This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          aYTbVC8qar/o6yyvY9KS0eAw9FjCzaGtbgWV5DRnj1s=
Subject key identifier:   9D:BF:F2:93:93:A7:BF:73:94:AB:0D:B4:46:3C:9E:59:B1:03:F0:F8
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       019C42B495DCD8C76BC73A7F641736E100CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:56 +0000
Files and hashes:         1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
                          2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
                          3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
                          4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
                          5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
                          6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: N6vc66Mnc0cqhaQ3ph58aTJJPFT2ekNJP8k6+3iDuC8=)
                          7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:95:dc:d8:c7:6b:c7:3a:7f:64:17:36:e1:00:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Feb  9 14:00:56 2026 GMT
            Not After : Feb 10 14:00:56 2026 GMT
        Subject: CN=9dbff29393a7bf7394ab0db4463c9e59b103f0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:f7:c1:35:a5:f6:8b:d3:68:df:f5:81:dd:
                    2d:0f:25:bd:01:b8:f7:fc:11:64:96:ac:f9:74:58:
                    07:42:6b:fc:2f:39:10:67:80:05:72:d2:f5:b1:93:
                    95:7c:21:f1:58:8c:06:37:6f:36:67:e4:95:de:3c:
                    55:16:10:e9:0e:3c:a5:f2:77:bf:7f:30:2c:d0:58:
                    cb:a2:0d:19:54:2e:30:86:be:90:5a:be:ce:e1:d5:
                    e0:29:df:d0:f6:d4:fa:44:e4:d1:ce:8e:8d:a9:ef:
                    3c:45:cd:27:19:b0:92:85:b0:5c:4c:ea:2a:f3:cd:
                    22:9e:9a:5e:43:27:a1:d1:16:bd:b1:9b:d4:ab:dc:
                    99:c6:36:ca:5a:32:31:84:c3:47:1b:51:70:d3:57:
                    5e:fd:80:0f:eb:47:fe:98:7f:fa:57:82:2a:3a:25:
                    14:5b:dc:4d:23:bb:c1:cc:ea:1f:1b:a5:c8:6e:bf:
                    99:ec:9a:ff:88:1d:5d:9e:02:15:8f:76:5f:49:2b:
                    b0:27:ee:18:95:10:81:c9:2b:9f:17:c2:ad:75:be:
                    15:27:1a:8e:27:69:1e:70:d5:80:31:b6:16:90:9f:
                    ce:44:e0:2c:90:b0:af:59:7c:9a:13:06:4f:f1:fe:
                    0c:60:47:2a:0e:a5:a2:8b:89:63:50:e7:d7:8e:05:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:F2:93:93:A7:BF:73:94:AB:0D:B4:46:3C:9E:59:B1:03:F0:F8
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:04:20:14:a2:b0:00:76:60:b6:ae:e7:96:6d:df:fc:0b:70:
         bf:d8:55:fb:a6:7b:ba:21:1c:43:f2:f7:3e:78:72:54:bd:d0:
         85:df:5b:a9:25:0b:64:17:98:fc:32:c1:b7:55:8a:9e:3e:a7:
         47:da:ff:f1:40:13:de:06:09:c0:b8:b2:25:10:65:26:75:70:
         6a:b1:8c:b5:64:e5:0f:65:e5:9c:29:9f:fa:43:9c:83:c3:9e:
         b7:06:3d:a3:7a:1f:af:fc:51:f3:44:c6:ab:1c:e6:6b:1c:4b:
         97:14:30:3e:52:2d:d5:66:52:83:25:f8:3f:4a:79:96:6f:3a:
         99:35:30:5c:3b:9c:9f:ab:3e:c9:e1:13:e2:3e:1f:aa:c1:62:
         35:01:10:b3:fe:be:c9:70:3f:34:f9:8f:bb:56:7f:d4:2e:3a:
         5e:49:84:1d:41:bd:d8:f1:a4:ba:c9:26:5a:97:da:d5:f1:21:
         86:6a:63:8b:27:2b:46:21:1b:1c:59:c8:74:5b:b9:76:aa:d1:
         1d:f0:42:d2:27:2a:14:bb:83:19:a3:77:4d:bc:c9:8e:28:70:
         3f:92:20:fd:0d:f4:fb:14:eb:34:f8:d5:1b:f4:09:a7:74:be:
         8b:cb:69:4a:03:19:02:49:ed:d2:7a:26:9d:90:65:96:3b:53:
         f3:ef:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:05 2026 by rpki-client