This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File:                     E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier:          rFOACeAbC7zYTsdqHZuZ9h2fJ0ZUGgvgyb5sico4Ol0=
Subject key identifier:   B5:F2:96:C4:A0:F7:5E:EA:99:B2:A1:C2:26:F3:7F:01:22:49:73:9E
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer:       /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial:       019C43221797A9CAEF4B1FF5E8F86447E9EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number:          1540
Signing time:             Mon 09 Feb 2026 16:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:33 +0000
Files and hashes:         1: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: 9HHhScv+O/J3UFdRMNr2RArDxja1t5BVg67OnWQg250=)
                          2: Ne750FFHPw3HUe14fcJ5eyrMXJg.roa (hash: A3tH6f49GeoqhrZ6OnjGyDwtlkYlyzOGtjZ26OJKqAo=)
                          3: OKZ4RBLd9A-erw36PbwJ3C3LJo0.roa (hash: 7yPskL1QQ8Sx8qqCwYj9KNvr1Nkq7IbAM3Yyme3KyJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:17:97:a9:ca:ef:4b:1f:f5:e8:f8:64:47:e9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
        Validity
            Not Before: Feb  9 16:00:33 2026 GMT
            Not After : Feb 10 16:00:33 2026 GMT
        Subject: CN=b5f296c4a0f75eea99b2a1c226f37f012249739e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:fa:be:82:80:c0:86:00:41:4e:ba:c4:2b:
                    8a:e9:36:65:51:0c:be:10:a8:9d:3a:92:7e:29:37:
                    b9:aa:4f:20:31:04:b9:b6:79:63:6b:5c:32:23:ba:
                    7f:a5:3d:4f:59:5a:31:47:16:6c:3d:5d:fc:90:8c:
                    7e:cf:6d:d3:40:31:60:a0:8b:41:b2:dd:b0:4a:5e:
                    b1:10:cb:0b:01:d0:e0:95:73:bb:0c:3b:6c:45:94:
                    a3:88:80:a4:de:2e:59:4f:87:07:53:5e:4a:4e:8e:
                    b1:29:56:74:b1:65:0d:10:4f:0b:98:83:77:98:e4:
                    13:77:2e:0e:f5:9a:f0:3f:c6:25:88:4c:50:98:cf:
                    e4:61:ac:12:e9:6f:8e:b4:db:3f:95:c4:8c:37:88:
                    88:c7:b5:f5:0e:7f:54:74:58:05:1a:97:f1:2c:ac:
                    5a:55:16:46:d8:e8:21:fa:69:46:9b:f1:d0:18:a9:
                    00:42:bf:24:4a:5f:71:00:ea:d6:03:c5:84:87:ba:
                    50:4b:97:28:8d:9f:01:7f:b0:a6:54:65:d1:9a:55:
                    18:11:ad:5a:a5:a4:71:ff:4d:19:8a:13:c9:8f:bf:
                    4f:ea:b2:a4:25:14:b1:9d:99:1a:d9:85:bf:a4:be:
                    71:d7:9f:30:c5:ea:d0:05:e4:8f:70:27:56:44:22:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:96:C4:A0:F7:5E:EA:99:B2:A1:C2:26:F3:7F:01:22:49:73:9E
            X509v3 Authority Key Identifier:
                keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:eb:02:d9:75:d7:97:19:48:cc:21:ec:2e:40:f9:e0:6d:fe:
         6d:1d:5d:6f:d7:f1:de:7e:13:04:81:0a:da:b5:c6:54:6f:07:
         8a:dc:93:88:c0:b1:80:42:dd:bd:c1:45:e4:1a:25:95:bd:0c:
         e3:cd:12:4d:f1:13:10:f2:63:14:fe:ea:8e:72:2e:23:d7:ad:
         28:b4:4d:cf:34:9f:0c:8a:4b:2e:fe:4d:5b:99:20:9d:ab:5e:
         e2:4f:fe:bf:e0:b3:b3:88:40:5e:4e:1a:76:10:e3:01:a1:e4:
         e7:e8:0a:48:64:b4:4a:01:fc:98:a1:db:b5:55:df:f6:ac:0a:
         9d:78:19:5f:9f:e0:09:14:ea:1d:62:83:9f:5c:79:3b:32:a5:
         23:07:34:b4:08:f3:47:fd:70:45:f4:84:78:85:59:16:42:00:
         d9:4c:5a:1c:28:94:1e:32:c0:bd:a2:d7:de:2c:b6:b7:dd:7d:
         b5:80:f7:d3:a8:66:05:36:36:04:63:9b:47:88:98:5c:eb:c0:
         d3:76:21:3e:c9:a6:dc:f1:d7:58:33:e0:17:cf:0c:55:17:9c:
         49:75:d8:3b:77:bf:c7:8b:49:37:85:b7:74:9a:e6:42:04:a4:
         a2:a4:d1:0c:67:18:1e:86:f6:1d:10:d8:44:38:1f:cd:e8:64:
         59:69:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:21:03 2026 by rpki-client