This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          2L3rFEVlPoR9Ihmy1DKNBP1y/1UsWH79PnzSQD3/k8g=
Subject key identifier:   A4:AD:5C:7F:83:DB:AB:6D:26:14:E5:CC:BC:32:2E:26:61:27:38:33
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       019C43FE917AFB3ADCCC52A4B0A66A329267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:22 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: z1rq15ObweGMZ/UYGx4FQdzhH3NNADM8b0nNsR5LQ0I=)
                          2: ik5ZvGWeNM6bhOyiRDynhq8l4TI.roa (hash: tOVqEyo3Gve6XRDB5vVS0DDKud+PozZOZJAFFElXR+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:91:7a:fb:3a:dc:cc:52:a4:b0:a6:6a:32:92:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: Feb  9 20:01:22 2026 GMT
            Not After : Feb 10 20:01:22 2026 GMT
        Subject: CN=a4ad5c7f83dbab6d2614e5ccbc322e2661273833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:f4:3d:76:9e:da:8b:24:37:00:14:41:24:
                    6d:a1:23:cf:f7:fd:e7:3b:2a:4c:5c:5a:ba:75:ee:
                    8e:da:0b:e8:71:0d:82:eb:d6:fc:e7:3a:78:5a:fd:
                    ac:4c:6c:d2:e9:02:9f:4f:03:0c:b4:ff:1b:6e:fc:
                    f8:51:fc:95:c0:f8:75:c1:51:80:97:2e:79:3e:9b:
                    d4:b9:79:18:b2:bd:d1:6b:f3:96:1d:1e:ee:e7:7c:
                    57:42:dd:d4:ef:65:c3:46:1e:1b:2f:5e:79:56:e3:
                    86:29:a3:ac:d5:5c:e5:9c:ad:1b:43:a4:cc:61:08:
                    a6:1d:f3:62:65:56:fa:3d:75:e7:14:e8:10:3a:ff:
                    9a:10:f5:11:7d:0c:4e:e7:49:86:32:9c:ad:9e:f6:
                    3f:f4:0b:16:11:d5:1e:f5:82:fd:49:f3:0f:b6:84:
                    3f:25:1e:9f:cc:2e:d6:65:cf:03:4e:a0:75:ba:b7:
                    2b:93:a8:ea:17:d7:05:11:c1:ba:0d:f0:db:4a:d7:
                    32:e5:3a:b0:5a:4b:63:8a:71:dd:ab:ef:a4:de:e9:
                    dd:0a:25:50:f1:7a:89:a8:7b:88:47:13:9d:37:23:
                    6c:84:70:e7:c9:c7:53:ee:4f:18:8f:5f:7c:f3:10:
                    29:43:82:9f:0b:56:ff:e3:ed:b0:bb:b5:a5:e6:da:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AD:5C:7F:83:DB:AB:6D:26:14:E5:CC:BC:32:2E:26:61:27:38:33
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:62:41:40:92:6b:b7:29:d8:5a:46:d3:bf:8a:c5:09:07:
         45:75:a0:0e:ff:ad:88:50:d9:c3:e4:25:28:e6:28:1a:35:5e:
         a8:e3:7d:f1:87:9f:ed:7b:09:d4:f0:ae:33:95:30:4d:9f:65:
         68:f5:22:64:79:5b:e9:d2:35:41:6c:a5:1c:2c:f5:42:8b:02:
         76:89:60:26:13:32:66:23:ae:95:22:84:83:68:12:bc:b0:33:
         ef:f0:9b:ce:09:11:54:aa:a2:40:3d:09:f2:eb:a5:34:52:86:
         6b:17:18:dd:d4:4b:bd:af:1d:6b:87:fb:43:15:ca:ca:54:de:
         13:1c:91:23:71:34:89:ac:5b:c2:fb:7f:df:4c:f7:57:67:19:
         70:6f:a5:34:17:db:a7:31:db:8d:42:2f:42:4c:0b:a9:e3:ae:
         3f:ee:ec:6d:04:07:45:7d:b4:e1:9f:fb:ef:3c:99:ab:ec:85:
         77:ff:34:12:19:4f:85:7d:f8:d5:6b:96:98:5f:d1:81:eb:6d:
         13:72:eb:1e:d8:81:94:77:50:26:bf:6a:12:56:2e:26:c3:2f:
         ca:b1:fd:1e:14:5b:de:50:b7:bb:ee:11:87:56:d2:59:17:f6:
         93:03:58:42:39:4f:e6:66:44:87:bf:dc:72:8d:c1:16:f5:4b:
         84:d8:c6:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/pF6+zrczFKksKZqMpJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZGQzYTcyZjc5MGIyNWVlM2QyMjlhYzk5ZjY5YTcxYmYx
ZDgyOTQwHhcNMjYwMjA5MjAwMTIyWhcNMjYwMjEwMjAwMTIyWjAzMTEwLwYDVQQD
EyhhNGFkNWM3ZjgzZGJhYjZkMjYxNGU1Y2NiYzMyMmUyNjYxMjczODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM/0PXae2oskNwAUQSRtoSPP9/3n
OypMXFq6de6O2gvocQ2C69b85zp4Wv2sTGzS6QKfTwMMtP8bbvz4UfyVwPh1wVGA
ly55PpvUuXkYsr3Ra/OWHR7u53xXQt3U72XDRh4bL155VuOGKaOs1VzlnK0bQ6TM
YQimHfNiZVb6PXXnFOgQOv+aEPURfQxO50mGMpytnvY/9AsWEdUe9YL9SfMPtoQ/
JR6fzC7WZc8DTqB1urcrk6jqF9cFEcG6DfDbStcy5TqwWktjinHdq++k3undCiVQ
8XqJqHuIRxOdNyNshHDnycdT7k8Yj1988xApQ4KfC1b/4+2wu7Wl5tpbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKStXH+D26ttJhTlzLwyLiZhJzgzMB8GA1UdIwQY
MBaAFBDdOnL3kLJe49IprJn2mnG/HYKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODkt
OWNiMjYxZTY2NzYyLzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODktOWNiMjYxZTY2NzYy
LzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1piQUCS
a7cp2FpG07+KxQkHRXWgDv+tiFDZw+QlKOYoGjVeqON98Yef7XsJ1PCuM5UwTZ9l
aPUiZHlb6dI1QWylHCz1QosCdolgJhMyZiOulSKEg2gSvLAz7/CbzgkRVKqiQD0J
8uulNFKGaxcY3dRLva8da4f7QxXKylTeExyRI3E0iaxbwvt/30z3V2cZcG+lNBfb
pzHbjUIvQkwLqeOuP+7sbQQHRX204Z/77zyZq+yFd/80EhlPhX341WuWmF/Rgett
E3LrHtiBlHdQJr9qElYuJsMvyrH9HhRb3lC3u+4Rh1bSWRf2kwNYQjlP5mZEh7/c
co3BFvVLhNjGsw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:27 2026 by rpki-client