This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          vc+C24rd50wSerdeFyZH1RKV9R0iN9B99Z/BeyWOZEg=
Subject key identifier:   33:43:97:F8:EC:5B:A5:AB:B3:F6:3E:BD:94:0C:88:32:8A:DB:79:91
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       019C43225E0432EF09FC8D0AF6EB8AA053E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          145A
Signing time:             Mon 09 Feb 2026 16:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:51 +0000
Files and hashes:         1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: a808W77TOVm9wKlo4kWztYyzFC4ThIo597XfTaUMdPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:5e:04:32:ef:09:fc:8d:0a:f6:eb:8a:a0:53:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Feb  9 16:00:51 2026 GMT
            Not After : Feb 10 16:00:51 2026 GMT
        Subject: CN=334397f8ec5ba5abb3f63ebd940c88328adb7991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:93:41:db:bf:4c:55:0f:07:8a:89:f8:c9:
                    1e:e2:c8:53:79:2b:60:fd:2a:cb:33:fd:c5:73:b8:
                    64:ec:1d:59:87:82:90:01:dd:9f:87:26:2b:8b:1f:
                    32:14:a9:4d:de:e9:fe:d3:14:24:af:7b:d4:65:d4:
                    20:97:53:a9:7f:b4:85:b2:63:9d:e5:51:30:e6:d6:
                    4a:17:70:80:de:13:37:f6:f8:88:9f:43:fa:42:e2:
                    93:16:66:17:fd:3b:d9:db:6b:5c:d0:e2:0e:41:5e:
                    93:06:54:2d:bc:61:2c:3f:86:a2:05:fc:1e:f1:14:
                    3d:21:47:78:ab:a6:f9:e6:ab:d3:30:b1:6c:9b:70:
                    a6:c6:4e:f5:27:80:9d:6e:3e:b3:ba:46:f2:bb:61:
                    8c:25:86:f2:13:a4:da:65:be:fc:a6:15:a3:74:0e:
                    d0:7a:5a:26:f4:ae:e2:36:ee:1e:a5:1b:ef:91:15:
                    1b:0b:40:5b:4c:31:6b:1c:c5:6c:8a:48:0b:b3:e2:
                    56:64:5a:3f:ba:78:f1:4e:a8:21:ec:2b:1a:93:b1:
                    b3:63:8e:2f:e3:c5:d8:7e:53:6e:3d:15:7e:6a:a0:
                    64:20:b6:1e:00:16:1e:bd:e2:c6:53:d6:7f:a9:93:
                    63:63:51:8b:f4:86:5c:5a:94:10:91:93:fa:f8:bd:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:43:97:F8:EC:5B:A5:AB:B3:F6:3E:BD:94:0C:88:32:8A:DB:79:91
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:87:5e:8b:60:e3:1b:1f:53:f9:47:fd:0f:10:19:09:2a:70:
         fd:89:92:49:43:3c:58:ee:88:5a:be:f1:a4:95:ea:79:09:63:
         07:7b:00:e7:98:be:e6:2b:ad:7d:5a:0a:26:fd:2f:f8:15:3d:
         95:80:ac:ec:91:32:79:29:55:e2:02:34:bd:57:23:2c:a3:33:
         97:8c:37:ae:fe:f7:9a:37:63:bf:a4:77:7c:22:6e:b2:6c:8f:
         b4:52:c8:3a:76:59:29:dc:f4:63:c0:2d:b8:f6:6b:99:ba:04:
         f3:2b:44:5b:72:85:8f:e0:bd:59:31:e1:3c:88:2d:a4:9c:8f:
         e3:92:c8:d5:0b:24:2c:aa:f7:07:35:0a:94:80:1b:46:5e:56:
         00:f6:29:7a:5f:71:42:20:59:fb:27:55:06:a5:f2:fe:88:e3:
         31:1f:a7:75:ef:02:b2:b9:8a:c0:70:b2:65:b7:77:64:50:be:
         e6:6d:59:8a:cd:c7:8d:22:0b:82:87:50:2b:a1:85:80:d4:6d:
         b6:1a:a2:54:3e:1b:e0:04:07:4e:ca:4a:ea:85:56:0a:6f:dd:
         09:ba:50:09:ac:42:bd:7b:a0:36:c1:11:09:90:e9:fc:7f:a0:
         32:f6:3c:9d:19:89:b9:93:c9:0e:31:0f:6f:37:d8:cd:92:29:
         02:42:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:28 2026 by rpki-client