This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File:                     E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier:          tl/es+udlQeJ/ZUCs3bpCTvinVI9ZvJdJ1s+rsX2VFc=
Subject key identifier:   7A:2A:97:D2:3D:78:4C:04:F4:EC:49:17:8F:E6:54:AB:3F:0E:A0:E6
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer:       /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial:       019C42B43E030439858504EE17FB4DC5F41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 14:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:34 +0000
Files and hashes:         1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
                          2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: oNapPOaf1VMe805WZ2aoHC7tgQ2Mkw//2h764Us8cfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3e:03:04:39:85:85:04:ee:17:fb:4d:c5:f4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
        Validity
            Not Before: Feb  9 14:00:34 2026 GMT
            Not After : Feb 10 14:00:34 2026 GMT
        Subject: CN=7a2a97d23d784c04f4ec49178fe654ab3f0ea0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:cd:4f:76:f1:32:10:bc:aa:5e:8f:b8:60:
                    75:cc:ce:b9:91:51:11:89:8c:f3:16:32:db:4c:72:
                    05:e0:03:5c:ae:1b:3e:a6:59:a6:69:a1:06:4e:4c:
                    e8:8a:06:83:45:a2:72:42:d9:24:69:0c:bc:03:57:
                    e0:17:50:19:8b:ab:5e:45:a1:ea:f4:37:dd:58:24:
                    78:3b:fb:b6:f1:cc:06:8c:e0:c8:55:7a:10:f0:2d:
                    e5:d3:cd:bf:b9:ab:e6:db:2f:e5:e3:a1:bf:b1:0c:
                    fc:e4:a7:ae:37:1e:26:a3:cb:75:ca:e2:62:f3:5b:
                    c5:73:6c:1b:67:b3:4b:dc:4c:85:0a:1f:00:d8:df:
                    6b:06:f8:9c:c4:c7:51:d8:29:37:d3:d2:97:4c:64:
                    d4:3a:68:38:f5:db:b7:29:88:2f:c1:90:17:66:b1:
                    51:9a:0c:3a:e3:e8:4c:bc:3a:f8:26:90:75:9a:f9:
                    bc:8a:1e:26:08:26:80:f6:33:28:8c:5c:45:af:79:
                    5b:bd:6b:cf:40:87:7a:2c:22:cf:3c:92:20:6a:2d:
                    b7:3d:a9:a0:9e:1e:56:b6:a6:cb:b3:fc:e5:a3:a3:
                    2d:80:a5:da:7d:34:09:87:27:bd:49:a8:55:ec:c2:
                    0e:43:f1:e3:17:34:0f:5b:c8:d2:51:57:58:a4:98:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:97:D2:3D:78:4C:04:F4:EC:49:17:8F:E6:54:AB:3F:0E:A0:E6
            X509v3 Authority Key Identifier:
                keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:7b:a2:e7:95:15:9a:e0:16:5d:2b:92:d2:75:1f:f0:2c:
         ec:18:9c:00:af:3e:bc:4f:c9:62:92:69:6a:c1:23:17:e4:c9:
         ea:fb:85:e6:d1:61:ab:10:1a:43:35:59:26:e8:4c:bf:18:6e:
         be:a1:cc:3e:8b:f5:ec:ae:66:af:29:8e:2b:cc:0e:f5:90:27:
         2b:4e:45:0a:9b:17:79:05:c0:7d:51:a3:da:3e:b9:99:de:14:
         15:3a:49:74:52:1b:cd:d3:73:6f:21:e8:8c:9b:16:c9:60:01:
         1b:5a:f0:cd:72:18:99:46:a6:ed:cf:7d:16:78:32:51:58:b9:
         41:e3:4e:5c:22:ab:1c:57:bb:6f:69:8b:ad:5d:ad:95:be:69:
         e4:d3:2e:7f:90:1b:7c:b5:10:43:35:1f:39:34:5d:32:45:6d:
         0b:36:76:59:ce:95:32:a5:e0:ef:71:0b:a0:e8:19:0f:93:13:
         e4:fc:fc:60:5f:a3:8b:7f:2d:ba:19:46:92:8b:02:64:59:3f:
         6a:11:3d:12:fc:40:96:82:29:dc:62:46:47:0c:eb:d1:53:b9:
         8c:01:61:2d:51:89:da:f7:9e:8f:bf:c3:e5:8a:16:b3:ef:1c:
         22:84:61:69:7e:7c:ba:5d:15:60:33:60:ff:d2:b1:31:eb:89:
         ef:2e:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:40 2026 by rpki-client