This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          8RrUBvPPHD84cELTmrXZCAQYLghsRosBz7lwKLQpnCQ=
Subject key identifier:   D5:87:FB:39:16:DF:A0:6E:30:E4:85:C7:0F:7A:CC:A1:48:FA:37:FA
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019C43FDB4193DDA880DCB42BB41EDBDDB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0CCC
Signing time:             Mon 09 Feb 2026 20:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:25 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: A6MUGg6ZYakX/EMhhbVkdpf37VlFyqLiVPQ9fZCoNRk=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:b4:19:3d:da:88:0d:cb:42:bb:41:ed:bd:db:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Feb  9 20:00:25 2026 GMT
            Not After : Feb 10 20:00:25 2026 GMT
        Subject: CN=d587fb3916dfa06e30e485c70f7acca148fa37fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:fc:b8:3e:18:0b:39:b8:c0:b5:d0:d5:b5:
                    33:ec:d9:ff:46:91:77:5c:a5:d3:45:12:b3:ed:70:
                    ab:58:1f:f9:dd:3d:c3:11:80:3c:f4:6a:93:6e:50:
                    e2:7e:9d:54:12:9d:cc:d6:77:df:7b:54:c2:c6:da:
                    11:6f:f3:f3:34:11:09:af:f3:2a:40:84:54:3f:16:
                    52:7e:00:1e:23:15:26:5d:e6:c3:91:3c:ab:d3:37:
                    59:15:04:1a:1e:1a:cd:19:dc:c2:97:4e:96:3e:04:
                    a3:71:32:c0:07:5f:fb:db:b4:85:d0:2b:11:37:dd:
                    74:bf:a4:fe:63:7d:17:4d:c9:91:85:78:7c:c1:70:
                    f2:d2:8a:98:02:f9:f1:77:5f:19:1d:98:8e:e1:c5:
                    4e:c0:0c:10:4b:9d:29:84:bd:56:ae:4b:17:ec:01:
                    b3:1c:da:f3:ce:15:b9:55:f3:e5:54:5d:e5:27:72:
                    32:53:87:33:52:f1:f0:72:c6:19:26:5f:d7:d2:9b:
                    b5:9e:aa:26:5e:0f:69:4d:83:12:a5:42:23:dc:f2:
                    b1:52:7a:91:be:b6:24:de:b6:7b:5f:c9:62:af:f0:
                    ac:eb:3f:b0:63:68:f9:af:dc:69:53:15:b1:90:91:
                    8d:c8:06:01:07:55:64:1f:8a:c0:3a:df:60:e5:bc:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:FB:39:16:DF:A0:6E:30:E4:85:C7:0F:7A:CC:A1:48:FA:37:FA
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:55:31:b1:92:52:e5:a5:2c:58:50:49:07:e2:b8:ab:0b:
         a0:5d:c4:56:2a:23:d8:be:e1:ba:7f:45:14:d6:43:42:b0:81:
         73:70:73:dd:b7:cb:59:b4:13:da:ca:2f:36:d4:9e:d5:fb:2b:
         ba:a7:17:04:f8:13:cd:f6:a1:f4:13:00:d3:ff:96:fd:8f:37:
         f4:b1:a1:8f:83:ed:cf:e0:a7:00:b4:27:e7:4c:d2:06:96:70:
         ac:f9:32:75:6d:5f:70:27:d8:b7:75:20:88:49:76:90:48:fa:
         0e:76:40:94:b9:5a:ed:76:af:4d:49:a4:d5:39:82:e0:9c:89:
         1f:bd:f7:7f:0b:bf:ec:d0:7a:85:6c:22:cf:d0:11:1c:b5:90:
         fb:39:ae:61:22:56:0d:4c:92:48:ec:df:98:83:50:4a:ea:5b:
         30:23:db:66:1e:6e:58:1a:25:b8:42:7b:fe:c3:5d:ee:7c:d5:
         2d:10:f0:41:55:80:d5:ea:0f:dc:2a:aa:f6:ae:40:9c:b9:01:
         36:c9:49:27:0d:e7:f4:fa:c7:16:be:b2:5c:19:f5:ef:b0:df:
         76:2a:d1:e3:d9:4f:8e:00:9d:c5:e1:b2:e1:bf:8c:d7:43:b1:
         81:32:95:23:e0:0e:fe:96:b5:8f:7d:8b:b9:ed:b9:25:e8:19:
         47:34:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:21 2026 by rpki-client