This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File:                     eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier:          ASc3rs6sDgQWJFqYAl1Opovhde00xKQlri6M53JtgcA=
Subject key identifier:   BE:0D:E9:75:12:CD:02:1E:1F:65:92:66:91:E9:58:1C:8A:9C:F7:88
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer:       /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial:       019C42464614E7349DF7827D3EB20B24302D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number:          03F9
Signing time:             Mon 09 Feb 2026 12:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:27 +0000
Files and hashes:         1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: 2bNA7Au6JX9MIE6Os/se/naoA6FYlSLbSIc4T1gVHPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:46:14:e7:34:9d:f7:82:7d:3e:b2:0b:24:30:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
        Validity
            Not Before: Feb  9 12:00:27 2026 GMT
            Not After : Feb 10 12:00:27 2026 GMT
        Subject: CN=be0de97512cd021e1f65926691e9581c8a9cf788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:c2:fe:60:7a:4e:ea:82:0b:f2:fd:ef:71:
                    0b:1b:2b:58:55:8d:38:68:d9:37:bf:47:80:eb:9e:
                    ef:9a:5b:ac:0f:6b:f9:2b:dc:76:2f:68:60:35:8f:
                    db:c0:35:7a:dc:7f:68:52:28:4c:09:bd:c7:4a:61:
                    d7:57:e0:fe:2b:1e:fd:e9:bd:09:85:cc:13:63:c8:
                    d6:f7:8d:8f:4e:1b:41:f5:b3:9e:23:74:05:2d:79:
                    1c:12:95:77:70:1b:23:a6:f4:db:23:2d:53:75:dd:
                    ed:7b:10:00:fc:fd:e5:df:17:cd:e4:be:8a:2f:5b:
                    0e:f5:d8:18:d2:02:c3:d0:30:a0:52:af:36:d7:79:
                    36:00:65:85:9a:06:cd:fc:96:01:4b:4b:51:86:7b:
                    3a:58:c1:ad:51:e8:bf:b9:e4:cc:17:13:a8:c4:d3:
                    3b:54:24:48:d6:1a:c0:b4:f1:d3:a8:e7:a4:e4:07:
                    14:6b:b9:bc:5c:30:c0:19:bb:03:bc:40:97:45:88:
                    33:ea:00:29:27:4c:01:3e:12:4b:2f:17:7f:f5:8e:
                    ec:ff:f1:b4:23:2b:6f:19:83:b7:5c:f6:81:be:02:
                    70:30:e7:e9:d7:22:66:1f:7e:d4:82:b5:2a:f3:54:
                    af:61:ec:44:31:3c:52:34:e3:74:c1:2f:60:9d:a3:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:E9:75:12:CD:02:1E:1F:65:92:66:91:E9:58:1C:8A:9C:F7:88
            X509v3 Authority Key Identifier:
                keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:04:84:17:8b:d8:e0:60:b2:3a:f3:b5:6e:bd:c4:e9:0c:
         a2:9b:ae:3e:00:b5:a6:f6:cf:ab:38:e7:a5:07:2b:a6:a7:d6:
         8b:05:03:36:d8:82:0e:bd:ca:51:76:d1:47:5a:e1:02:e2:75:
         97:3d:d3:02:b5:c7:40:48:06:35:0f:fc:5c:a0:aa:44:07:29:
         09:67:1e:71:12:b9:0d:e4:55:a2:76:ad:4e:e3:22:b2:2f:fc:
         5f:3c:a3:d5:e8:eb:f9:be:f2:5b:a3:ca:21:36:fd:52:1a:a3:
         e6:f2:02:64:6f:82:95:5a:7b:66:08:9b:18:dd:59:5e:82:5a:
         f4:d3:6a:77:25:04:63:bc:64:25:12:fa:b6:98:3e:cc:f1:61:
         96:71:67:5c:ea:cb:3a:ec:f0:b9:d1:90:a5:9f:37:a7:39:7d:
         6d:65:4a:0e:75:5b:54:b9:44:58:a0:d2:f5:11:99:22:75:fe:
         42:ca:d7:f4:dc:fe:aa:7f:eb:44:f0:09:3e:31:b1:23:f9:86:
         fd:df:02:d8:0a:2d:3d:1a:00:13:bc:6b:bc:9a:2b:08:de:95:
         00:0b:6b:b2:ca:1d:d8:a2:be:78:98:5f:f0:40:d8:49:38:cf:
         32:55:60:2c:dd:9f:4b:20:66:4a:7c:cd:cb:07:34:28:3e:47:
         05:89:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:57 2026 by rpki-client