This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File:                     ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier:          WERov26DIJAl9NG7zpRoDYfbM5F/XerLgJP/uXFbtNA=
Subject key identifier:   56:12:D1:34:EA:58:88:FA:09:23:BB:94:1E:8B:56:83:0E:5F:6F:66
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer:       /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial:       019C41D8DA26E7472970D3EDA372F982EFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number:          0894
Signing time:             Mon 09 Feb 2026 10:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:56 +0000
Files and hashes:         1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=)
                          2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: Dttwe/K+SPIoOjfR++5edAzq8xa8pY6ZxRBRbAJnTwk=)
                          3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:da:26:e7:47:29:70:d3:ed:a3:72:f9:82:ef:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
        Validity
            Not Before: Feb  9 10:00:56 2026 GMT
            Not After : Feb 10 10:00:56 2026 GMT
        Subject: CN=5612d134ea5888fa0923bb941e8b56830e5f6f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:8c:dd:6b:6d:6a:81:b1:ba:94:a3:a5:67:
                    45:20:4f:49:69:ce:a9:a1:7b:fe:61:44:e6:66:d8:
                    09:ce:0c:a9:a1:de:eb:0c:d1:74:ec:e8:a5:27:fd:
                    47:c8:2d:c2:83:03:75:b7:38:3b:1a:43:67:65:04:
                    ef:c6:96:f3:f4:f2:64:27:da:06:46:f8:c3:e6:d7:
                    e2:f3:6d:86:c9:44:f2:e6:4f:c1:29:07:8f:45:88:
                    bb:71:3e:c8:86:66:25:9d:c9:2c:9f:43:82:c9:51:
                    f6:bc:f4:6e:be:14:1f:62:45:76:3a:9f:0f:66:e6:
                    40:40:57:a3:65:4f:e1:96:20:6c:72:0c:23:fb:01:
                    35:ce:ef:05:75:9c:91:35:3c:bb:83:26:aa:a4:18:
                    4a:bc:ab:57:1a:db:8f:4a:49:57:ea:ee:b6:4c:c4:
                    a2:2a:52:09:80:dd:c4:a7:3e:de:dc:69:c0:cf:64:
                    66:73:8a:aa:85:0c:d2:cd:03:13:a7:95:99:29:0b:
                    67:4d:5c:27:c7:2a:96:dd:1f:b5:ab:cf:b4:d8:12:
                    44:04:ae:6b:ad:d4:dd:05:c0:21:bf:1c:9a:ce:07:
                    d0:c1:52:2b:86:e9:af:9f:37:65:e2:17:2f:6c:6e:
                    39:c9:08:1d:c2:76:53:9e:5d:69:6a:c9:56:2d:1d:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:12:D1:34:EA:58:88:FA:09:23:BB:94:1E:8B:56:83:0E:5F:6F:66
            X509v3 Authority Key Identifier:
                keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:05:3b:63:a4:f4:0b:ec:6b:7a:ec:42:04:db:07:dc:b3:0c:
         4b:5d:a8:b4:f9:74:f7:03:1f:57:94:cc:6d:e0:7e:c1:de:fb:
         11:10:fd:3d:b6:b5:6f:8b:8d:ae:67:1d:7d:9a:15:ee:af:f0:
         47:cd:83:d8:d4:a7:c8:43:9f:fb:cb:20:9d:e6:07:12:7a:eb:
         2c:1a:d4:4f:1f:c2:54:60:ce:e1:a0:95:d0:43:ba:61:13:bd:
         bc:fb:b2:27:56:16:cb:46:30:91:eb:9e:30:72:54:bb:89:52:
         5f:66:dc:35:1d:40:2c:22:e5:d8:d8:a5:ce:10:ca:b6:eb:71:
         d6:4d:92:ee:a8:95:13:da:e8:73:c9:ef:27:05:f3:16:9a:9e:
         d9:79:93:ce:e3:8f:85:fc:96:5e:5e:c5:be:ee:8a:65:e4:1a:
         8c:29:4e:4d:61:77:70:c9:d5:a8:4f:70:19:a3:39:2c:b9:b2:
         ff:f5:65:0b:0d:8a:4d:34:0f:d9:9c:a8:0d:49:64:59:f0:1b:
         40:25:19:36:3e:60:a1:74:20:a4:c0:11:70:32:31:57:5a:57:
         ca:81:63:be:28:5f:74:8e:9e:c1:d9:ee:2e:3b:ac:e4:67:56:
         89:60:78:85:e8:3d:26:74:c8:b4:08:f6:8b:0a:e4:d7:7a:f9:
         21:4d:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:05 2026 by rpki-client