This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File:                     e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier:          gWo2YHxDpj86Bf/IKdcIhCfrwpfHhgBRFcXwFOB2nvI=
Subject key identifier:   5E:D5:86:93:5E:60:1F:30:6A:F1:E0:7C:95:74:19:5B:34:EB:B4:30
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer:       /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial:       019C435955C647AAD4320D6B0D4CC49E7DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:53 +0000
Files and hashes:         1: YnW_N1HnfxQcGZ8nbOsDuROfUtw.roa (hash: WvOgqLBZMI+JVQxfZ0sns+9mEpeSOL8i0zDZ/Mkn1d0=)
                          2: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: P3dyhbv6upazAq9CEqjqXV2OqQpOglsYLfKbTvGiLMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:55:c6:47:aa:d4:32:0d:6b:0d:4c:c4:9e:7d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
        Validity
            Not Before: Feb  9 17:00:53 2026 GMT
            Not After : Feb 10 17:00:53 2026 GMT
        Subject: CN=5ed586935e601f306af1e07c9574195b34ebb430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:e7:3b:a9:7a:e0:30:5e:c2:4b:a8:1a:62:
                    e3:ac:0c:f0:2d:ae:30:20:89:57:9a:14:31:db:35:
                    2a:8a:f3:7b:fd:e5:50:2c:9f:ed:1c:0c:b4:02:69:
                    e8:20:92:c3:b9:9e:a2:4c:41:d1:bb:86:9e:d7:35:
                    00:5b:36:2a:9c:55:c0:97:dd:9c:4d:74:59:c3:00:
                    8f:b9:12:e5:f5:0c:aa:61:4e:75:c3:26:17:7d:46:
                    76:e1:bc:ff:13:d1:ff:43:26:b6:f5:c4:bb:f0:81:
                    ca:cf:11:82:da:05:88:7c:35:62:05:3f:4e:fe:01:
                    db:ba:fc:90:6f:25:16:b7:de:79:43:75:a6:c7:f6:
                    c3:52:e1:2c:df:9e:89:02:b9:20:f2:39:9e:1c:11:
                    66:1d:89:77:6d:d3:6f:d7:07:12:0c:2a:a7:4c:34:
                    84:ac:d4:fb:3b:d7:b3:b2:7e:1f:c7:6b:47:a2:2b:
                    a9:d7:69:7a:61:19:77:7b:32:cb:44:51:44:87:57:
                    eb:38:42:e1:03:ec:86:03:81:2a:82:52:b9:77:86:
                    a0:24:ee:2d:ff:69:8b:35:2c:12:83:60:81:e5:67:
                    66:40:4d:43:46:df:cb:ef:5a:38:75:19:47:60:25:
                    ae:e0:d8:5a:a7:d6:3a:78:28:02:a1:1e:76:8a:cb:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:86:93:5E:60:1F:30:6A:F1:E0:7C:95:74:19:5B:34:EB:B4:30
            X509v3 Authority Key Identifier:
                keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:67:ae:3d:44:83:18:42:81:15:5a:c9:e4:e1:9b:e9:15:f3:
         1c:56:81:c8:74:e2:df:8c:d0:e4:cb:e6:c7:b8:4c:2e:34:b5:
         a5:ee:31:37:ca:6c:c7:73:b4:0f:cc:e9:d0:ed:64:0f:18:61:
         dd:63:e8:28:06:6f:eb:20:7d:d4:3c:66:bb:af:0b:0e:c6:3e:
         00:6a:24:45:eb:66:43:88:eb:a3:5d:c8:ea:ef:4c:6a:e9:48:
         ac:5d:9a:52:c2:eb:9c:a4:73:3e:57:e2:09:70:6d:42:f2:de:
         82:92:e0:eb:03:05:d3:d8:d8:1a:ea:56:88:4e:78:2a:ba:73:
         4d:28:6c:13:a0:34:fa:06:d9:ff:7f:23:d7:8d:4d:47:1e:7b:
         e6:74:62:30:6d:af:1d:a8:d3:4c:b7:4d:9e:79:79:2c:07:9d:
         b6:3f:c8:a9:45:51:ea:7b:0e:5f:f7:76:42:2d:1f:25:11:d2:
         1f:1f:6f:55:64:d8:73:ea:f5:54:95:50:ee:41:79:12:96:3d:
         6e:8d:c2:9f:6e:6c:92:77:21:8a:57:69:45:5b:48:38:59:a2:
         dd:f2:0d:5b:69:0a:15:62:d1:62:da:3d:14:10:48:b5:04:c8:
         91:12:e2:93:9a:7d:50:25:ca:25:a5:52:07:39:39:b3:4c:76:
         d6:80:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:10 2026 by rpki-client