This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File:                     ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier:          AIs0ZnUyAm9w+jDwcCFF1kqxlShO7c2uYmnvTmbBMfY=
Subject key identifier:   E1:62:A9:81:2D:46:60:E7:F5:28:90:70:48:BC:53:8D:E8:C6:60:FE
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer:       /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial:       019C41346D9CA9F1118C8768741CF6462737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number:          02A8
Signing time:             Mon 09 Feb 2026 07:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:20 +0000
Files and hashes:         1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: NSpzDDSf1U6gqEpmENT9vcXtdd2mVNz2KTI/alKUVHk=)
                          2: StENb4oXUe_gqEhZ_cRSGTbf9h0.roa (hash: jpZ/aosQxaXXNjBqwfCSJNayGEKyZap7VBjnyDJ/cIU=)
                          3: ustsKef3_kQrz_t0nmHTw0MaqT0.roa (hash: QAz/jM+TUevEvBm3ClnKE5FN9ZTcnHmV+8tjFLI7axU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:6d:9c:a9:f1:11:8c:87:68:74:1c:f6:46:27:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
        Validity
            Not Before: Feb  9 07:01:20 2026 GMT
            Not After : Feb 10 07:01:20 2026 GMT
        Subject: CN=e162a9812d4660e7f528907048bc538de8c660fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:49:37:8f:60:49:95:8c:99:82:a7:31:7e:
                    54:72:54:67:02:a9:0d:83:7d:bc:b1:3c:07:51:fb:
                    95:70:e5:26:59:bd:c8:ae:96:13:8a:b4:c7:b3:4f:
                    8d:33:b7:76:04:6b:af:22:65:6b:51:da:bb:a4:01:
                    58:3b:52:ce:8f:92:a1:bf:94:ff:c3:91:90:a7:5d:
                    a3:4f:b9:cf:5f:e3:89:a1:cc:b4:aa:04:17:ec:43:
                    9a:92:2c:63:5a:67:0d:01:55:8b:6e:b9:25:e2:7e:
                    52:ef:f4:5b:5a:4f:a1:c1:66:ac:d6:d3:76:ba:95:
                    7a:50:94:88:47:75:43:7a:f2:de:4e:68:69:5b:b0:
                    0e:58:95:ea:cd:d1:8f:6e:53:7c:d1:c3:91:8f:75:
                    7e:a1:f0:ab:eb:40:f7:a8:d5:5b:02:ae:e4:3f:18:
                    94:9d:79:3c:a5:32:aa:b5:5a:c7:a2:80:4b:5b:bb:
                    df:da:eb:42:51:be:8a:89:a1:99:56:49:4c:25:d2:
                    83:e3:42:15:74:ea:52:5d:0c:23:de:f6:c2:a4:ea:
                    b4:92:6d:7f:b5:ae:13:91:03:a6:63:64:21:25:78:
                    aa:c3:d3:ef:54:2b:f1:fe:58:55:76:a2:93:ed:4b:
                    9c:26:90:53:5c:61:f1:4c:2d:55:e3:60:77:e2:f4:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:62:A9:81:2D:46:60:E7:F5:28:90:70:48:BC:53:8D:E8:C6:60:FE
            X509v3 Authority Key Identifier:
                keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:91:25:06:78:52:65:e1:63:9e:f2:86:f0:cf:bf:03:e4:c7:
         0b:4a:5b:ae:fb:a2:ad:8e:56:27:92:dd:fd:40:ab:3c:26:83:
         6f:d4:1f:e2:d6:5b:d9:7e:51:4c:ef:89:c6:db:3c:58:da:67:
         56:85:bd:4b:8a:5a:04:f1:1a:65:03:c0:32:4f:db:3a:8e:de:
         a8:3c:ac:63:c8:c7:7e:27:7f:86:ff:d4:0f:73:0f:bb:4f:1b:
         f4:0e:a0:84:e1:7c:cd:fa:c7:0c:a9:80:a2:a5:64:88:f4:d9:
         c3:b8:8b:6f:13:c9:f5:74:7c:6e:0c:35:7c:f9:f5:eb:93:ab:
         e0:ad:c1:61:66:da:4e:fd:a6:1b:6d:c4:23:09:15:d1:7d:62:
         52:51:32:9f:e7:2a:c7:55:d8:c6:65:b0:91:d2:3c:91:30:c5:
         b3:2e:85:3e:84:af:e0:15:26:ed:24:f0:22:30:12:84:ec:34:
         19:2d:32:26:3e:58:ed:09:9d:f7:cf:bd:09:44:51:f9:03:86:
         19:47:78:a0:b1:8b:40:b0:94:71:cd:09:df:17:56:8c:85:67:
         93:3a:51:7d:95:67:65:a3:93:4e:42:f7:a5:a1:f5:5b:a9:46:
         f4:2e:96:3e:ca:bb:56:ca:8f:6d:32:78:50:4f:a4:c7:ff:4b:
         9f:84:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:38 2026 by rpki-client