This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File:                     E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier:          jaHlvBQ9UOqfmKLVs/fxxwM7vvNVLt9CAfWt6lAvl3I=
Subject key identifier:   34:6F:68:BB:08:B4:1F:F6:0E:65:C7:66:C7:DC:FB:A7:3F:FD:99:DB
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer:       /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial:       019C42EB148FD0888A6243DDB54C3EF75FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number:          154E
Signing time:             Mon 09 Feb 2026 15:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:28 +0000
Files and hashes:         1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: RW9Rn4Y1OV1j0sd+rfVvO4nDwGvO+coLizD5l9K9QhE=)
                          2: EytAFLfPtvcTOd1_vf7gG34nqnY.roa (hash: OUuDIN625yK+1wDnIM653C5qwt6RgJbVBXW0c2PFte4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:14:8f:d0:88:8a:62:43:dd:b5:4c:3e:f7:5f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
        Validity
            Not Before: Feb  9 15:00:28 2026 GMT
            Not After : Feb 10 15:00:28 2026 GMT
        Subject: CN=346f68bb08b41ff60e65c766c7dcfba73ffd99db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d9:df:51:41:30:9d:52:38:1c:15:ad:4c:41:
                    0f:a3:3f:19:53:a2:55:28:8e:1f:51:7c:4c:b3:64:
                    b0:f4:a5:ef:b1:80:99:65:b8:cf:55:02:a3:f3:a9:
                    34:09:ea:79:91:28:9a:57:d5:89:e2:d4:9e:72:02:
                    0e:d6:95:ad:6c:f0:87:0a:ee:7b:85:cb:05:d8:e7:
                    bf:51:a7:4a:90:34:45:85:35:83:d8:62:ba:c6:68:
                    16:dd:1e:f7:70:6c:4b:fd:32:87:42:16:c5:6c:13:
                    49:43:10:c8:04:87:36:bd:e8:e4:99:02:06:36:56:
                    a4:c2:01:41:63:ef:52:64:19:f0:f1:c8:e7:1c:67:
                    cb:c3:5a:b5:d6:94:a7:5c:dc:a2:93:30:94:29:c1:
                    8c:31:81:49:25:16:24:55:95:e6:93:82:14:1e:83:
                    ae:a2:89:c4:1e:b5:af:be:15:79:48:0b:2a:9b:86:
                    b6:7f:ec:84:01:50:c5:d2:f0:7a:3f:6a:c8:80:30:
                    36:11:61:69:3b:8c:fd:67:66:10:8f:4d:a3:e3:1b:
                    8b:cf:d5:15:b0:5f:e0:dd:eb:92:51:96:e6:22:ee:
                    1c:56:1b:85:be:ca:ba:63:c9:84:1a:82:ba:4a:06:
                    f4:00:e8:fd:c9:0a:b6:f3:0c:3f:84:82:b1:a6:2e:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:68:BB:08:B4:1F:F6:0E:65:C7:66:C7:DC:FB:A7:3F:FD:99:DB
            X509v3 Authority Key Identifier:
                keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:04:0f:72:c3:4e:76:9b:dc:48:6e:6c:10:0e:60:60:e1:
         9e:a7:a4:91:5e:aa:83:44:08:8c:3b:d0:1b:8e:f4:0e:8c:77:
         5d:24:5e:6d:75:20:46:e2:5d:74:b8:50:8a:c6:28:9a:c5:e6:
         92:53:08:63:34:c0:89:c6:10:b1:49:1c:e5:81:47:c4:c4:37:
         a4:87:7f:eb:8e:31:bd:bd:1b:9d:f5:f1:67:89:e7:91:58:57:
         c2:a9:7d:56:41:3a:bf:55:0a:f2:af:00:39:0a:d0:84:21:3c:
         c3:d1:87:1c:56:43:6f:b0:16:4f:93:69:47:14:a1:d8:30:12:
         b4:b7:40:37:68:96:a4:01:69:2e:aa:0d:33:3f:92:4b:47:1d:
         2a:7a:c0:dd:e1:fc:db:78:a9:92:62:1d:e4:f6:5b:e9:87:3e:
         44:6b:fc:92:4b:d7:2c:e5:11:88:8f:43:1c:9d:b6:94:7f:e2:
         76:e6:d8:d3:2c:97:a6:c4:a6:d9:39:82:a4:cc:07:ef:b5:71:
         84:4d:2f:b8:1a:55:5e:ea:60:77:b5:99:72:35:8f:5a:6a:01:
         91:77:50:a6:2a:03:e6:fa:cc:e6:39:72:fa:19:cd:db:de:c8:
         eb:20:6e:0a:0e:e7:e1:ea:4a:54:d1:63:95:eb:f6:13:dd:f2:
         b3:2d:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:31 2026 by rpki-client