This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
File:                     E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json)
Hash identifier:          jMuCasTjFw+YMharSUXfpCz8C66/mZfTBHQBjEV8nYE=
Subject key identifier:   27:26:4B:3E:CC:93:62:46:FD:47:6A:DA:2F:C6:6E:8C:25:1C:7B:BD
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       019C4358D5907E31E837F46C1A5CDD8B631F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
Manifest number:          0F09
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: PiPYdrpu/P7+ovwlxoSknCiA+iYUIC1MZu8L/1v3OqY=)
                          2: e-UyDpfAgeCXwVCZG2C_8K2xub8.roa (hash: 9M9KcCzKHonhmbTtNOcC9taMG1LtCMlTc8IfcKGHBuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d5:90:7e:31:e8:37:f4:6c:1a:5c:dd:8b:63:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=27264b3ecc936246fd476ada2fc66e8c251c7bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:b7:c8:c5:65:ad:65:e2:92:09:e1:44:2a:
                    0f:7d:6b:ca:8f:5d:22:83:29:b5:0e:54:21:f3:9d:
                    ef:e0:d5:60:9d:ea:f8:f4:a8:ad:0f:6e:75:d1:d2:
                    31:10:e1:92:6e:d7:21:b5:b5:95:2c:25:e0:09:1b:
                    13:37:23:02:8a:ea:d8:51:c3:51:e5:4e:c7:4a:6c:
                    35:ed:32:b9:15:ae:7a:54:a6:a3:9d:b5:ac:24:dc:
                    e0:fe:b5:ae:20:04:96:0b:12:3e:b1:54:d4:cf:cc:
                    40:a0:1e:85:1e:04:c5:61:fb:7c:38:1f:45:de:17:
                    a2:18:23:42:02:9c:d0:48:52:0a:e4:8e:9e:7b:c2:
                    46:f4:48:b1:b1:aa:68:36:cc:35:01:7e:42:55:d9:
                    b6:1c:53:2d:35:54:39:81:98:b4:31:06:4c:22:c1:
                    c7:f5:61:a9:19:2b:37:af:05:a5:6f:88:0d:a4:f0:
                    8e:e3:23:c6:e6:68:1d:cf:a9:96:c3:92:e9:dc:4b:
                    46:7e:ae:bb:8d:d1:95:ae:91:a5:f9:57:84:e9:a4:
                    7a:37:b8:a8:ae:88:e1:21:08:af:a9:f7:3e:ba:48:
                    83:13:52:73:4f:71:31:c9:a8:a7:c8:49:26:4e:27:
                    b7:ae:b2:25:3a:51:c5:21:44:3a:a7:85:8d:f0:ab:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:26:4B:3E:CC:93:62:46:FD:47:6A:DA:2F:C6:6E:8C:25:1C:7B:BD
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:43:a2:75:31:8b:18:24:e4:57:e9:81:5d:e5:35:cb:fe:
         05:6e:d7:5a:cd:80:34:59:9c:6a:57:43:8f:e9:31:c3:8b:5c:
         ed:6d:99:7a:4e:09:16:c5:e3:86:79:0b:df:7b:7c:3c:8e:fa:
         17:37:a2:c3:cc:d0:1d:18:d4:9a:99:fd:70:f2:8f:9a:30:29:
         e4:e1:c4:41:74:13:7b:45:b9:16:d9:4a:c2:df:f2:a3:35:59:
         55:71:ba:77:10:e4:b9:03:06:d4:14:11:d4:6f:80:78:3c:10:
         a4:84:3b:85:28:0e:c7:bd:26:c3:07:dd:02:ae:50:8e:af:84:
         0f:e3:fb:b2:a2:ea:54:90:23:0d:f0:47:24:d6:77:db:39:f4:
         70:39:da:d0:aa:b8:d8:0f:27:5e:96:77:98:f0:a8:1a:01:e1:
         af:4f:45:3b:fd:bb:b8:81:fc:f6:c2:20:1e:85:bc:c6:69:cc:
         a1:55:14:6a:df:10:39:cb:4f:89:b8:91:c7:14:0c:fb:85:fa:
         89:95:97:8e:cb:06:61:80:71:fd:e3:ac:47:55:71:e5:d9:40:
         b3:d2:4b:14:c2:a3:48:49:71:47:4e:29:45:15:9b:c7:f2:1d:
         f7:b9:b2:1e:0d:2d:ee:91:ca:3a:d7:ad:6a:09:5b:50:89:00:
         51:f0:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:04 2026 by rpki-client