This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File:                     67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier:          3zc7vaDAcDxtQE2FS3Z6UjtGbGJ8b+d+XhrL2a+3bwU=
Subject key identifier:   6A:85:26:C3:96:A7:DE:7B:6A:48:E1:79:C6:C4:70:94:C1:78:0D:80
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer:       /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial:       019C43593B76707C4D6E566601385567C205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number:          0399
Signing time:             Mon 09 Feb 2026 17:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:47 +0000
Files and hashes:         1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: QCm1wFgrvZbXN3qZ+g6aDTzYA9lDhAm4p2+13lJxqds=)
                          2: TPhQNuZoNwZocKhp9yvEZfVXmdE.roa (hash: h7CAPAhfGs1ZFrBPIhrStmJuP7p3xigxJ/dzGfBrlvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:3b:76:70:7c:4d:6e:56:66:01:38:55:67:c2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
        Validity
            Not Before: Feb  9 17:00:47 2026 GMT
            Not After : Feb 10 17:00:47 2026 GMT
        Subject: CN=6a8526c396a7de7b6a48e179c6c47094c1780d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:87:4f:36:70:46:45:ef:6f:46:bd:41:f5:
                    e5:fb:e8:65:03:96:48:d5:51:31:25:b4:1c:14:f2:
                    f6:20:d5:fe:4d:60:01:b0:51:1f:8b:5c:d2:cb:a1:
                    a1:74:c2:9b:95:d1:f7:18:1b:61:d0:d9:64:af:20:
                    78:c9:20:ff:28:66:4e:8c:d3:6f:da:d1:ed:f7:39:
                    db:8d:5e:30:0a:51:33:44:62:eb:9e:2a:26:ad:4f:
                    e4:83:88:6c:b9:5a:7d:13:d0:36:e2:03:af:b7:0d:
                    e2:d1:b1:4d:46:49:3c:e9:90:c0:a6:87:ba:19:c2:
                    ee:82:aa:7b:d7:45:8a:20:eb:df:c5:18:50:ae:ea:
                    30:20:9b:11:69:ba:05:4d:09:ab:71:a6:45:be:f3:
                    2f:6e:6a:0d:0c:2f:41:87:49:cd:af:74:de:1f:bf:
                    74:f2:ac:9d:f8:7c:01:fc:7b:26:63:c5:7a:c7:9c:
                    72:c3:dd:12:b4:bc:6c:40:20:5c:ef:f8:c9:3e:69:
                    f3:42:9b:37:26:21:c0:ec:01:2b:15:4f:4a:09:d6:
                    cd:06:96:93:f7:96:f1:2d:7d:af:58:c6:83:d5:4d:
                    3b:db:54:3b:ee:29:5e:76:ad:48:e6:8b:7c:cf:8a:
                    06:3c:13:2f:d7:3c:0c:82:0d:99:df:e5:53:92:8b:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:26:C3:96:A7:DE:7B:6A:48:E1:79:C6:C4:70:94:C1:78:0D:80
            X509v3 Authority Key Identifier:
                keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:4f:4f:ea:b6:fa:e4:9c:86:d5:a3:25:af:04:9e:24:6d:
         eb:e3:d2:fe:fb:d1:50:a6:dc:34:75:c9:c3:35:45:29:0f:99:
         2b:5c:c6:29:41:0a:79:6d:50:87:28:31:2a:3b:bc:d9:df:83:
         a2:aa:62:c9:da:dd:0b:99:4e:35:7b:59:3b:72:f1:d9:bd:c7:
         c2:94:bf:fb:fe:af:f1:0d:51:51:2f:1c:d3:4e:9f:f4:fa:31:
         54:6e:46:05:43:ed:9d:6a:7b:39:fc:94:d9:c1:c8:f7:d4:5c:
         f0:0d:9d:46:a8:9f:79:e6:48:c0:53:38:51:04:e2:97:97:92:
         8c:22:5a:5a:00:ad:12:a8:28:61:86:b9:2c:b8:ce:00:64:0c:
         8a:72:c9:e4:a7:5b:e8:cd:95:6f:1a:4d:ed:63:11:cf:48:c4:
         c7:4a:d1:ee:b8:db:d0:3f:2a:22:65:a0:79:87:88:37:cb:a8:
         1e:dd:29:59:df:05:99:12:de:87:fc:2f:7e:b9:55:7e:bd:fb:
         26:01:3b:a4:61:46:85:e1:6f:71:bf:26:ca:89:15:2d:2d:ce:
         05:97:0c:2d:8d:23:87:21:a4:7d:0e:b7:1c:b1:c9:07:d0:f5:
         10:92:b3:ed:36:d6:72:40:88:4b:ba:32:62:b9:67:e3:59:72:
         3f:ee:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:05 2026 by rpki-client