This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File:                     _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier:          /Nk/bElbbVwd4dG/nBzsWjSZe1z0sAynNZA4FTOPWCE=
Subject key identifier:   33:64:4C:6D:D4:26:7F:18:99:AD:A2:EE:61:C6:DD:17:DA:01:16:AF
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer:       /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial:       019C42EB52938E341C8941A491C16E62C288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number:          14C0
Signing time:             Mon 09 Feb 2026 15:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:44 +0000
Files and hashes:         1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: 7dLWZtrZsTxhq9YTRQLxLO8bh1kNgHA9dsAkTb0rn3U=)
                          2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:52:93:8e:34:1c:89:41:a4:91:c1:6e:62:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
        Validity
            Not Before: Feb  9 15:00:44 2026 GMT
            Not After : Feb 10 15:00:44 2026 GMT
        Subject: CN=33644c6dd4267f1899ada2ee61c6dd17da0116af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:01:3c:66:22:34:5d:a8:26:82:56:1c:13:1b:
                    0b:42:d0:0f:d0:4e:4b:a9:db:1b:fd:d3:a8:5f:01:
                    15:20:4f:bf:00:dc:07:c8:eb:1b:20:ff:73:3b:c0:
                    26:7b:fc:1b:c4:96:3d:12:25:69:dc:c4:da:12:16:
                    bc:01:99:a9:e9:e8:ac:7a:e8:ec:3f:aa:73:27:c3:
                    e4:78:78:0f:0d:e4:d1:83:93:c9:36:dc:9d:00:38:
                    d8:84:8c:26:02:ca:09:c4:8f:f8:52:a4:d4:8b:65:
                    96:94:07:f7:1f:1e:bc:10:c9:b7:5a:68:dd:7b:4f:
                    cd:15:78:a9:1b:53:16:38:5e:fd:d8:bb:25:f2:11:
                    5b:8a:da:ab:47:1a:1c:53:d1:3d:cb:3c:e9:4e:5f:
                    3a:95:e6:cb:17:2e:7c:68:12:e2:34:6b:a7:25:53:
                    64:35:36:9b:8d:b4:f3:49:38:d7:91:86:ea:ff:7b:
                    24:8c:c3:92:23:ce:4d:89:c3:ad:c7:d0:81:d0:d1:
                    90:0e:15:46:7f:51:d2:3a:77:df:fa:81:c7:f5:af:
                    a9:e4:62:7c:c0:14:eb:9a:d6:b7:91:64:c0:73:2b:
                    7f:9c:2d:0d:6a:ed:be:fd:a3:c2:83:68:5a:76:f5:
                    8d:9e:6d:67:19:1d:31:c9:8e:5e:32:6b:60:61:6f:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:4C:6D:D4:26:7F:18:99:AD:A2:EE:61:C6:DD:17:DA:01:16:AF
            X509v3 Authority Key Identifier:
                keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:9d:48:c9:36:07:8d:ea:16:41:a6:85:03:76:65:a7:07:
         5e:b2:6f:75:44:fe:78:45:5c:57:46:ec:4d:19:f0:4e:ea:a1:
         26:c3:e2:8e:34:0e:80:7e:79:e6:c2:80:51:9a:03:8c:57:03:
         b6:0f:0e:06:07:59:c9:3c:a2:dd:3b:74:44:72:80:62:1d:35:
         d1:7b:d4:9d:37:fb:e2:63:f5:38:c2:29:89:65:fd:9d:ef:a5:
         3b:c3:fe:3e:60:a8:07:b4:d6:77:e7:8f:9e:f4:4d:5c:87:32:
         8b:88:c7:0d:6c:76:eb:8c:e5:74:2e:b7:28:0d:cd:e4:da:52:
         26:71:3a:c0:89:d6:20:c3:bd:ee:a2:59:1a:ca:ec:70:6f:07:
         3e:89:0d:c0:39:06:82:2b:a6:0e:e3:03:0d:0a:6c:30:a5:56:
         5c:1f:08:e2:a6:e5:59:a7:c6:aa:70:c8:f9:35:85:33:06:cd:
         fd:87:c9:17:a7:7f:1b:79:74:00:a4:64:ec:af:ca:4b:1f:c8:
         9c:4d:16:53:c3:52:5f:69:e2:b6:46:de:5e:77:cf:58:d9:4b:
         be:75:ef:e6:42:03:ab:8a:4f:c8:7d:0c:dc:3a:5f:dc:90:d7:
         06:b5:ee:17:18:aa:09:f8:92:c6:d9:10:c8:8e:1e:e2:a2:6a:
         a7:8d:e9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61KTjjQciUGkkcFuYsKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5
MmZjZTkwHhcNMjYwMjA5MTUwMDQ0WhcNMjYwMjEwMTUwMDQ0WjAzMTEwLwYDVQQD
EygzMzY0NGM2ZGQ0MjY3ZjE4OTlhZGEyZWU2MWM2ZGQxN2RhMDExNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AE8ZiI0XagmglYcExsLQtAP0E5L
qdsb/dOoXwEVIE+/ANwHyOsbIP9zO8Ame/wbxJY9EiVp3MTaEha8AZmp6eiseujs
P6pzJ8PkeHgPDeTRg5PJNtydADjYhIwmAsoJxI/4UqTUi2WWlAf3Hx68EMm3Wmjd
e0/NFXipG1MWOF792Lsl8hFbitqrRxocU9E9yzzpTl86lebLFy58aBLiNGunJVNk
NTabjbTzSTjXkYbq/3skjMOSI85NicOtx9CB0NGQDhVGf1HSOnff+oHH9a+p5GJ8
wBTrmta3kWTAcyt/nC0Nau2+/aPCg2hadvWNnm1nGR0xyY5eMmtgYW80JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNkTG3UJn8Yma2i7mHG3RfaARavMB8GA1UdIwQY
MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt
ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3
LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp6dSMk2
B43qFkGmhQN2ZacHXrJvdUT+eEVcV0bsTRnwTuqhJsPijjQOgH555sKAUZoDjFcD
tg8OBgdZyTyi3Tt0RHKAYh010XvUnTf74mP1OMIpiWX9ne+lO8P+PmCoB7TWd+eP
nvRNXIcyi4jHDWx264zldC63KA3N5NpSJnE6wInWIMO97qJZGsrscG8HPokNwDkG
giumDuMDDQpsMKVWXB8I4qblWafGqnDI+TWFMwbN/YfJF6d/G3l0AKRk7K/KSx/I
nE0WU8NSX2nitkbeXnfPWNlLvnXv5kIDq4pPyH0M3Dpf3JDXBrXuFxiqCfiSxtkQ
yI4e4qJqp43pfQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:53 2026 by rpki-client