This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          chclJOPhDExPB7Lrfwsr96lCeYIKHgawlfAUoM55jbc=
Subject key identifier:   1E:6A:63:AE:BD:35:84:91:45:B6:5B:B2:73:05:51:5A:7D:8D:63:EB
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       019C4210229F61F3B0C2A02712F2EF040D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          0D2F
Signing time:             Mon 09 Feb 2026 11:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:19 +0000
Files and hashes:         1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: 5cvIxkGOZhexUDdB6SgjnY6PAf8ubO1hZIogtADGGLQ=)
                          2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:22:9f:61:f3:b0:c2:a0:27:12:f2:ef:04:0d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Feb  9 11:01:19 2026 GMT
            Not After : Feb 10 11:01:19 2026 GMT
        Subject: CN=1e6a63aebd35849145b65bb27305515a7d8d63eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:f3:fb:92:96:ca:90:29:df:9f:71:5a:d0:
                    d5:43:58:fc:f9:10:61:7e:6c:76:cb:d6:1f:d0:9c:
                    1f:6b:70:c9:98:00:84:7e:61:aa:95:7b:e7:a2:d9:
                    50:d5:4c:cb:27:3c:a7:f3:70:81:95:f5:92:45:4c:
                    fb:53:ad:2f:a8:53:29:7b:08:df:0b:72:23:b4:30:
                    32:4f:7f:58:35:d3:4b:a5:64:a5:04:3d:0c:48:8a:
                    1c:26:11:93:8d:90:88:b0:eb:34:bf:20:56:72:b2:
                    3e:f5:a7:cc:b3:bc:5b:9e:3a:52:da:62:ca:e8:ff:
                    60:38:ea:5e:92:d0:ea:06:4f:0e:69:1f:1e:c0:cc:
                    35:ea:60:68:2d:38:ed:26:49:27:52:f6:5c:13:e6:
                    38:41:e3:07:48:6f:d9:f1:b5:65:4e:33:e9:08:7a:
                    65:bd:fe:fe:44:ae:c0:96:dc:e2:c8:dd:00:58:91:
                    7e:f7:20:5f:fb:25:9a:17:e3:97:7d:f9:c1:dd:c9:
                    db:4f:d3:3c:a2:bf:8f:89:5a:58:2e:27:cd:3d:10:
                    fb:c0:b0:ca:2b:cd:c9:5f:52:ef:42:9e:18:e4:b5:
                    04:01:45:ed:95:a4:6b:ca:c6:b3:5a:d7:58:41:fc:
                    35:53:d1:a4:f1:0d:9b:84:49:42:74:c9:ac:5b:1c:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6A:63:AE:BD:35:84:91:45:B6:5B:B2:73:05:51:5A:7D:8D:63:EB
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:f4:0e:46:99:23:67:d5:9e:8b:fb:80:09:ed:c7:d1:e7:
         ef:c1:5e:fa:d4:72:33:e7:6f:85:0f:0a:e0:30:06:fe:92:2a:
         51:a5:6b:fd:f3:3e:bc:af:05:65:9f:17:01:22:36:4b:e3:cb:
         55:4d:6f:15:0d:fd:f6:17:7d:43:96:e7:5f:45:96:6f:e7:0e:
         e2:78:e2:17:cb:84:83:a2:e3:23:c6:cd:2d:24:f8:a7:a5:8b:
         e9:77:34:41:a0:27:4c:69:a7:24:f4:15:43:e7:8e:19:7f:7c:
         15:3e:09:76:da:b6:2b:ac:e7:96:58:59:0a:18:28:c2:56:86:
         1e:14:9b:bf:f5:ce:3f:91:a4:ed:73:d2:06:17:6d:66:b4:78:
         72:2f:fd:a4:90:f1:7f:40:fd:1d:a6:e0:b0:cc:9f:35:fa:14:
         e0:d6:13:3e:dd:9f:17:0a:ce:6d:b0:f3:7f:98:c8:d7:e3:99:
         b8:15:9b:b3:d5:c6:62:f6:d7:1b:77:8e:b4:77:d0:30:63:e1:
         3b:b7:af:59:a3:6f:0c:58:d1:1d:4a:bb:a1:d8:bf:ac:8b:9c:
         7a:70:5c:f0:85:52:0d:3d:4e:37:5c:85:df:cd:8e:54:0c:15:
         f2:af:29:a0:0c:c3:e1:4c:67:83:61:d9:13:6b:23:10:2e:28:
         01:1a:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:54 2026 by rpki-client