This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          fdyqesWQiErv5tHo+wwajs01X21eMyRIEOIF1ozszwk=
Subject key identifier:   96:E4:5F:11:B5:12:72:02:C7:2F:04:C2:1E:0F:88:2D:C8:94:CF:A7
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       019C420F40143B77F2D0AFAC4323D62EACDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0C93
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: M7y_k5iNH6dSWHLXPJNTz-Qdtp8.roa (hash: kmS2hNo1cx40s9TRt+mHs2M1UGSMR40egkM7Knj7Rb4=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: f2RkWv6rTcUsdqaDbmN1wcX8f1+WKOJ2H9uG2ENFLDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:40:14:3b:77:f2:d0:af:ac:43:23:d6:2e:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=96e45f11b5127202c72f04c21e0f882dc894cfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:61:cf:56:67:c2:42:a2:18:d4:92:6b:1e:
                    79:2f:3f:f3:02:1a:4f:d3:02:cc:55:31:46:7a:39:
                    a8:9b:da:0b:56:a8:39:b5:2f:56:8b:f1:3c:55:39:
                    a8:b7:9b:12:6a:2a:76:d8:86:ce:56:ef:e5:fd:0d:
                    c8:f5:e4:ab:ab:09:45:8a:f8:0c:fa:d3:b5:81:b1:
                    3c:12:fb:01:f9:a2:17:6e:78:d9:ef:f4:04:07:71:
                    20:51:0d:92:09:13:e1:1e:d7:8e:e7:0e:00:53:6d:
                    4b:83:08:f1:81:5b:fa:24:cd:45:02:0b:9b:3e:33:
                    f1:1b:8e:1a:f8:75:de:31:94:13:89:23:5a:7f:42:
                    34:d8:a6:ee:ec:3b:39:bb:85:05:3e:cf:9c:b0:40:
                    2c:c1:a2:e6:ab:b3:87:2e:02:7e:b2:bc:84:23:80:
                    6c:81:1d:aa:85:3e:04:66:1b:55:39:38:26:dc:89:
                    08:40:1b:e9:4d:d5:ed:16:49:cd:34:96:e9:6a:b5:
                    90:1e:1a:c2:40:79:db:6d:6b:18:8a:31:57:67:6f:
                    9f:ed:a7:8c:70:e4:0c:5c:bc:8d:33:d4:f7:ac:4c:
                    fd:3a:da:33:02:f3:6e:59:2c:0a:ad:38:77:02:00:
                    f3:6a:70:24:b5:2c:48:68:d3:c3:82:2d:13:68:03:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:5F:11:B5:12:72:02:C7:2F:04:C2:1E:0F:88:2D:C8:94:CF:A7
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:20:a0:42:90:aa:bf:ec:c4:8a:e6:1e:14:3e:4f:65:19:0b:
         04:e0:73:04:34:34:f0:95:34:95:26:ab:ca:78:43:af:8a:5f:
         f3:63:34:80:5e:c4:54:6c:80:5b:ac:65:b3:18:a1:ee:27:1a:
         c9:32:f5:ea:0c:da:dd:8d:20:22:f0:fd:44:25:7b:d8:3c:06:
         a1:bd:06:9a:ac:92:b1:2d:ec:2c:b1:f2:5e:e8:4e:fb:7f:26:
         2d:9e:a1:42:de:90:d9:a4:f6:8e:a6:66:70:aa:47:e9:a0:f7:
         97:ca:81:fb:b9:a3:e8:95:79:00:bb:1f:f8:f0:60:b4:57:fd:
         87:d9:83:02:0a:40:5b:82:9f:fa:7b:35:2a:8c:2c:54:5e:02:
         d2:b8:f1:9d:44:a6:9d:b9:03:c3:c6:1d:51:0d:ba:c5:1c:c8:
         2b:15:fb:ee:fe:53:13:da:6b:77:b0:f9:9f:77:24:23:87:2b:
         2f:57:b0:be:b0:49:2d:41:24:0c:28:1b:17:a6:09:8f:1e:76:
         21:46:6c:39:4a:a6:62:a1:5e:fd:34:29:64:6d:a8:e1:32:2f:
         22:82:82:39:29:f9:a2:11:b7:20:b9:f9:2c:d4:f2:54:29:07:
         0e:92:fb:37:f2:c7:98:a4:6a:b6:a4:c3:43:98:70:8c:16:f4:
         c3:aa:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:28 2026 by rpki-client