This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File:                     eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier:          7feFu9W0GbW2Vt2w4lqBswIeoDFphtlG3MBvOdnubzY=
Subject key identifier:   A4:7C:15:8F:95:97:97:5C:BB:73:17:A7:8B:43:44:2D:F5:C0:F3:49
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer:       /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial:       019C4358F543B666354F1FB88875E2C3F1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number:          0204
Signing time:             Mon 09 Feb 2026 17:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:29 +0000
Files and hashes:         1: TQNI8cQSDUVw34W6ZTwGYZVMqXk.roa (hash: Awh5KrfX+HKhRUgeqGTHvrRVEc6ZCfXov7wUkGa6uMc=)
                          2: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: GHToQ6NhBTGfDRQiw4XnquTcsvObX3jD/1UHvxjhF2A=)
                          3: vcYfbPfGVs0aMYKOlxwdnUc65Uc.roa (hash: YMNkeJBfcEDciUVO4DqSW7poLvVvmF0rwrSlq2tpwWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:f5:43:b6:66:35:4f:1f:b8:88:75:e2:c3:f1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
        Validity
            Not Before: Feb  9 17:00:29 2026 GMT
            Not After : Feb 10 17:00:29 2026 GMT
        Subject: CN=a47c158f9597975cbb7317a78b43442df5c0f349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:fc:6b:ad:be:bb:fb:9b:59:c1:cd:d7:2a:
                    24:03:bd:99:c5:71:70:39:dc:dc:35:db:2e:6a:95:
                    91:3e:af:0b:74:32:f0:da:3b:45:66:8c:cf:cd:2d:
                    1c:b3:cc:aa:20:d4:52:4a:69:e7:d4:05:67:da:18:
                    ba:32:34:ac:aa:79:8d:fc:38:f6:3f:0b:10:1e:cb:
                    05:b0:3b:d5:c8:d5:bc:21:50:00:51:ff:c1:77:86:
                    73:19:1f:c2:1e:b4:4b:47:0d:5e:42:51:20:d8:a1:
                    d2:52:ae:54:0a:13:c6:03:46:70:26:a2:6b:7d:6c:
                    86:12:da:e9:ef:f9:8d:72:74:bf:bf:e8:21:bf:56:
                    00:ec:3c:c3:3c:f5:c3:98:c0:9d:aa:19:3f:e5:06:
                    dd:6d:eb:54:1b:da:56:12:c8:02:86:a7:2d:ff:bb:
                    8c:9f:50:bb:b3:07:53:86:2c:d4:04:3d:e2:c4:12:
                    d1:a1:64:ce:56:b7:0d:5d:6e:0e:b2:6e:8c:da:3c:
                    15:68:56:12:be:00:71:89:57:ab:2d:8f:1d:c8:0a:
                    6a:1e:97:bc:10:61:2a:20:9f:14:68:c6:4a:d5:f4:
                    f4:a1:1c:49:42:1c:48:fb:81:88:de:af:bf:35:e6:
                    a1:55:85:9a:69:22:e1:46:99:44:96:fe:bb:09:04:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:15:8F:95:97:97:5C:BB:73:17:A7:8B:43:44:2D:F5:C0:F3:49
            X509v3 Authority Key Identifier:
                keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:1e:f9:7b:c0:76:86:af:5a:e4:38:92:38:c0:1f:cb:fe:
         a6:44:4b:5c:4e:6c:79:3a:38:82:0d:cf:e8:6b:c1:b1:84:73:
         f3:68:3c:3c:4c:a0:1a:4d:69:a9:57:11:92:81:10:e4:2e:a9:
         5b:0e:94:c4:a6:e3:47:6a:a2:18:e7:77:59:18:dd:da:4d:a7:
         be:21:10:85:5b:3b:6e:af:8a:fb:d3:40:33:34:43:18:6f:0a:
         e1:80:c2:fd:0b:1c:06:e1:20:b9:be:f1:1b:35:71:a0:fc:51:
         bf:0d:c8:c5:8f:49:7a:5b:b8:31:ee:0c:93:78:a5:c9:fd:7a:
         b9:11:c3:05:40:4b:68:48:ee:b1:f9:ad:d9:07:56:ad:1f:7b:
         1e:0c:ef:7b:63:1b:f2:ad:ff:58:04:1d:03:71:90:44:a3:fc:
         a6:bb:b9:d3:24:9a:51:f4:fa:b8:93:4d:ad:f7:7b:2a:9f:25:
         70:64:e0:49:64:b6:42:f0:31:75:54:56:80:d7:eb:35:30:ce:
         09:02:be:43:61:4c:00:78:49:80:2d:a1:43:29:d2:8a:40:b5:
         63:43:b9:22:16:30:47:c7:44:1d:8a:bb:a1:70:e7:19:21:0c:
         83:f9:9a:e0:7a:a1:91:be:7b:ac:6c:eb:c0:20:d3:5a:9c:1a:
         07:29:66:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:05 2026 by rpki-client