This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          q0hMd33THGo0RmWnA+qHNNeb9Xvd/aPPTMNcokyxO2k=
Subject key identifier:   A9:2E:36:7F:CB:CF:2E:23:1E:4B:AE:F4:D6:02:6D:0F:B9:1C:22:C4
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       019C43907CC3BCBE936F662A1EBACD3CDECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          12D2
Signing time:             Mon 09 Feb 2026 18:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:08 +0000
Files and hashes:         1: I61e7xKM0b3HBMfOem1GkjpTt5g.roa (hash: FaXgX3Dd98HNPMZ5o0IJyCmUY3cwUhM+A2iDauz1zgs=)
                          2: LrcTICqDd3A4btEGTO4KHwQ42Y8.roa (hash: +DrfBRSbHtT1BFSdkrhh5RaN1YT4vBx8ggIQEd7CIdM=)
                          3: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: CMetyCqB1F0mvHlugdm/r1HDnPc5pxGZkZ48OkMEQ4Q=)
                          4: hpcNUKRgDvbT67k4a7u7qFp7VTA.roa (hash: kvHQUu1O3SvtEY70f4VbT1ECj0gDXBSOXAOig5mq70A=)
                          5: u3lR19hKAM5d_t8wpiV3PJkk-cw.roa (hash: thQW4SgnjYBzd+hCCC/UI6jU949759F9VL501xnOoQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:7c:c3:bc:be:93:6f:66:2a:1e:ba:cd:3c:de:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: Feb  9 18:01:08 2026 GMT
            Not After : Feb 10 18:01:08 2026 GMT
        Subject: CN=a92e367fcbcf2e231e4baef4d6026d0fb91c22c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b9:23:af:ef:06:7f:48:18:c0:e9:e4:4f:46:
                    32:d3:fc:32:67:3e:d4:45:ca:c4:bf:cc:fe:40:90:
                    c8:7b:19:c2:64:a1:35:4c:58:95:a0:17:d4:09:8d:
                    3e:a2:c4:8a:ca:ab:25:e9:d3:a1:81:58:6c:76:99:
                    9e:30:43:78:23:9e:82:b4:b0:cf:29:a1:98:e0:86:
                    1e:0c:82:2c:d3:fa:c7:36:28:7d:eb:5d:23:79:c5:
                    19:bf:e4:f4:dc:75:1a:ab:a8:0d:54:a4:c4:56:2a:
                    0f:54:4f:26:b3:45:d1:33:91:58:5a:6c:c4:a7:5f:
                    98:67:17:36:73:59:8e:ba:03:99:6b:54:e3:c6:bd:
                    91:49:5a:4c:97:12:47:38:20:d3:46:3b:f8:4b:0f:
                    66:e2:2c:70:fb:bc:7c:38:d0:bb:10:b4:39:1d:84:
                    9e:70:8e:24:3c:a1:51:65:44:02:f1:92:67:8f:43:
                    2f:cb:71:8b:ee:b5:21:5a:b3:05:a2:76:7f:e3:0c:
                    a7:5a:37:e4:4d:ec:74:9c:98:46:aa:75:66:f4:0d:
                    a7:06:23:40:e2:b7:86:1f:bd:5a:be:b3:ae:65:ad:
                    a9:bb:e2:45:89:e9:15:fe:b3:16:d4:b3:d9:a3:d9:
                    98:81:21:33:ea:3a:dc:b3:a6:a0:79:80:72:af:e8:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:36:7F:CB:CF:2E:23:1E:4B:AE:F4:D6:02:6D:0F:B9:1C:22:C4
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:f0:bb:c2:54:ec:87:6c:bf:f1:ff:4b:cf:3e:d9:47:5f:
         4d:14:5e:a1:42:c9:8b:8f:06:59:0f:39:20:3c:16:6f:e3:a3:
         fa:c4:c1:19:58:95:bf:9d:18:fb:14:c9:a7:51:94:98:43:0c:
         cd:b1:22:64:d7:d2:14:0c:8d:a2:e0:e6:0f:c2:1a:ed:a0:9f:
         7e:65:29:61:6f:1a:1d:56:2e:28:cc:26:1e:ef:76:66:82:e5:
         07:4d:55:9d:7c:32:cd:ac:13:1d:e1:48:8b:23:66:93:0b:89:
         ad:88:c5:35:0a:f8:5e:02:fb:83:b0:59:4f:71:88:fb:c9:bc:
         60:cf:b4:88:c2:cc:dd:23:f4:41:2e:86:e4:70:97:a2:a4:52:
         3c:65:3a:67:6f:a2:f8:8e:f3:31:eb:99:1f:24:74:f6:37:c3:
         26:7e:10:9f:1a:8f:5c:1e:ba:c1:ea:9b:49:e0:e9:c8:c6:36:
         06:82:41:bd:b9:2b:8e:c9:d0:64:93:90:28:35:ac:42:1f:8c:
         9f:03:31:52:33:85:58:ca:4c:ee:9b:d2:60:af:74:00:fa:b1:
         e5:ca:bd:9c:4d:02:91:f3:eb:82:a3:f3:97:16:6d:e8:94:64:
         7e:cb:89:de:c5:45:61:2d:76:66:a0:c0:45:ad:dd:49:47:55:
         7b:54:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:32 2026 by rpki-client