This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          crPVi6zv2me6u+oThl66SOZoe5kqmHSZBIRCg0835Ok=
Subject key identifier:   87:E9:36:E1:FD:0F:F1:AF:83:4B:3D:C5:0B:E0:2A:05:09:9D:2B:36
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       019C427DE36CC62671215C546DD614E30380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:12 +0000
Files and hashes:         1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: 9rYTOEcU5/JgJ+CjvgYoMMEEM8W6ciFREKQ1PUSiJHc=)
                          2: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (hash: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e3:6c:c6:26:71:21:5c:54:6d:d6:14:e3:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Feb  9 13:01:12 2026 GMT
            Not After : Feb 10 13:01:12 2026 GMT
        Subject: CN=87e936e1fd0ff1af834b3dc50be02a05099d2b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:01:85:41:29:80:31:36:40:9a:4b:f1:4b:
                    c6:a7:0f:db:50:1c:67:31:b1:7d:ed:84:05:ca:ad:
                    6a:16:82:39:46:1a:50:88:6e:ff:2e:39:cf:57:0a:
                    8d:c4:49:95:19:0e:f4:61:63:6b:24:0c:b2:12:b2:
                    9b:f4:ce:b2:d2:b2:cf:3f:7c:47:f8:20:c5:68:3b:
                    67:6e:89:db:57:ce:b4:42:99:97:42:c4:33:25:9f:
                    42:7f:80:cd:2a:a6:0a:c4:15:64:82:77:83:b9:5d:
                    9c:ec:6d:ad:0e:7a:a3:0c:ac:6f:51:55:38:5a:ea:
                    4c:ef:70:7a:38:ee:a4:b8:5b:0b:ab:aa:8b:5c:1e:
                    8a:7c:c5:5b:dc:df:d0:a0:fb:a7:c0:a4:38:08:22:
                    cf:94:db:17:21:f9:62:25:e4:a4:41:f1:26:54:3d:
                    48:68:79:ff:29:c9:f8:14:8a:c1:54:55:6d:71:8c:
                    ab:09:d1:95:49:b8:7d:41:65:b9:b0:7a:48:fc:50:
                    ea:d1:b9:45:b7:50:0a:0a:0d:dd:bf:13:9a:73:01:
                    7c:56:1e:d0:39:f3:98:2f:84:b5:5a:64:88:d7:b1:
                    a9:1c:ca:57:99:89:2e:7d:48:83:91:7c:21:52:fd:
                    91:4c:62:6d:c9:1e:80:18:a7:ef:35:47:e1:90:62:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:36:E1:FD:0F:F1:AF:83:4B:3D:C5:0B:E0:2A:05:09:9D:2B:36
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d1:f8:e5:7a:5d:3d:4f:e6:1a:83:82:86:41:6d:d8:f7:65:
         da:ea:aa:2e:a4:bb:3e:78:b4:02:9a:c5:00:96:7e:e6:b3:c5:
         12:ba:e9:5e:9c:37:62:73:d2:cc:66:b0:59:f5:c1:10:cb:93:
         1c:81:06:14:4f:b8:c0:89:ad:07:4a:a4:8e:19:14:d1:a3:07:
         bb:18:cc:d9:96:ec:f0:bf:59:59:b0:7d:59:6c:22:fd:42:87:
         20:2e:ce:7b:e3:db:a5:2a:78:4b:6b:82:ca:d3:3e:96:44:6e:
         26:33:6b:af:a1:fb:89:34:e6:24:77:45:f0:8c:4c:4b:e5:ff:
         3e:69:9a:52:45:01:44:f9:6f:f5:6c:4a:66:e8:2e:c2:13:b3:
         91:95:85:de:4a:06:c6:9d:47:ab:d9:2c:f0:0e:1e:68:7e:ee:
         c8:71:50:74:70:d0:96:de:d7:ba:31:a3:d4:96:98:4a:ce:52:
         a9:7b:a3:bc:cb:9a:3c:93:1c:bd:1d:8f:2c:a8:bd:01:ee:db:
         d9:f6:5f:41:f2:db:e4:f5:cb:52:a7:7f:69:54:b4:7b:43:58:
         6b:a8:06:1b:7e:3a:2c:3f:02:91:f0:07:24:76:9d:c9:aa:0f:
         f8:bd:e3:6a:16:1d:26:3b:73:88:0c:27:b7:e6:9d:93:da:d0:
         64:de:9b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfeNsxiZxIVxUbdYU4wOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDI3NzExOTA2ZTQxZDBiZmQ3YWUwMWJjMGEzOGQzZTc5
ZTI2MDEwHhcNMjYwMjA5MTMwMTEyWhcNMjYwMjEwMTMwMTEyWjAzMTEwLwYDVQQD
Eyg4N2U5MzZlMWZkMGZmMWFmODM0YjNkYzUwYmUwMmEwNTA5OWQyYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYBhUEpgDE2QJpL8UvGpw/bUBxn
MbF97YQFyq1qFoI5RhpQiG7/LjnPVwqNxEmVGQ70YWNrJAyyErKb9M6y0rLPP3xH
+CDFaDtnbonbV860QpmXQsQzJZ9Cf4DNKqYKxBVkgneDuV2c7G2tDnqjDKxvUVU4
WupM73B6OO6kuFsLq6qLXB6KfMVb3N/QoPunwKQ4CCLPlNsXIfliJeSkQfEmVD1I
aHn/Kcn4FIrBVFVtcYyrCdGVSbh9QWW5sHpI/FDq0blFt1AKCg3dvxOacwF8Vh7Q
OfOYL4S1WmSI17GpHMpXmYkufUiDkXwhUv2RTGJtyR6AGKfvNUfhkGL1VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfpNuH9D/Gvg0s9xQvgKgUJnSs2MB8GA1UdIwQY
MBaAFBHSdxGQbkHQv9euAbwKONPnniYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEt
ZmFhNzQxMjdkYzc4LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEtZmFhNzQxMjdkYzc4
LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9H45Xpd
PU/mGoOChkFt2Pdl2uqqLqS7Pni0AprFAJZ+5rPFErrpXpw3YnPSzGawWfXBEMuT
HIEGFE+4wImtB0qkjhkU0aMHuxjM2Zbs8L9ZWbB9WWwi/UKHIC7Oe+PbpSp4S2uC
ytM+lkRuJjNrr6H7iTTmJHdF8IxMS+X/PmmaUkUBRPlv9WxKZuguwhOzkZWF3koG
xp1Hq9ks8A4eaH7uyHFQdHDQlt7XujGj1JaYSs5SqXujvMuaPJMcvR2PLKi9Ae7b
2fZfQfLb5PXLUqd/aVS0e0NYa6gGG346LD8CkfAHJHadyaoP+L3jahYdJjtziAwn
t+adk9rQZN6b1Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:45 2026 by rpki-client