This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File:                     EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier:          0sIdM7G8+Lkog0ca98UPi0bKdz+7azFeQbKxiW7RiU4=
Subject key identifier:   98:B6:60:81:41:1C:77:B0:78:66:6A:44:FA:F3:97:3A:F8:2E:5A:34
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer:       /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial:       019C41D8E05B0045117ED76914383E98705E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number:          0D5C
Signing time:             Mon 09 Feb 2026 10:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:58 +0000
Files and hashes:         1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: Gqv1//DL4OIdLi7HvsPfUsq9OZiSrJ8BZ9MfCluYDfw=)
                          2: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (hash: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e0:5b:00:45:11:7e:d7:69:14:38:3e:98:70:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
        Validity
            Not Before: Feb  9 10:00:58 2026 GMT
            Not After : Feb 10 10:00:58 2026 GMT
        Subject: CN=98b66081411c77b078666a44faf3973af82e5a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:a8:2c:73:01:e4:16:2d:6a:22:53:b4:24:
                    9c:53:7c:90:c7:bd:f4:08:3d:40:4f:5d:cf:a4:4e:
                    4e:4e:61:cf:16:af:f4:cf:06:00:17:e7:0a:6c:3b:
                    25:d9:73:18:84:ae:24:0c:82:09:4e:32:c3:d5:ef:
                    6c:da:b9:30:98:22:d8:40:5d:50:8f:db:cd:97:3f:
                    c6:fb:5d:4d:51:12:f5:4a:39:29:f0:a5:33:a3:4e:
                    1c:7b:8a:8c:ef:b8:ec:a7:70:7b:fe:61:d2:dc:3b:
                    a9:8c:59:01:2f:27:75:39:f9:85:1b:8f:9a:5e:7f:
                    5f:7b:cc:53:11:4b:34:69:70:8b:4e:19:e1:b6:63:
                    e2:e2:b5:02:9a:03:0c:d0:4e:9b:e3:c1:e9:79:80:
                    d0:68:77:33:4f:7a:b1:ae:ff:4a:43:e0:be:4a:14:
                    d5:e5:57:bc:9f:39:9d:dc:88:4a:34:ef:dd:cd:18:
                    26:6b:c7:2d:03:10:7d:fe:1d:b5:47:86:48:45:72:
                    08:3f:c1:06:83:02:00:27:e3:1e:d7:26:fc:02:1a:
                    06:33:ef:40:65:5b:58:e0:65:f4:4d:60:2d:ce:a1:
                    b1:4c:2f:8b:6d:f3:fd:b7:76:ce:29:3e:7f:42:27:
                    f9:fd:20:f7:9f:d1:9b:b1:8c:95:b5:fa:b0:46:a6:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B6:60:81:41:1C:77:B0:78:66:6A:44:FA:F3:97:3A:F8:2E:5A:34
            X509v3 Authority Key Identifier:
                keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:85:6c:1e:47:ba:e6:db:6e:2a:f2:47:aa:fc:19:13:f1:0b:
         54:d4:69:1b:52:c9:1e:15:b0:b2:c6:bf:9b:e2:48:45:e0:48:
         15:ea:80:63:40:c1:c2:b7:13:d9:6e:16:db:0a:ef:29:89:fb:
         e5:1d:1a:6f:9f:ea:47:80:6e:3e:81:2c:9f:00:d0:54:da:ae:
         9f:85:f3:e6:8f:06:6d:4a:57:de:a4:41:1e:2c:e2:19:56:c3:
         37:ce:36:99:3f:bc:70:02:d4:fa:b0:c6:8d:00:7d:88:05:b6:
         8b:4c:67:45:5c:68:6b:d1:24:e4:1d:6c:d4:86:6c:f4:a9:3b:
         73:64:53:21:62:ae:f7:ab:00:29:eb:ef:83:bf:a9:c0:3d:cb:
         28:5a:59:5c:c2:98:da:23:40:f4:4f:93:21:1d:a5:13:87:66:
         7e:49:6f:62:ad:73:f2:52:b7:63:d8:66:8f:f4:f0:a5:2d:4d:
         93:70:4a:de:7b:13:c4:5c:79:aa:44:b1:ee:cd:ff:19:fc:35:
         df:6a:5b:1c:a9:e4:cf:7b:8a:52:b0:5b:67:63:c2:83:2f:c0:
         4c:71:fd:89:6c:4b:93:b7:ac:89:0d:e2:60:e7:86:81:7a:3a:
         f2:50:04:22:25:c4:03:ca:e7:5e:45:a4:f6:58:e2:9b:c1:4a:
         c3:d3:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:52 2026 by rpki-client