This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          VH1QLWpbogGrlQrCB+c1e4lQDrd8D5kXVoAzJ4VSprQ=
Subject key identifier:   57:8C:4A:10:2E:2F:AB:C2:79:F7:FF:46:D6:1A:2B:4B:89:F5:2F:9A
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       019C41A1F1D28F55877993C9B5D1F8782A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          1207
Signing time:             Mon 09 Feb 2026 09:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:58 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: dXM9Cnka+d17wnFm1RxYSGygnIQrTQ7riRjEpYupnK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:f1:d2:8f:55:87:79:93:c9:b5:d1:f8:78:2a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Feb  9 09:00:58 2026 GMT
            Not After : Feb 10 09:00:58 2026 GMT
        Subject: CN=578c4a102e2fabc279f7ff46d61a2b4b89f52f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:f3:16:3f:ad:30:c2:3b:22:20:44:fa:79:
                    1e:f9:d4:79:f2:f0:e8:fa:c0:90:db:8c:f2:b7:66:
                    b2:e5:c4:c1:78:71:21:c6:5f:8b:b1:5e:f2:b2:9b:
                    4c:00:89:82:53:bd:43:f8:41:9f:b7:bb:1a:32:be:
                    fe:e0:94:97:99:e0:96:22:83:56:04:78:3e:1f:a9:
                    a3:58:1d:dd:50:5c:63:79:2b:4a:bf:35:96:d3:cb:
                    e2:a6:9c:a1:bd:4d:26:1b:62:88:f0:65:ab:f8:a4:
                    3d:da:63:32:38:2b:bf:3a:a3:e0:ee:c0:45:ec:e3:
                    96:ad:07:a9:c1:f5:4e:87:14:7b:05:f2:cc:19:29:
                    bb:e6:ec:38:8c:3d:22:fd:1b:97:c0:d1:75:56:69:
                    aa:d9:19:35:85:df:98:bc:a4:bd:64:38:c9:56:66:
                    40:0d:22:71:b7:5b:ed:9d:9c:e7:bc:2a:5f:67:51:
                    66:64:54:5f:df:05:2a:86:c2:ff:99:a9:6a:f9:91:
                    9e:ae:28:53:35:cb:b3:97:65:10:e6:00:42:81:e2:
                    f1:4d:98:10:44:d3:82:91:90:40:ac:18:31:ec:d9:
                    f5:34:ba:29:b5:85:38:61:6e:0a:82:35:aa:5d:f0:
                    3c:d8:63:d7:8a:ad:0c:b1:5a:92:a1:05:de:d3:e9:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8C:4A:10:2E:2F:AB:C2:79:F7:FF:46:D6:1A:2B:4B:89:F5:2F:9A
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:02:c9:20:92:82:3d:e0:3d:4a:10:d9:51:10:e4:63:af:8f:
         5d:0f:f7:3b:d5:e6:1d:fc:d4:78:36:8c:57:04:da:cb:c5:15:
         c8:6f:f8:5a:72:62:bd:4c:66:4b:4d:6a:81:12:be:1b:78:a9:
         c1:ba:ca:05:53:2f:65:f2:3e:f3:8c:b2:65:16:59:6f:24:aa:
         b3:ad:c9:5c:0f:fd:b4:6b:21:53:00:0d:9d:f3:07:f4:f5:70:
         9d:5e:84:79:54:8a:c4:84:61:d2:b0:e2:71:a1:43:5f:9c:74:
         7c:b6:51:7a:c7:59:3f:5b:d3:b9:02:8a:ab:98:92:93:6c:4d:
         08:f4:90:b5:ab:ac:f7:ad:32:fa:dd:80:37:fe:d5:ae:c0:70:
         9a:64:db:0e:55:d2:6c:2b:0e:63:13:0a:12:31:6f:c9:35:18:
         1e:c3:10:f8:2e:f7:77:e8:1d:64:97:31:4f:61:d8:00:e9:53:
         d0:99:26:0f:bd:92:4e:d4:35:3e:c3:ef:e4:06:07:0c:29:42:
         b0:db:dd:ab:b7:fb:b2:73:57:f0:a4:91:61:6c:e2:f2:02:b2:
         c2:3f:cc:6d:ff:18:9f:ca:e8:ef:d8:ba:dd:d6:05:7c:2c:75:
         7d:be:35:77:ff:2a:38:f7:bf:b8:e5:ce:dd:66:22:f6:85:d3:
         65:5d:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:32 2026 by rpki-client