This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
File:                     EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft (raw, json)
Hash identifier:          uaaERqW8eDRyBecVyW7q6snjdJ18AdI2Exrfb0uslBE=
Subject key identifier:   7C:27:57:24:9C:3A:99:94:0C:CB:FB:20:2F:FF:BF:1E:B9:94:13:45
Authority key identifier: 10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
Certificate issuer:       /CN=108ecb64ba2998b6c41501427238518922d630e4
Certificate serial:       019C43591402B4E75A20E6E5A1A4945FF782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
Manifest number:          0145
Signing time:             Mon 09 Feb 2026 17:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:37 +0000
Files and hashes:         1: EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl (hash: L+8/E8vkws8OwcLDmVO2f0EZeK/1unc7cuarhi5rVKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:14:02:b4:e7:5a:20:e6:e5:a1:a4:94:5f:f7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108ecb64ba2998b6c41501427238518922d630e4
        Validity
            Not Before: Feb  9 17:00:37 2026 GMT
            Not After : Feb 10 17:00:37 2026 GMT
        Subject: CN=7c2757249c3a99940ccbfb202fffbf1eb9941345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:a4:5e:ab:a2:08:57:da:1d:ed:87:a9:fd:
                    96:4a:cb:5a:57:e8:f6:69:6a:6f:18:f7:cd:a1:b0:
                    19:33:03:cd:5f:03:f6:fe:6e:7f:c7:c9:cf:ec:e2:
                    16:6e:43:cc:ef:87:0b:8a:fe:28:e4:ab:ae:76:7a:
                    56:af:a2:a4:27:6e:29:cb:e0:40:c5:d3:6f:b0:cc:
                    82:73:3a:d9:72:4b:2e:52:91:ab:1d:40:e2:da:ad:
                    fe:11:73:4e:72:8c:70:be:d7:21:ae:aa:08:57:db:
                    91:4b:74:a5:58:a2:16:c5:2a:5b:4b:e8:e2:71:20:
                    57:45:3e:d9:a6:2d:c7:7f:68:17:0c:8b:06:63:e5:
                    10:d2:f5:d4:bd:74:af:76:f3:cc:33:2e:72:e7:94:
                    fb:cb:2d:b7:44:df:8a:a0:b4:25:87:4c:1c:3f:48:
                    e9:fa:dc:bb:da:e8:ee:26:2b:4f:18:9c:bd:aa:42:
                    2e:f9:3d:a1:ad:ac:64:51:11:52:39:2e:83:aa:38:
                    da:f9:79:45:5b:ca:7c:a2:f9:ea:69:9c:3f:a4:4c:
                    8c:d1:e1:1f:5b:02:ae:7b:ba:34:18:e6:2c:09:96:
                    4e:a2:a3:aa:56:de:cd:90:22:9b:48:9a:fa:94:81:
                    9f:79:cb:cc:34:d7:de:66:6d:36:bd:83:92:72:a8:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:27:57:24:9C:3A:99:94:0C:CB:FB:20:2F:FF:BF:1E:B9:94:13:45
            X509v3 Authority Key Identifier:
                keyid:10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:88:eb:eb:cc:aa:4e:73:b6:4c:85:43:5e:04:89:f2:39:
         7e:b9:71:f8:34:5a:11:dc:0f:5c:0c:80:54:74:b7:e0:de:a0:
         9e:9f:ea:5e:c4:33:9c:a1:85:f5:fa:0e:11:b4:4f:57:6d:8e:
         f9:d9:c8:90:0d:cc:b5:cf:80:fb:eb:34:29:d3:86:2c:a7:46:
         fe:b5:c5:3a:9c:c9:07:56:56:3b:c3:b8:7c:d8:42:71:a2:71:
         c8:31:24:2c:00:1a:70:1d:dc:c8:87:ac:20:6a:5d:ce:6e:40:
         37:fc:25:42:0b:2d:91:76:63:d8:33:38:2f:c1:aa:da:6f:aa:
         89:ac:24:f2:d4:2d:f5:d3:70:4f:3f:74:9e:bc:85:b6:34:a0:
         18:56:0e:fb:32:80:e4:44:9f:ce:a0:ec:ac:39:bc:ec:d7:11:
         ee:4c:d7:1c:d7:e6:6b:db:75:3c:96:bf:b0:82:ca:d9:c7:d1:
         d3:ca:f7:17:a6:03:4f:51:57:56:b2:15:70:e2:d1:7f:5e:85:
         ad:d7:e3:db:5f:65:9c:86:96:50:e5:50:74:54:ea:ad:c6:f7:
         19:cf:57:72:73:15:d6:cc:02:88:b0:4a:ad:40:7f:da:63:b8:
         c2:04:12:ac:aa:fb:d4:65:6a:39:21:ab:41:48:ac:b6:f9:db:
         01:f0:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:41 2026 by rpki-client