This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File:                     eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier:          F89U9rBupMHEXrRtWSdccVL3TsTgqXW+Kxyvi++VhKk=
Subject key identifier:   0E:43:B2:28:D8:52:23:54:C7:EB:72:13:BE:D3:6F:37:AB:5A:1D:0D
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer:       /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial:       019C4322000359F097AB130EFAF2838EF302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number:          0C60
Signing time:             Mon 09 Feb 2026 16:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:27 +0000
Files and hashes:         1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: Gfia68Zq2mlzZ3xAApBYgVID8XR7ITzZBk4zNagNKrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:00:03:59:f0:97:ab:13:0e:fa:f2:83:8e:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
        Validity
            Not Before: Feb  9 16:00:27 2026 GMT
            Not After : Feb 10 16:00:27 2026 GMT
        Subject: CN=0e43b228d8522354c7eb7213bed36f37ab5a1d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:2e:da:de:02:5b:46:12:f8:49:8b:1d:d3:
                    7a:8b:7e:cf:8c:b7:41:bc:2a:bf:4d:38:b7:87:ea:
                    bb:8a:80:83:4e:db:49:e3:38:c3:b3:37:2e:e8:d0:
                    e8:f2:f3:11:5b:ed:0d:64:af:71:98:58:af:d1:35:
                    f4:7c:d5:40:9c:8b:c4:11:4e:5d:09:e7:24:33:0d:
                    ef:d8:0f:2d:9e:86:1c:e6:36:d9:3d:5c:77:12:52:
                    82:ed:6e:67:b9:2f:0d:a2:1b:89:d6:ca:ba:5c:fa:
                    73:96:9b:28:4b:56:7c:8a:1c:96:56:6d:92:c6:aa:
                    d8:4c:8b:c8:1c:7e:5f:f2:f5:12:90:dd:09:2f:95:
                    d5:f1:9b:c0:bd:3b:5e:98:31:cc:d7:e4:c5:2b:8a:
                    27:c8:ce:f3:59:2b:d1:78:58:34:f3:f0:2c:d0:98:
                    47:35:2a:8b:b5:be:1c:19:ee:c7:35:a5:d7:d5:54:
                    28:c7:72:af:86:55:03:7c:54:55:1d:39:96:0c:3d:
                    05:77:cb:0f:3c:6c:cd:80:b4:ec:ce:f6:93:ea:ae:
                    79:66:f4:d3:a4:52:7c:91:41:11:2a:35:e6:31:42:
                    e0:6b:e8:6e:09:da:8c:6e:57:1e:99:c1:06:ed:d2:
                    23:7f:58:4f:49:b5:c9:ef:20:7d:bd:ee:9f:9d:9d:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:B2:28:D8:52:23:54:C7:EB:72:13:BE:D3:6F:37:AB:5A:1D:0D
            X509v3 Authority Key Identifier:
                keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:28:9d:0e:57:d8:d4:31:6b:c3:d4:1f:fe:87:b6:90:09:f2:
         5f:9f:d2:3d:aa:9d:01:37:4f:2a:1f:ad:59:5f:6b:ea:1b:4d:
         dc:e8:cd:9c:2e:05:1d:c7:f1:5e:1f:eb:4a:4f:5c:10:78:1a:
         8e:7c:46:a0:11:dd:ae:e2:c0:2b:8c:cd:ab:01:48:4d:3d:e6:
         e5:b5:e9:cb:df:88:66:78:02:ef:e2:0f:ba:19:f9:69:8c:a7:
         da:9f:52:9f:a9:2e:cf:10:28:79:45:5d:76:1a:ea:17:43:96:
         7d:33:69:d4:f9:b8:c7:7f:60:d2:62:38:95:0a:47:77:0e:92:
         5d:ae:e3:e4:85:68:76:96:61:56:eb:01:ec:f4:95:05:f3:c4:
         e3:74:b0:72:0c:17:31:d5:1f:16:92:8f:2f:c3:5b:2a:ba:04:
         3c:e4:0e:66:1c:ef:df:e9:80:bb:1e:0b:d0:8d:07:e5:3b:47:
         72:5b:97:81:9c:53:1b:86:ec:d5:80:ed:84:10:2d:1c:c5:0e:
         36:17:1a:64:e9:b7:83:47:d1:93:92:31:3a:36:6f:20:3b:94:
         99:d5:fd:dc:0d:db:6d:ff:c9:97:85:72:2d:dd:0c:68:68:0d:
         5c:04:93:f0:92:53:58:36:a8:57:b9:36:7d:32:7e:b2:63:5d:
         83:f0:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:13 2026 by rpki-client