This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File:                     e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier:          1QebokGyRtpDPXzWdQsCWVpCR/lE6ELix306+aQ0geU=
Subject key identifier:   FE:D4:3B:64:39:E8:9D:E0:1E:69:29:73:FE:97:36:D9:18:5F:A8:61
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer:       /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial:       019C438FFB48FD457D8E4EBC398BC47AE6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number:          04D5
Signing time:             Mon 09 Feb 2026 18:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:35 +0000
Files and hashes:         1: Gws5btNNtPdjaSz9VbluBPmvlcM.roa (hash: d+e95WhTHyM+HX2sAVv1c3YdJyjnOdJdLOShrMr5pvY=)
                          2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: s0qy+w4ZW5NFmq0WEnmXcTFyGGuuB7WcVNeuaJ6h9BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:fb:48:fd:45:7d:8e:4e:bc:39:8b:c4:7a:e6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
        Validity
            Not Before: Feb  9 18:00:35 2026 GMT
            Not After : Feb 10 18:00:35 2026 GMT
        Subject: CN=fed43b6439e89de01e692973fe9736d9185fa861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:b2:9b:0e:fd:7f:75:77:e8:31:d5:fa:c7:
                    95:42:14:c5:ab:77:00:21:17:9d:5a:a4:12:03:55:
                    58:ea:44:bf:0d:46:0a:e7:8c:c4:c9:98:ed:6f:fc:
                    9a:25:8a:c5:3d:de:a5:fb:d3:b8:04:49:8a:4d:56:
                    0c:b0:b5:de:72:9f:64:4d:a3:9b:60:14:e6:f9:80:
                    38:31:aa:46:0c:bf:c4:14:b3:c1:be:cf:06:27:60:
                    69:17:f8:e4:be:98:82:cc:ba:c8:f1:b6:07:cb:fc:
                    5e:0f:32:e5:9a:6b:54:fd:52:79:20:d3:63:17:a4:
                    36:ba:2b:0c:47:8c:e3:e2:21:2e:81:df:a9:13:2c:
                    fb:6b:e9:d7:cd:22:dc:aa:90:95:c2:5b:9f:96:39:
                    82:ac:da:34:a5:73:f1:1c:61:c5:75:ed:0c:ec:39:
                    61:a3:06:f0:aa:5d:3c:98:05:24:d5:3b:26:10:72:
                    ba:8c:99:c0:a5:4a:80:45:52:6e:31:58:bf:58:86:
                    94:55:01:cf:e3:f7:bc:8d:aa:d6:2f:71:28:87:b8:
                    f8:ad:ac:3d:f6:02:67:70:3c:66:eb:f7:f8:f2:30:
                    df:69:b2:bc:aa:ff:b0:24:23:cb:76:21:8d:10:32:
                    bb:42:63:1d:7f:6e:eb:d5:59:91:c8:fb:51:35:d9:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D4:3B:64:39:E8:9D:E0:1E:69:29:73:FE:97:36:D9:18:5F:A8:61
            X509v3 Authority Key Identifier:
                keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:83:36:03:30:84:80:18:b6:6c:32:f1:2e:27:b7:d4:3e:40:
         90:f2:27:92:f0:a7:5f:77:85:90:7b:41:f6:1e:80:62:10:a3:
         94:3b:b4:ff:16:0c:0c:cd:51:47:68:15:1b:76:d4:39:b9:ba:
         66:6d:83:9f:eb:c8:16:93:c1:78:32:a6:07:0b:4e:e0:53:b0:
         b8:0b:f6:ee:ff:b8:79:46:8e:9d:2a:fb:76:ef:42:22:99:f2:
         b2:b0:f9:c2:12:6f:b2:74:ff:63:39:3c:47:58:ba:5e:5b:1a:
         c6:8d:23:62:64:b3:73:1a:d5:ce:e4:7b:fa:2e:21:65:00:bc:
         e9:85:d5:29:bb:b0:e2:f7:58:73:13:bb:14:cb:b0:59:26:33:
         cf:3e:9d:0d:e1:d5:08:bf:35:ee:20:d4:ee:4a:e5:01:5f:74:
         8d:ef:70:fb:88:2f:55:a1:37:5f:b5:63:56:f6:0d:81:26:c3:
         a7:5f:99:7a:b3:d9:5a:5b:38:f0:69:de:fd:16:c2:10:56:99:
         48:08:ea:fe:ff:69:98:27:b6:9d:d4:3e:b5:a7:6e:99:f8:45:
         ac:38:1d:92:12:91:cf:b6:22:cf:88:11:00:1c:01:4c:03:28:
         4b:a8:82:56:44:de:9d:f3:12:df:a4:aa:a6:26:a0:67:e4:8e:
         43:33:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:57 2026 by rpki-client