0b:
         77:d6:67:2c:b3:15:cc:ab:93:bc:db:96:c7:53:7f:ba:dd:33:
         ee:f5:a5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD2kWslleiGuX9QuavrHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjliZDFjNzE2ZmQyZTk1YWM5ZDYxMDc1ZDcwOTYyMWFl
ODA2MDAwHhcNMjYwMjA5MTEwMDMyWhcNMjYwMjEwMTEwMDMyWjAzMTEwLwYDVQQD
EygzODI3NWQ2NjBiNmIzMDRhM2NkY2QzZWJhZWVkOTk5YmM3ZjY4ODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeqDJRCIlGtSY9no51UWxWV1/boU
Lmc3tA5e1Updrj0O+pepfLMYmizPLEzH9HCKKJD8qpQv8eSPkOgEBgeNGUyjUEJ2
pp1G9k7N5PeanTHFMgjnaJFwzVwqpFOowuncGCPYvizaXsAHEjRLX59z1R5Pp2Ma
TzLQ6f4n6T2horMFCUnpoZqGZ3HMAO0/Sq/N22aKU895zzBaNGtOFN+ZRDmSznPB
NS+mgAypGdz1dldu976330YWvvtAfGgCkldlRbiO2ls3AHOqA0uO04MZsLmJbMbZ
VQDF2IaocKK1TknxdseiZCX/+v28QyEGRpMBW8EE/skfdLOKlMkhKezLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgnXWYLazBKPNzT667tmZvH9ogKMB8GA1UdIwQY
MBaAFBD5vRxxb9LpWsnWEHXXCWIa6AYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUt
ZDJhZjFjYzNmYTMxLzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUtZDJhZjFjYzNmYTMx
LzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx/BH+6h
xusCIXGFI2x/YIZ32l5ph11YQZvapzCooTNKLxAiN/uRK59+ml9wuKrZ0X9TphlR
aUwDctrc2UWxUT61oXd/v56yaXfO6n0ZEDQO2y///bsbS+JMPFvsk0RHPjot2n2L
ICTIz2x9BZQGZlUw+pyITFBCCTprac7Ll725q6v3CXB2QkMoc668Dn2cZsAMdFS4
IRoXaLyzNpIQqA3ssQ6oxSDnjfVyIGo7zSACIozzyIRzZ7EURqrF66/S5oVOpgJs
wmWsGVp2jCoRUUKc3uS2BUOArXnB6cP95u1LXjibX7MHoxELd9ZnLLMVzKuTvNuW
x1N/ut0z7vWlJg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:51 2026 by rpki-client