This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          wjiJ8aiB8We4zXi7PaCCeCUDgB1bZ40+WJTyX7TstKg=
Subject key identifier:   CD:83:C9:BC:6B:23:65:C9:7D:61:21:A0:4D:88:AA:C1:FA:B7:7F:87
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       019C41341A113ADAEE0AC4CDCC498472D790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          127E
Signing time:             Mon 09 Feb 2026 07:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:59 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: ZS5gBiiWoanAHwQmrdGbu3PDZ77VgN0kWSs5Vfz4gtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:1a:11:3a:da:ee:0a:c4:cd:cc:49:84:72:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Feb  9 07:00:59 2026 GMT
            Not After : Feb 10 07:00:59 2026 GMT
        Subject: CN=cd83c9bc6b2365c97d6121a04d88aac1fab77f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:00:7d:d0:8a:37:6e:ce:d7:e0:76:14:ee:
                    66:ca:39:72:7b:64:88:1e:67:9d:64:65:96:11:82:
                    0f:9d:9e:06:17:20:1a:8d:f2:39:92:02:92:79:14:
                    6d:be:f7:65:0b:10:11:23:15:28:2b:ae:40:c8:7f:
                    cf:94:44:b7:bd:c2:0b:1c:91:06:be:5f:90:56:c4:
                    9c:13:48:f6:e4:eb:73:94:33:7f:90:a4:3a:25:82:
                    cb:12:1d:1e:d2:89:9e:fe:1e:8d:1f:fe:88:c1:2d:
                    7f:2b:ec:cc:8d:92:16:0b:5e:71:87:2a:59:51:18:
                    95:b5:2f:1a:80:57:9f:3a:52:0e:fe:19:c4:21:8f:
                    01:fd:fc:7c:20:1f:e8:75:44:51:ec:f7:5f:c2:50:
                    6c:28:f9:38:a7:8a:fb:d7:02:e6:62:91:4a:af:86:
                    26:23:e8:be:76:fd:67:76:e0:c7:16:21:db:a9:fc:
                    e8:56:cf:c4:59:55:d7:f6:f1:da:91:6b:af:1a:93:
                    9b:c7:b6:c4:c3:cd:27:46:86:ea:f7:26:25:0e:d3:
                    1e:ad:08:ad:60:21:0d:d7:d6:4f:72:dd:c2:d3:78:
                    ae:29:b7:ee:c0:0c:72:df:e8:54:46:db:ec:30:2b:
                    3e:f7:d3:c7:1b:b8:fc:f4:28:c0:de:e4:eb:3b:57:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:C9:BC:6B:23:65:C9:7D:61:21:A0:4D:88:AA:C1:FA:B7:7F:87
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:46:45:0b:02:7e:69:a1:74:65:0b:e4:78:e9:43:69:f5:
         c9:cb:da:3e:4c:2f:63:2c:28:5c:1a:e2:cc:65:6f:88:7b:3b:
         b1:87:a0:e3:bc:ef:03:64:72:f7:46:18:12:60:57:1a:34:04:
         68:ee:53:4a:bb:91:b6:68:95:ca:19:47:dd:6a:b1:02:ad:2b:
         2e:4a:71:b4:19:d5:09:be:f9:3e:6a:a2:e4:32:42:21:5f:3e:
         05:40:3f:47:a8:d3:04:7f:45:8f:cf:4a:65:55:9f:eb:67:05:
         a2:e1:ab:54:37:87:5f:b3:ff:b8:48:e1:7e:60:c2:ae:53:a2:
         6a:bc:4b:a2:e9:0c:80:9d:9e:b2:65:fe:9d:b3:3b:f8:97:4e:
         55:35:8d:eb:4f:51:23:e7:c5:57:d6:90:f5:fb:22:73:ea:5e:
         75:8e:dc:aa:d8:d3:e5:0e:a5:42:20:72:00:95:58:78:ac:84:
         5e:da:cf:77:20:7c:29:c3:72:94:4d:3e:6e:a0:da:f0:33:c0:
         06:2e:1c:a2:56:b1:0a:a7:07:b8:85:10:d4:ba:ec:5e:78:83:
         26:4d:55:b4:19:a7:61:50:f9:28:7a:e7:d0:e6:59:97:60:44:
         72:a7:e7:21:ad:cb:87:ef:3f:76:68:e8:6e:91:ef:d4:b5:d9:
         c9:e8:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:59 2026 by rpki-client