This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File:                     E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier:          Nbow1F1PILP3pdnRK559Qh5WKxhKsQ1EKZqctsQ6zV0=
Subject key identifier:   F6:4F:CA:59:78:DF:D4:49:87:C8:59:84:3B:72:FF:6E:34:FA:2B:58
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer:       /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial:       019C42B3F053BB55B1EB5D205B5E4994E014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number:          0EF8
Signing time:             Mon 09 Feb 2026 14:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:14 +0000
Files and hashes:         1: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: AS0IxnWKJu8GlOzCsdKhfgcUIhKba7qjvsy2ipyDOZk=)
                          2: m_4G_0Oxit4jN9Mi8en63Te59ko.roa (hash: NR2mOcFmt971BLwl94JPSXCXHeE7+txzuM2W8JbnNaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f0:53:bb:55:b1:eb:5d:20:5b:5e:49:94:e0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
        Validity
            Not Before: Feb  9 14:00:14 2026 GMT
            Not After : Feb 10 14:00:14 2026 GMT
        Subject: CN=f64fca5978dfd44987c859843b72ff6e34fa2b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:8f:d3:e0:2e:00:c4:cf:4f:d1:d2:3d:29:
                    db:50:ac:f6:ef:2c:6a:80:c5:1b:ad:54:74:db:53:
                    9d:a9:b5:d4:b9:8e:23:32:3f:9d:c9:fc:68:cd:16:
                    c6:8e:bd:0d:53:79:a1:aa:5f:ae:e4:f6:9d:c4:80:
                    9d:ca:5a:19:1b:4e:b0:9e:23:8c:2c:87:37:58:00:
                    2e:4e:38:fe:55:3d:0f:f1:b4:5c:99:05:67:64:c2:
                    2a:79:a1:e1:4a:7e:0c:0a:60:8d:90:4c:65:23:94:
                    9b:f5:7a:ea:63:40:d7:89:3e:52:da:93:91:3a:44:
                    24:73:98:74:da:0c:e4:3c:b1:c2:28:87:6c:db:4b:
                    ef:1e:a2:7e:b3:4b:b7:09:eb:06:52:e5:04:0a:27:
                    a9:f1:88:e5:00:29:bd:47:b5:87:eb:58:cb:e5:19:
                    08:a3:57:d3:96:2b:f9:9c:ce:d5:2a:8c:1e:c1:52:
                    ee:96:43:a8:82:76:0f:a5:de:28:32:dd:b5:da:01:
                    af:1e:30:fd:18:4f:1f:08:c5:9b:28:bf:45:62:d7:
                    20:60:c5:6b:2b:5e:9d:50:49:b1:9c:c9:fb:f3:c6:
                    5a:d5:e8:bf:5d:85:82:4c:a2:1d:c2:b6:56:58:37:
                    a5:5f:f3:fa:c3:2f:bb:fe:ca:56:99:ae:ec:46:d2:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4F:CA:59:78:DF:D4:49:87:C8:59:84:3B:72:FF:6E:34:FA:2B:58
            X509v3 Authority Key Identifier:
                keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:f0:02:4f:90:18:8f:c5:f3:3c:d4:2d:8e:0a:b3:8f:52:
         65:83:ad:d9:2e:c9:cf:03:7c:e1:86:61:c7:fa:a5:db:f0:0a:
         70:32:fa:02:7d:ac:56:12:5e:b2:1d:72:64:29:1a:8a:1d:c2:
         4b:74:6e:32:bf:8c:3c:64:96:9c:7f:3a:26:41:a2:71:41:9e:
         d1:ed:89:86:f3:d5:09:a1:c3:d1:81:6c:6c:89:10:86:36:a6:
         2b:7a:c3:b8:4c:95:ac:87:14:e6:0e:c7:56:24:71:21:00:07:
         a1:10:6e:8f:46:df:0f:c4:f0:eb:43:0e:f0:60:d3:ab:42:b0:
         9f:64:44:00:e0:7e:8d:db:64:8f:94:57:f2:ae:f5:52:b0:f7:
         c9:bc:03:0b:02:e6:cf:59:42:41:b5:a4:31:c1:17:4d:d3:8d:
         3f:4f:94:20:7b:37:11:0f:23:0f:ea:43:6d:90:a7:10:79:fe:
         36:d5:d1:48:70:46:a7:8c:30:31:eb:36:9f:6d:b5:75:b1:6f:
         54:03:fe:35:e6:4c:c2:83:22:f8:fc:de:a7:9f:26:ac:86:f1:
         93:75:ec:4f:9d:78:c9:1f:ec:d6:26:00:33:5e:ae:39:ca:10:
         9b:55:4d:2f:ca:ec:11:67:c5:1f:60:02:9e:a8:85:ce:80:fe:
         91:da:f8:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCs/BTu1Wx610gW15JlOAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDA3ZTgwNWE1MmM1MzRjYzZkMzM0NTA1NzVmZjAyMzll
ODA3Y2UwHhcNMjYwMjA5MTQwMDE0WhcNMjYwMjEwMTQwMDE0WjAzMTEwLwYDVQQD
EyhmNjRmY2E1OTc4ZGZkNDQ5ODdjODU5ODQzYjcyZmY2ZTM0ZmEyYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GSP0+AuAMTPT9HSPSnbUKz27yxq
gMUbrVR021OdqbXUuY4jMj+dyfxozRbGjr0NU3mhql+u5PadxICdyloZG06wniOM
LIc3WAAuTjj+VT0P8bRcmQVnZMIqeaHhSn4MCmCNkExlI5Sb9XrqY0DXiT5S2pOR
OkQkc5h02gzkPLHCKIds20vvHqJ+s0u3CesGUuUECiep8YjlACm9R7WH61jL5RkI
o1fTliv5nM7VKowewVLulkOognYPpd4oMt212gGvHjD9GE8fCMWbKL9FYtcgYMVr
K16dUEmxnMn788Za1ei/XYWCTKIdwrZWWDelX/P6wy+7/spWma7sRtL3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZPyll439RJh8hZhDty/240+itYMB8GA1UdIwQY
MBaAFBPQfoBaUsU0zG0zRQV1/wI56AfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTkt
YWQ3ZjkyNjJhN2MyLzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTktYWQ3ZjkyNjJhN2My
LzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfTwAk+Q
GI/F8zzULY4Ks49SZYOt2S7JzwN84YZhx/ql2/AKcDL6An2sVhJesh1yZCkaih3C
S3RuMr+MPGSWnH86JkGicUGe0e2JhvPVCaHD0YFsbIkQhjamK3rDuEyVrIcU5g7H
ViRxIQAHoRBuj0bfD8Tw60MO8GDTq0Kwn2REAOB+jdtkj5RX8q71UrD3ybwDCwLm
z1lCQbWkMcEXTdONP0+UIHs3EQ8jD+pDbZCnEHn+NtXRSHBGp4wwMes2n221dbFv
VAP+NeZMwoMi+Pzep58mrIbxk3XsT514yR/s1iYAM16uOcoQm1VNL8rsEWfFH2AC
nqiFzoD+kdr4IQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:51 2026 by rpki-client