This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File:                     EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier:          ySpsOAZOji6dzZfqTsttiXojrbS6xMHrpre6xY6Ai2Q=
Subject key identifier:   4A:83:35:85:1F:FD:4C:E7:A9:86:17:63:0D:E7:31:91:E7:50:93:52
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer:       /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial:       019C420F717107DE6934C32454457E476FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 11:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:34 +0000
Files and hashes:         1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: Z1VzZTMQd0xICXMfIemjvZvok2GLLkt+N1EM0x0i2oM=)
                          2: kKlXzTXjueD4aV2RPewpgcu-BS4.roa (hash: o9M2DvXmpV9HLolJqNlhrCOdw2MyjQNTI+g5HIxVra0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:71:71:07:de:69:34:c3:24:54:45:7e:47:6f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
        Validity
            Not Before: Feb  9 11:00:34 2026 GMT
            Not After : Feb 10 11:00:34 2026 GMT
        Subject: CN=4a8335851ffd4ce7a98617630de73191e7509352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:f6:7d:62:a3:d7:fd:a8:14:34:d3:2c:c8:
                    61:5b:67:1d:10:03:87:ef:33:7a:27:41:f6:3f:3b:
                    e0:31:62:2b:60:09:56:a3:a9:26:3e:5d:92:ab:55:
                    37:da:8d:ff:7a:2c:48:73:e8:4c:5e:f4:cc:a2:0f:
                    ab:4c:75:51:26:1b:a8:a4:bd:88:58:5b:e4:a1:32:
                    8d:ee:c8:05:d0:c8:17:3e:70:75:5b:05:8d:23:0d:
                    32:24:c0:aa:5c:93:2d:46:15:51:c7:c8:b5:9b:54:
                    22:a9:30:d2:03:4d:94:b7:4d:d9:42:c1:d7:c1:2b:
                    13:ee:4a:cd:34:00:20:bb:c9:47:d9:80:36:f8:e7:
                    9a:a5:b1:d5:8a:ca:6c:2e:de:f9:36:f8:c3:8d:03:
                    95:75:df:46:b2:ad:49:1b:63:86:03:34:68:8b:12:
                    58:db:4d:47:4d:a3:5e:e5:43:5d:c9:91:49:da:68:
                    4c:04:d9:27:5e:de:ee:b0:0d:07:18:2c:31:db:08:
                    fc:2a:28:ce:19:e5:3a:f4:1a:74:00:89:03:cb:63:
                    1a:37:e5:8c:93:5a:e5:3d:f6:2e:32:86:6d:b3:dd:
                    c2:f5:2e:bf:c0:c6:08:f8:1b:aa:1f:ea:04:81:69:
                    df:88:b3:69:64:f5:ba:ed:51:16:83:c5:34:22:58:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:35:85:1F:FD:4C:E7:A9:86:17:63:0D:E7:31:91:E7:50:93:52
            X509v3 Authority Key Identifier:
                keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:b3:e3:da:f7:cc:30:a6:4d:43:f6:c1:0e:30:f3:37:c3:
         13:c7:f2:52:0b:7e:29:3c:f3:bf:04:cc:8e:ae:98:59:81:ec:
         5c:76:21:69:45:72:39:09:c4:16:22:ad:60:59:82:c2:f6:23:
         1a:69:b0:85:82:af:30:d1:b7:59:c3:ac:d9:fa:0f:2a:a7:45:
         d0:7c:13:9b:1c:4d:c9:56:50:86:df:5d:d6:da:3b:db:3d:46:
         2d:8d:fa:5f:de:cf:32:5a:97:40:79:80:c5:1c:8e:cb:19:bd:
         4b:b6:28:df:6d:2b:e2:15:64:19:17:24:b2:3c:07:8d:7e:66:
         96:2d:bb:ff:8d:f6:7d:b6:3c:6a:a2:da:bc:73:f0:9e:08:67:
         5b:b8:b0:89:6d:d6:fd:5c:ab:60:c6:55:b5:27:c1:c9:a3:26:
         0c:7a:a1:38:60:2a:a8:0d:ab:ed:76:56:46:fe:17:09:b3:d7:
         d4:7b:46:da:48:a4:cd:b1:25:83:fd:47:9b:52:8a:62:c8:e4:
         29:d9:74:51:8b:4f:31:51:d2:a8:ba:66:2a:80:6b:30:68:2f:
         cc:22:54:74:94:8d:40:02:db:a3:51:7c:25:8e:22:9c:e0:04:
         80:64:ba:5d:83:3b:83:99:4a:18:c2:bc:a1:99:af:e9:10:36:
         3b:46:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:32 2026 by rpki-client