This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File:                     eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier:          0ysLQtHnguE+QRZn5hbRGDz5zMY8MdNQP5VxwzpAf9o=
Subject key identifier:   55:1C:C9:71:7A:39:72:AE:A2:B7:F1:E9:93:B2:50:63:DF:55:D7:20
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer:       /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial:       019C44A26A1A52B90179A83DF43E7B8B0107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number:          1522
Signing time:             Mon 09 Feb 2026 23:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:20 +0000
Files and hashes:         1: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: 0BmWFh+nM6Ki4JdYxWAUI+CUa2nMusUFG2PXUOIfMGg=)
                          2: g4RYmNig4J0sVJiMkj_qIgt2ecc.roa (hash: AMXXhy9XoCJvEM2f7TVsKWyuskZydY3c3G++2kcR1RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:6a:1a:52:b9:01:79:a8:3d:f4:3e:7b:8b:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
        Validity
            Not Before: Feb  9 23:00:20 2026 GMT
            Not After : Feb 10 23:00:20 2026 GMT
        Subject: CN=551cc9717a3972aea2b7f1e993b25063df55d720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:0b:9e:5e:cb:25:67:32:e9:ec:d1:85:f6:
                    ea:a6:c6:a6:96:4d:83:df:d6:27:34:39:e2:97:1f:
                    25:a4:3c:2f:bb:69:69:7a:11:9e:b9:0d:c9:e3:92:
                    25:55:21:e5:bb:e8:05:c9:1b:65:46:a3:9d:2a:fb:
                    16:39:21:76:8b:72:36:dd:60:88:16:1e:cf:85:18:
                    96:1b:1f:16:c5:8c:b5:2a:06:11:86:a8:49:6f:96:
                    20:5a:05:79:cc:91:9e:64:a9:af:47:4f:9b:f9:69:
                    ef:19:a8:dc:05:b0:23:b6:31:4a:9d:8e:41:61:f2:
                    4e:9a:09:65:2a:31:db:69:5e:37:82:8d:99:3f:dc:
                    2e:52:58:7b:f6:df:8d:54:d7:8e:40:c7:56:1c:55:
                    ee:04:03:2f:2a:e9:83:03:67:4c:0b:96:c4:86:08:
                    e6:d2:ed:6c:f9:2c:15:6b:43:b2:b1:45:e1:ce:d7:
                    8d:15:5b:ff:37:2c:47:9f:d8:fb:ee:be:c7:fb:40:
                    0c:cb:2f:d1:3b:5e:37:08:d8:e1:1b:11:5a:ee:8e:
                    a7:94:0b:06:3d:c8:8e:ce:04:a7:52:46:dc:a8:00:
                    a3:7e:06:4d:e2:0d:91:f7:85:54:42:79:cc:91:e9:
                    f7:5d:6c:29:9c:85:05:f7:99:44:dc:3a:05:50:5b:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1C:C9:71:7A:39:72:AE:A2:B7:F1:E9:93:B2:50:63:DF:55:D7:20
            X509v3 Authority Key Identifier:
                keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:f9:85:10:1f:6d:05:e5:17:eb:79:dd:d7:ca:94:f8:03:
         c6:24:b6:25:6c:ff:30:c6:d4:4d:f1:79:11:ee:13:35:46:f2:
         15:05:45:c3:70:2e:b3:28:e5:56:90:96:85:fc:d0:92:b5:f8:
         ee:8e:df:a6:12:35:a2:24:f1:f0:02:07:c7:00:17:1b:f7:f7:
         8a:b3:d3:a4:df:77:2e:0e:94:ca:82:ed:f4:ae:cf:69:1d:5b:
         58:7e:9b:52:d8:0c:d5:94:3b:c4:b1:53:c3:30:b5:d6:ee:e8:
         2d:e7:5e:cb:3e:72:12:58:e6:c3:ac:d9:66:7b:1d:43:c3:de:
         cf:a6:94:12:77:c1:af:79:34:af:ed:05:ed:e9:df:31:48:49:
         7b:03:56:f6:32:b2:8d:a0:22:85:40:f6:de:15:38:82:d9:95:
         07:38:d0:23:9d:1d:a1:39:58:2f:74:ee:ff:ea:48:83:ae:81:
         03:6e:0f:2f:4f:e7:80:ad:8a:c8:8c:f4:b7:a7:cb:9c:c3:de:
         e7:bf:de:aa:f1:52:cc:9c:74:09:11:bc:ab:d1:e7:e8:e4:5d:
         a3:11:16:2b:e1:86:42:cb:25:2c:c8:26:ec:25:46:e8:43:94:
         cb:e6:ff:89:62:01:71:91:49:22:13:a1:20:80:3a:e2:7a:5f:
         d0:db:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:52 2026 by rpki-client