This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File:                     ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier:          vB4XFyRuK37Jzt9c93dBkeULsLGn+zp2jOi28pDcvRA=
Subject key identifier:   7E:AB:E0:02:FB:DC:A0:54:0B:42:9F:C3:4D:E9:14:08:1E:21:C0:1F
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer:       /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial:       019C4434AFF875E31F014C1B6E7AE86C499B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number:          0FC7
Signing time:             Mon 09 Feb 2026 21:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:29 +0000
Files and hashes:         1: PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa (hash: 4btrLU4Yp51Rk7dJr+hkTDUzW5uwF4yGfkuoF/u5R5U=)
                          2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: O50InaRbNzXQhuD6u4yguwCOrmImEoMijlXHopMj3KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:af:f8:75:e3:1f:01:4c:1b:6e:7a:e8:6c:49:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
        Validity
            Not Before: Feb  9 21:00:29 2026 GMT
            Not After : Feb 10 21:00:29 2026 GMT
        Subject: CN=7eabe002fbdca0540b429fc34de914081e21c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:35:ef:4c:6e:47:b7:1f:6c:f8:b6:12:bc:
                    0a:e2:50:07:58:97:93:c7:ae:75:03:3d:5f:02:8e:
                    93:18:3a:51:56:55:82:64:0d:af:f0:60:7f:c8:ab:
                    22:7b:5a:c1:b2:31:5a:6e:a3:26:1c:fe:0b:77:c2:
                    dc:f1:be:0a:40:dd:2c:3f:38:1b:36:10:59:c4:6d:
                    96:32:cf:4a:ae:11:66:b8:e6:ef:27:ec:6f:69:de:
                    5f:72:59:d2:9e:13:6b:14:00:bd:5e:86:cb:ba:0f:
                    cb:8c:14:d5:93:28:34:b4:ef:2f:f8:92:fc:1f:3f:
                    4a:05:e8:89:ad:97:87:03:7d:c2:da:c2:19:78:02:
                    3e:34:e2:d3:b1:a0:f2:b5:73:f9:21:cf:59:f7:50:
                    e3:21:5b:05:7f:81:33:ef:08:e3:35:fa:0a:8e:78:
                    54:20:4d:81:e2:81:32:8f:02:08:5d:d6:7d:5b:84:
                    ec:17:72:95:ae:e0:2e:66:10:e8:50:3f:78:38:8e:
                    2c:ae:a2:4e:a7:b0:6d:69:c1:2c:7b:07:0f:c9:d7:
                    e5:a9:03:2c:0b:26:0f:06:10:cb:5e:54:6e:62:87:
                    b0:cb:53:f9:5a:dd:ac:2c:4b:80:29:4f:7a:25:bf:
                    b4:37:02:d9:cc:25:6d:eb:a3:f2:66:c8:7e:87:5d:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AB:E0:02:FB:DC:A0:54:0B:42:9F:C3:4D:E9:14:08:1E:21:C0:1F
            X509v3 Authority Key Identifier:
                keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:68:6e:f4:4a:12:17:88:ac:66:a0:23:6f:22:76:06:f3:
         48:31:f5:bd:d2:5d:c1:1d:07:01:18:af:f2:2f:b4:d0:2e:24:
         c4:52:02:33:26:b9:34:5f:fe:c8:c5:c3:bd:b0:83:50:48:6f:
         f4:38:9e:ed:a7:14:ca:b4:dc:6f:e5:91:20:aa:be:9d:18:66:
         99:a6:21:02:c7:f6:f1:a9:14:00:b1:9e:be:cc:37:df:47:fa:
         97:58:d9:21:b9:56:42:da:c7:92:ec:8b:c9:d8:2c:71:9d:04:
         58:6b:ce:d7:9b:ca:e8:33:c9:a1:ba:75:bd:aa:7f:f5:68:56:
         4f:db:78:b8:71:03:12:9e:d9:cc:22:e8:f0:32:2b:25:05:9b:
         55:7f:70:89:9f:09:0e:0b:70:fa:b2:13:50:41:fa:96:59:ee:
         ac:8c:c8:f2:b0:f2:e6:ba:3a:b9:98:fc:9b:cc:d0:e1:ca:cb:
         3a:c9:71:35:38:8f:c5:43:93:ea:db:f5:41:6e:b9:d1:7c:fc:
         a7:c6:3b:1b:af:a9:db:7d:c1:8b:62:67:33:8f:77:81:a9:bd:
         a5:26:eb:14:f5:ab:18:89:4b:b4:c6:9c:e7:13:3f:90:6f:95:
         08:b5:6c:82:28:fd:d4:da:f4:d2:18:f9:45:78:df:19:82:89:
         14:7d:1c:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENK/4deMfAUwbbnrobEmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh
YjkwYjEwHhcNMjYwMjA5MjEwMDI5WhcNMjYwMjEwMjEwMDI5WjAzMTEwLwYDVQQD
Eyg3ZWFiZTAwMmZiZGNhMDU0MGI0MjlmYzM0ZGU5MTQwODFlMjFjMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dk170xuR7cfbPi2ErwK4lAHWJeT
x651Az1fAo6TGDpRVlWCZA2v8GB/yKsie1rBsjFabqMmHP4Ld8Lc8b4KQN0sPzgb
NhBZxG2WMs9KrhFmuObvJ+xvad5fclnSnhNrFAC9XobLug/LjBTVkyg0tO8v+JL8
Hz9KBeiJrZeHA33C2sIZeAI+NOLTsaDytXP5Ic9Z91DjIVsFf4Ez7wjjNfoKjnhU
IE2B4oEyjwIIXdZ9W4TsF3KVruAuZhDoUD94OI4srqJOp7BtacEsewcPydflqQMs
CyYPBhDLXlRuYoewy1P5Wt2sLEuAKU96Jb+0NwLZzCVt66PyZsh+h10adwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6r4AL73KBUC0Kfw03pFAgeIcAfMB8GA1UdIwQY
MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt
YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4
LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmZobvRK
EheIrGagI28idgbzSDH1vdJdwR0HARiv8i+00C4kxFICMya5NF/+yMXDvbCDUEhv
9Die7acUyrTcb+WRIKq+nRhmmaYhAsf28akUALGevsw330f6l1jZIblWQtrHkuyL
ydgscZ0EWGvO15vK6DPJobp1vap/9WhWT9t4uHEDEp7ZzCLo8DIrJQWbVX9wiZ8J
Dgtw+rITUEH6llnurIzI8rDy5ro6uZj8m8zQ4crLOslxNTiPxUOT6tv1QW650Xz8
p8Y7G6+p233Bi2JnM493gam9pSbrFPWrGIlLtMac5xM/kG+VCLVsgij91Nr00hj5
RXjfGYKJFH0c+Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:42 2026 by rpki-client