This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File:                     eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier:          q6ExYKlN19ZQfJitJfbpmRGyhntQG6fdfHHLidao/zs=
Subject key identifier:   77:12:19:67:52:1B:3E:96:2F:AA:8B:98:42:95:2B:23:42:06:98:3C
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer:       /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial:       019C41D8EF405B6FA5470303311D89FC5089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number:          14AD
Signing time:             Mon 09 Feb 2026 10:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:01 +0000
Files and hashes:         1: eFIkHLGyOWtI88D-W07OWbj9UaI.roa (hash: yGXkgrRDM12DJQ8ZdY8dTLzVgsSMaN3SFaLy13WWzIM=)
                          2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: Ys/AW1RVe4tcGCR3TJKY80dG4EyKgNCsDIkYMW+IsfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:ef:40:5b:6f:a5:47:03:03:31:1d:89:fc:50:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
        Validity
            Not Before: Feb  9 10:01:01 2026 GMT
            Not After : Feb 10 10:01:01 2026 GMT
        Subject: CN=77121967521b3e962faa8b9842952b234206983c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:fc:25:66:76:9d:a0:0e:83:a2:97:56:cf:
                    34:ba:90:f4:56:77:06:76:06:bb:48:98:74:cb:a5:
                    03:32:e4:ce:a8:8c:87:a6:db:2a:c6:ec:bc:fd:16:
                    ed:dd:37:14:e1:b7:27:2a:81:7f:77:a0:d0:c4:e9:
                    27:31:41:64:82:6e:83:6b:34:d2:0b:0c:5d:21:9b:
                    50:eb:41:24:7e:4b:ea:f1:42:97:41:f7:7c:eb:e7:
                    7f:08:f0:2d:70:f9:f8:f1:80:62:3d:21:f9:4a:41:
                    de:0c:30:6b:08:b6:fe:be:69:e9:f1:c4:3e:bf:a9:
                    38:1c:87:0d:18:5f:b8:fb:b7:03:0d:af:b2:d9:c5:
                    3b:71:63:8a:61:ff:7d:77:d6:ae:6e:47:83:7a:7c:
                    f6:73:8d:50:36:05:aa:c8:08:70:4c:72:41:23:3e:
                    26:17:73:22:26:a5:06:2e:c9:fa:0d:2f:1f:00:a1:
                    da:76:72:9f:16:3d:5d:b8:bb:05:8d:85:9a:5e:27:
                    20:b6:c6:c5:ae:b1:27:d5:91:41:18:10:2c:b4:54:
                    42:7a:ff:33:b9:c6:69:ae:d4:5a:50:2e:ab:1a:b8:
                    fd:66:d0:a4:ae:58:fa:20:72:17:1b:07:7c:cf:06:
                    b4:f1:74:ca:99:51:e9:46:f2:77:49:e5:3b:9d:e2:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:19:67:52:1B:3E:96:2F:AA:8B:98:42:95:2B:23:42:06:98:3C
            X509v3 Authority Key Identifier:
                keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2f:9d:41:5f:fc:15:0c:98:b1:33:ee:a1:17:eb:7f:3d:f3:
         0f:7b:ec:73:76:54:7f:78:ec:20:29:50:7b:78:eb:0d:65:cf:
         3c:41:58:65:11:bd:cc:eb:4b:29:a0:c3:12:5f:c2:26:17:33:
         10:a8:2f:4c:aa:59:aa:09:cc:c5:11:60:c6:37:e4:ba:88:76:
         20:ac:17:19:b1:43:55:14:44:9e:4e:93:d2:40:74:31:5a:9e:
         a4:cc:2e:2c:e7:77:a7:a4:78:82:e6:2c:c0:c1:67:fc:13:ec:
         69:e8:a7:a6:55:b5:cd:80:ff:3e:66:77:de:ab:cd:a4:ad:e4:
         04:37:c2:7c:3b:39:be:b9:fa:5f:13:81:d4:4a:5d:21:7f:00:
         06:2d:7c:92:4c:9b:c0:17:ba:04:53:02:0a:36:53:d1:5e:c2:
         f6:a0:b9:bb:35:a8:b5:1c:df:cf:5d:48:93:12:3a:7c:85:56:
         02:7d:05:71:6f:b4:a1:53:fd:ce:12:dc:02:2f:1b:a7:87:5b:
         5a:8b:d6:28:85:5f:ab:f8:03:cc:2a:2b:c2:5a:39:6b:2d:25:
         6b:80:ec:41:06:d3:86:df:72:f5:d2:84:ed:56:2d:68:ca:d8:
         ac:af:10:08:6c:31:90:b1:bc:22:02:1f:6f:77:e4:a4:fd:8c:
         73:d7:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:45 2026 by rpki-client