This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          rU+RzDy4ycGWWpOMcNrLtI9XYjZ7LB59e2VVY2Ma+LM=
Subject key identifier:   C9:0C:9A:DD:19:AD:AC:7F:E3:E9:63:67:55:AB:90:9C:96:5B:26:A5
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       019C41A2463427C82B1330963374769F003A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          0EF7
Signing time:             Mon 09 Feb 2026 09:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:19 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: donKppoUEkpEW49v/9uk2EkYRUnt1g7ywUPNAPa6BHA=)
                          2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:46:34:27:c8:2b:13:30:96:33:74:76:9f:00:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Feb  9 09:01:19 2026 GMT
            Not After : Feb 10 09:01:19 2026 GMT
        Subject: CN=c90c9add19adac7fe3e9636755ab909c965b26a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:f5:ac:2f:fd:d6:f8:ac:80:6c:e5:11:b0:
                    24:f9:ae:9e:09:b3:06:e2:28:96:17:f1:74:f8:53:
                    5b:01:90:79:05:19:5d:14:5e:f2:2e:8e:ce:9c:ec:
                    e3:67:ba:30:34:17:de:b9:29:26:5d:49:d7:24:c0:
                    3d:8e:08:18:a5:9f:ab:23:1d:9a:e0:38:a6:1e:72:
                    0f:f0:92:c6:7a:44:9c:cc:c7:b5:2c:80:f0:17:8c:
                    e2:25:6c:1e:d1:ed:18:ee:a7:16:5f:60:0f:44:a0:
                    e1:73:dd:8b:bf:8f:0a:21:76:aa:88:74:85:dd:20:
                    00:56:18:03:1e:ec:28:cd:68:c3:72:5e:40:05:6f:
                    27:bd:ef:18:87:ba:e5:2b:70:ec:a7:0a:b3:55:09:
                    e6:51:0b:ae:c4:9b:c7:8a:f9:23:de:14:6a:08:94:
                    51:50:eb:7b:4a:46:e4:fe:41:dc:a5:30:c4:48:da:
                    db:58:8e:f7:a7:82:1e:49:e4:5e:3e:05:f9:f6:48:
                    af:30:a1:9f:1e:5a:cc:13:85:4b:40:d8:01:37:3b:
                    92:35:cb:cb:c4:63:e5:86:0c:b7:ae:43:5a:ac:9f:
                    d0:b7:1b:9a:ce:07:51:b2:81:97:aa:e3:7f:73:53:
                    d7:37:a7:94:5b:7b:be:51:52:aa:29:ad:73:26:d7:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:9A:DD:19:AD:AC:7F:E3:E9:63:67:55:AB:90:9C:96:5B:26:A5
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:16:8e:46:49:40:79:1a:db:66:f6:56:a7:f5:95:52:04:fa:
         6d:d0:27:37:2c:dd:1d:4c:01:2d:fc:a9:4f:60:9c:3e:98:15:
         66:1d:34:9a:be:19:ff:9e:73:47:44:07:85:ce:a7:33:28:c7:
         96:2e:46:1f:8f:0b:d1:a8:10:48:4d:a4:a2:a2:6e:2e:57:af:
         1d:26:c8:24:98:c4:70:ed:cb:c3:65:b1:61:3f:d7:12:27:20:
         45:cc:26:f6:91:0e:7f:fd:b5:60:ad:51:87:51:c7:67:58:df:
         98:3f:ad:fe:b9:05:33:fb:a8:bb:06:5e:27:80:93:9d:0b:fd:
         2a:9d:1e:71:1a:ef:b1:e5:09:ce:be:42:35:74:05:1a:16:7a:
         7e:e4:b7:13:cd:db:55:e5:13:3c:62:06:19:cf:e3:3a:d0:fd:
         14:17:e7:55:b2:98:e3:b7:08:df:8c:57:67:ff:4b:a5:c5:3c:
         ab:f8:7b:a6:6c:40:81:9e:cc:e3:df:08:39:3c:b5:89:93:49:
         37:55:54:a9:38:e8:45:ca:4c:35:75:e0:92:a5:f9:41:56:98:
         5e:92:11:b2:be:d4:9f:81:94:a4:25:84:8e:f4:a6:c9:a1:42:
         16:e5:00:96:83:39:5f:08:64:8d:d8:d4:ee:1c:23:ba:5b:01:
         36:95:22:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBokY0J8grEzCWM3R2nwA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjYwMjA5MDkwMTE5WhcNMjYwMjEwMDkwMTE5WjAzMTEwLwYDVQQD
EyhjOTBjOWFkZDE5YWRhYzdmZTNlOTYzNjc1NWFiOTA5Yzk2NWIyNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshn1rC/91visgGzlEbAk+a6eCbMG
4iiWF/F0+FNbAZB5BRldFF7yLo7OnOzjZ7owNBfeuSkmXUnXJMA9jggYpZ+rIx2a
4DimHnIP8JLGekSczMe1LIDwF4ziJWwe0e0Y7qcWX2APRKDhc92Lv48KIXaqiHSF
3SAAVhgDHuwozWjDcl5ABW8nve8Yh7rlK3DspwqzVQnmUQuuxJvHivkj3hRqCJRR
UOt7Skbk/kHcpTDESNrbWI73p4IeSeRePgX59kivMKGfHlrME4VLQNgBNzuSNcvL
xGPlhgy3rkNarJ/QtxuazgdRsoGXquN/c1PXN6eUW3u+UVKqKa1zJtf82QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkMmt0Zrax/4+ljZ1WrkJyWWyalMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRaORklA
eRrbZvZWp/WVUgT6bdAnNyzdHUwBLfypT2CcPpgVZh00mr4Z/55zR0QHhc6nMyjH
li5GH48L0agQSE2koqJuLlevHSbIJJjEcO3Lw2WxYT/XEicgRcwm9pEOf/21YK1R
h1HHZ1jfmD+t/rkFM/uouwZeJ4CTnQv9Kp0ecRrvseUJzr5CNXQFGhZ6fuS3E83b
VeUTPGIGGc/jOtD9FBfnVbKY47cI34xXZ/9LpcU8q/h7pmxAgZ7M498IOTy1iZNJ
N1VUqTjoRcpMNXXgkqX5QVaYXpIRsr7Un4GUpCWEjvSmyaFCFuUAloM5XwhkjdjU
7hwjulsBNpUiNA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:21 2026 by rpki-client