This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          5YuwoZToDZkpzTBIFLqxSll6zxkdsNNK4vWBFKLien4=
Subject key identifier:   76:75:98:FF:93:5B:5D:2D:C8:B0:0E:28:D4:71:1E:82:35:27:EC:7B
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       019C43C7323FD6E2E70FC33EED335C6D1267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 19:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:53 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: IvMy9mrL5hxZ6lcu73W3WDa7LJj60oPlwl1jW9xs2SA=)
                          2: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (hash: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:32:3f:d6:e2:e7:0f:c3:3e:ed:33:5c:6d:12:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: Feb  9 19:00:53 2026 GMT
            Not After : Feb 10 19:00:53 2026 GMT
        Subject: CN=767598ff935b5d2dc8b00e28d4711e823527ec7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:8e:f6:e0:6d:15:0c:6c:db:e0:56:a6:22:
                    6b:d4:18:c7:6e:c9:25:67:69:4a:5b:79:6a:c0:f4:
                    1d:01:e4:7e:ed:f7:4e:45:f5:39:3b:e6:51:60:fb:
                    03:a2:5e:c8:5d:38:b4:05:e0:9f:42:bc:0f:34:da:
                    3b:26:83:01:ce:b8:82:63:f7:d7:4b:b7:64:3f:28:
                    67:a3:c6:49:61:0a:5b:e9:ba:4d:ba:75:1b:75:79:
                    60:ed:09:52:f4:06:4e:e8:55:9b:03:bb:b1:8d:0f:
                    40:d5:76:2d:51:67:9a:08:f0:7f:c3:15:23:d6:13:
                    da:de:12:89:cb:71:f9:81:b6:dc:7b:57:c0:72:af:
                    15:1c:99:8c:ab:d4:a0:70:d5:9e:c1:bd:75:6f:eb:
                    e3:40:f1:76:b7:b3:b2:98:d4:05:86:c9:8c:f8:02:
                    bd:98:c6:e7:5b:b2:7b:38:7a:b2:db:26:23:54:19:
                    e6:b5:8b:6a:97:83:54:b5:37:4e:23:19:ad:91:6d:
                    0a:be:da:9b:36:64:a8:f1:82:11:5a:9d:5a:3c:e0:
                    94:26:81:57:f8:a5:e6:f0:90:a8:50:1d:f7:10:17:
                    ee:9b:f7:cc:26:63:6e:31:c7:c9:d4:c0:c1:ca:84:
                    66:47:10:d2:c0:2f:0a:85:5b:fc:4e:51:08:cc:bd:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:98:FF:93:5B:5D:2D:C8:B0:0E:28:D4:71:1E:82:35:27:EC:7B
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b4:73:cc:19:87:75:24:8e:2d:dc:c1:8b:16:d8:12:a8:48:
         96:b5:1d:5e:30:42:5e:93:fa:37:46:58:c6:02:30:38:d1:6d:
         d8:88:ce:87:48:df:73:c3:dc:36:ad:ce:9c:29:56:3d:81:38:
         1c:1d:4d:a8:e0:a2:67:04:78:43:6c:d6:2b:93:ba:24:d5:3c:
         74:38:de:89:b0:1c:f9:f9:45:2a:4d:0b:e9:2a:78:86:5d:af:
         b4:83:22:73:cd:83:0d:03:0d:c2:8b:6c:6f:98:57:92:8a:20:
         93:d9:18:c7:42:e8:2a:01:55:74:6b:10:1d:6e:f8:0d:05:89:
         1c:ce:a7:74:11:7a:2b:5b:a8:98:86:b3:90:7a:35:7c:74:3e:
         27:9b:0e:f8:b7:c7:ec:02:54:16:6b:7b:f9:1e:7f:48:07:fe:
         a3:e4:ff:d0:6f:3c:fc:34:3b:e9:41:30:66:f4:2f:d5:c9:2a:
         d4:fb:d8:13:ae:4b:f1:d0:1b:9e:47:44:85:44:d6:29:27:72:
         de:02:07:a0:6f:52:e6:9d:99:e8:46:b3:c1:f4:1f:e0:1a:79:
         f8:a3:1b:ed:d0:eb:0b:c8:7b:69:c8:01:2f:0e:ff:21:05:69:
         c8:01:cf:0a:82:0c:1d:f8:1a:ca:1a:e8:de:8a:66:33:c4:85:
         ab:35:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:03 2026 by rpki-client