This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File:                     esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier:          RJ4hEY7K/Vq7rsQXGqya/qSRlTOeT/lKkug2JUf5MqY=
Subject key identifier:   2A:47:76:2C:C2:7D:6F:04:60:DB:80:AB:C5:8F:E7:DF:DA:73:E5:CA
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer:       /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial:       019C4322FD78AF3FC868694277F118F52027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number:          100D
Signing time:             Mon 09 Feb 2026 16:01:32 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:32 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:32 +0000
Files and hashes:         1: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: JZkOrc60yIx4bItMEz6jK5pAzH0fEP6dr0KcsT2Ik3Q=)
                          2: oxAaTJm6w19ZYAezwM2Bse1zk-k.roa (hash: UmiPLqYirI4eFKMHzTXAkfjhckK4NXBAKqDlpgaTmlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:fd:78:af:3f:c8:68:69:42:77:f1:18:f5:20:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
        Validity
            Not Before: Feb  9 16:01:32 2026 GMT
            Not After : Feb 10 16:01:32 2026 GMT
        Subject: CN=2a47762cc27d6f0460db80abc58fe7dfda73e5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:3b:24:c6:34:16:07:2a:3f:62:6e:8b:58:
                    ec:d0:20:a3:15:29:08:d5:4f:78:f3:6f:c9:23:9d:
                    03:d8:9a:7a:31:50:08:b8:42:ea:54:d5:11:2c:58:
                    c8:5e:72:d2:92:e8:cd:2e:c2:3f:b5:05:4a:ac:3e:
                    9d:c7:fa:f0:6e:47:db:13:0c:7e:58:30:49:88:7b:
                    05:38:37:78:d3:66:3a:9f:c3:cb:61:5a:20:17:a3:
                    67:ca:79:71:b1:cd:e1:1f:38:aa:57:70:21:43:54:
                    2f:77:7a:d0:ff:cd:24:92:38:3a:f3:fc:66:a8:d8:
                    51:e5:3e:90:e6:f6:99:89:73:24:46:22:15:cc:8e:
                    4f:58:23:aa:6d:49:37:12:ea:98:bd:61:a0:15:5b:
                    bc:ed:87:aa:2c:ff:58:7d:0c:00:e6:84:34:c9:a4:
                    65:b5:90:f6:f6:24:6e:8b:36:a5:bc:9c:fa:d6:bb:
                    d9:cc:3b:0d:fe:f4:83:77:e5:4f:0b:9d:c4:30:c8:
                    45:48:ea:b7:36:b5:af:d6:73:d2:5d:c1:a4:ec:14:
                    7e:c8:04:cc:2b:14:fd:db:19:23:9a:03:99:bc:20:
                    46:85:ac:b8:bb:fa:bf:32:49:9c:9d:00:34:46:3e:
                    23:c7:d9:58:05:7a:52:37:93:46:fa:68:e2:ab:74:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:47:76:2C:C2:7D:6F:04:60:DB:80:AB:C5:8F:E7:DF:DA:73:E5:CA
            X509v3 Authority Key Identifier:
                keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:12:c0:34:12:29:e7:f3:1b:22:ae:b2:b0:6c:dc:09:f7:40:
         3b:af:f1:25:41:fe:f6:34:a5:5e:39:a2:14:c6:86:73:74:66:
         0d:e1:bd:a9:1c:91:55:93:f4:b4:6c:31:43:66:d2:dc:e9:5f:
         d2:1e:91:8b:ca:36:3c:46:b1:f3:56:fd:7d:fe:92:22:e8:b6:
         62:c5:19:c8:86:fb:56:e3:f2:f5:df:e2:b3:2a:c2:d2:e1:de:
         22:7a:58:65:5f:f6:9d:a7:89:1e:c1:e6:aa:9e:6f:3e:96:8d:
         15:4a:ea:15:05:5d:c2:24:48:b6:67:0c:79:8c:9e:56:ea:32:
         f6:1f:19:ea:a0:99:8e:f0:69:bc:67:87:ff:95:23:7b:a7:b8:
         a6:12:7f:e3:0a:77:76:76:d4:35:3e:c4:15:a6:dc:72:7d:f7:
         93:f8:13:ff:20:39:64:56:72:ce:cf:d8:52:37:0d:93:37:47:
         42:1a:40:89:1b:02:82:c8:a3:e9:e6:b1:45:79:ce:ba:86:80:
         96:5d:2d:d7:79:df:92:6e:22:ca:65:0c:8c:9f:2a:31:09:86:
         d7:61:15:8b:f8:b3:c9:35:0f:b6:1f:07:d0:5f:24:f9:d8:d0:
         57:58:94:b0:b1:5b:f0:82:6b:d1:5f:53:44:b7:03:ae:10:df:
         63:e7:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:12:56 2026 by rpki-client