This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File:                     ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier:          L03WMN0jwr4BzeU3JFewqHIE/xFyYpS2GrBrtWy6R78=
Subject key identifier:   53:87:25:B4:6C:FF:DE:BB:C9:9E:C5:9A:4C:22:02:32:56:5E:15:25
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer:       /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial:       019C42B479A14CCD29F7E3C4DE306104D3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number:          08E9
Signing time:             Mon 09 Feb 2026 14:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:49 +0000
Files and hashes:         1: 7CSVGtYUX5r3HPpcYYedHjS20IQ.roa (hash: hzzOsdStylJXNXeCzZeL6+XDTe9J82yzkNqZCVPm+lM=)
                          2: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: 1zg/mSu7JW9aYF3hysLvKrGE0ozNj4gMLzAz44roD9s=)
                          3: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (hash: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:79:a1:4c:cd:29:f7:e3:c4:de:30:61:04:d3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Validity
            Not Before: Feb  9 14:00:49 2026 GMT
            Not After : Feb 10 14:00:49 2026 GMT
        Subject: CN=538725b46cffdebbc99ec59a4c220232565e1525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:a7:6d:be:7e:f4:7d:0d:15:b0:90:59:5f:
                    34:00:cd:b4:39:43:72:7b:99:1e:21:0d:20:f9:3d:
                    cf:7e:e7:fb:2b:81:f2:e7:e8:b1:b0:52:6f:91:5d:
                    f3:65:c7:be:4e:d2:7c:a1:8a:7a:20:67:ab:7d:ae:
                    5b:6d:90:5c:5a:e6:5f:c0:ec:31:d1:38:5c:a5:c0:
                    99:b8:51:66:26:15:58:7d:9d:b9:22:1e:7c:f8:c4:
                    87:87:63:93:1c:e5:3c:7e:4e:78:d9:28:62:aa:49:
                    7a:cc:34:95:3f:39:68:a7:c3:c8:87:ca:7f:75:dc:
                    19:10:a9:f5:05:3a:55:8e:1d:9b:44:7b:b2:6f:f4:
                    44:c6:15:6d:92:27:6d:ad:fe:7a:f7:cf:04:3b:84:
                    c8:39:66:37:63:5c:37:cf:6b:c1:fa:5b:b6:9a:f6:
                    bf:6d:7e:a6:11:91:8c:51:0a:35:a4:5e:21:69:64:
                    cc:96:7a:95:06:d0:57:4d:39:fd:a2:7e:b1:76:70:
                    97:e7:5f:d3:c2:58:ba:41:fa:d1:17:ce:47:60:ea:
                    30:bf:65:dc:ad:09:1e:c3:b4:f1:54:a2:aa:f0:8d:
                    49:d3:f3:97:e9:5c:10:ea:41:b6:20:45:bf:37:fa:
                    90:79:9b:88:fa:b1:8d:e0:54:19:8d:78:c6:31:3c:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:87:25:B4:6C:FF:DE:BB:C9:9E:C5:9A:4C:22:02:32:56:5E:15:25
            X509v3 Authority Key Identifier:
                keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:74:dc:e7:34:c6:a7:be:d0:39:ed:cb:d0:b1:84:28:0c:
         db:b0:cb:88:1f:d8:1e:b7:95:b5:49:9f:d8:f1:2c:83:e0:9e:
         35:17:16:ac:0c:d8:9f:fd:52:91:e8:c3:98:79:fc:72:c5:92:
         bc:bc:9c:a7:01:f7:88:f6:a1:ef:90:1a:a1:20:0b:c5:4d:da:
         80:89:e0:0c:fb:82:bc:63:08:54:ae:85:77:7c:0e:aa:0e:be:
         a2:55:29:b1:54:9b:e1:20:19:b9:61:0f:e5:50:6a:ae:e1:3c:
         c6:89:66:a4:a1:69:cc:31:b6:fa:cd:3f:10:f2:48:55:1f:e2:
         ed:73:9b:d3:ba:6e:94:e4:4f:fb:80:2d:ae:23:52:33:c6:33:
         20:d2:24:13:ee:78:13:11:d7:3d:1e:e1:53:1a:cb:74:02:1b:
         c0:c6:81:68:c3:76:b5:e5:05:35:96:70:fe:2b:eb:65:40:c0:
         8a:7b:48:ad:d9:03:05:8f:73:d0:28:27:85:23:a8:43:37:6d:
         59:3b:0a:89:89:eb:b1:fd:b0:52:25:96:e7:53:e0:c8:c4:43:
         4a:13:6f:d6:60:b2:bc:56:b4:37:da:a5:aa:3c:11:c6:fa:c5:
         b4:8a:4f:ed:0b:55:bb:1b:17:69:cd:82:dd:ba:39:ae:e6:7b:
         fd:6f:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:06 2026 by rpki-client