This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier:          85ixhI8iPvRGMZZVqeYrd39fVCWSa5dAMwkJ+UKPMZs=
Subject key identifier:   D3:52:BB:48:2F:68:63:DA:0A:8C:16:02:41:E5:C7:3B:4A:11:1C:3D
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer:       /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial:       019C42B40547F7762EA170FED8F9539FFC41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number:          1328
Signing time:             Mon 09 Feb 2026 14:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:19 +0000
Files and hashes:         1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: F9B1ksOSZiPXjg2mFwIrNLTRo6DPT2DlwXlwCjaCGI8=)
                          2: zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa (hash: Q6wVapDbvRerj+SvzLlvvzSsU2lv+SpfGrd8Ly/8NlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:05:47:f7:76:2e:a1:70:fe:d8:f9:53:9f:fc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Validity
            Not Before: Feb  9 14:00:19 2026 GMT
            Not After : Feb 10 14:00:19 2026 GMT
        Subject: CN=d352bb482f6863da0a8c160241e5c73b4a111c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:26:9c:ee:8c:fd:a9:71:7a:35:04:b6:a7:
                    38:59:0c:c0:8d:37:75:b6:eb:bb:bb:67:86:83:7e:
                    7d:4f:c9:7e:5a:17:8a:b7:62:54:09:09:d3:2e:7a:
                    84:b3:9a:b9:4a:9d:fa:07:99:a2:8a:5b:4c:0d:8f:
                    63:01:f4:79:22:dc:19:29:a4:36:ee:e8:ca:54:55:
                    c0:75:79:d0:1f:29:98:a7:8f:9c:63:8d:ef:24:e2:
                    9a:48:d1:1e:54:89:c1:75:10:00:3f:f3:68:de:a8:
                    d4:00:57:cf:71:14:4d:7d:be:82:d9:53:51:66:17:
                    3b:c4:a9:dd:25:3a:35:7a:18:4e:45:90:db:5b:32:
                    68:25:46:6e:17:82:b3:68:8f:96:e3:60:d3:c2:ee:
                    1a:5a:23:19:a3:25:a3:e5:ed:91:0b:7e:3b:47:3b:
                    55:4d:1d:4f:c1:af:37:5f:98:72:8e:1b:27:a2:57:
                    4c:0c:7a:75:a1:8a:46:80:04:24:97:22:58:93:68:
                    ea:47:fe:d0:b1:48:6c:9a:b4:98:17:3e:e9:49:cb:
                    bd:db:b6:ea:1a:2c:d4:24:8c:75:22:9d:69:9d:e9:
                    0c:c0:ee:10:bc:0e:6a:fc:a5:51:8c:31:31:6e:f0:
                    88:21:43:4e:1c:0c:ce:17:f6:bc:41:40:6e:c6:3a:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:52:BB:48:2F:68:63:DA:0A:8C:16:02:41:E5:C7:3B:4A:11:1C:3D
            X509v3 Authority Key Identifier:
                keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:63:d2:d3:93:c0:16:59:d2:84:b2:b1:c7:1e:a8:99:7b:86:
         b2:31:6c:a7:54:ac:f9:8f:4c:ae:bd:53:9a:da:7f:9b:a6:e4:
         b6:11:e2:1f:51:29:da:51:17:16:23:49:d4:b1:b6:75:67:ad:
         b1:1f:29:c5:39:d6:76:6c:a3:59:7b:8a:a2:1c:0a:d8:d1:5a:
         43:c4:d5:64:07:ab:53:88:ce:a8:58:01:7c:52:67:da:a0:12:
         ac:34:b0:4b:aa:7d:40:d9:f1:f5:e5:08:30:40:57:23:c7:d8:
         4c:e7:9e:fd:49:f9:1a:42:cb:44:dc:c7:42:89:e6:f1:11:29:
         aa:66:11:bd:de:fb:ae:0d:83:45:82:da:5a:8a:3e:ab:e9:3e:
         3b:64:52:3c:93:16:0d:3d:07:ad:75:28:74:c6:ca:a8:fc:f3:
         ae:24:00:c4:1d:1b:17:f5:ec:7c:73:b9:d4:0d:5f:29:88:76:
         48:58:dd:e5:a7:00:02:96:ef:e8:92:9c:50:f9:a2:a6:d3:ac:
         c9:48:8a:95:1a:fe:8c:b5:85:c0:57:7c:1d:b3:e4:ef:5b:13:
         fa:9c:99:68:11:f5:bf:05:c4:b7:8e:52:78:4e:71:c2:5e:c5:
         0c:c0:cd:3b:78:85:74:b1:aa:33:92:f0:4b:4f:0d:f9:ba:e9:
         c3:35:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:14 2026 by rpki-client