This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File:                     EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier:          sr4oOQSZQhMnZ6oqyo2dav9mGPXjkeXXB8BD3vEbXWQ=
Subject key identifier:   45:CE:53:9D:FD:67:5E:1C:68:28:4D:D6:0D:82:F1:87:3B:E9:71:CB
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer:       /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial:       019C427D4F0D39FCAF3E6D4A5AE74311A73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number:          1084
Signing time:             Mon 09 Feb 2026 13:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:34 +0000
Files and hashes:         1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: ZRLld5IY9CPlaW+60spu/d58kfWtD3u7xtnLsUFT1/g=)
                          2: Im1hsaO2oTHkZ-z1x6BH4qOQeiA.roa (hash: rtKkHZhMW9ixPsD8Afo3cijSYyrzXMxXcNv91q8fepc=)
                          3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
                          4: vagFAaYfljHxMPpkImKk4VgM7mg.roa (hash: o/ZL69Lrvnp/cw7d7SgMOOLc6Sh9EHk3r9mS1R5QVsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4f:0d:39:fc:af:3e:6d:4a:5a:e7:43:11:a7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
        Validity
            Not Before: Feb  9 13:00:34 2026 GMT
            Not After : Feb 10 13:00:34 2026 GMT
        Subject: CN=45ce539dfd675e1c68284dd60d82f1873be971cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:40:9c:74:0e:49:8f:9e:20:94:53:f5:e2:
                    5e:0f:4b:7c:26:90:07:e2:a8:8c:eb:b3:67:92:9a:
                    2b:13:9f:cf:45:1d:5e:da:d6:0a:35:fa:6c:ee:89:
                    da:90:18:af:94:f1:86:6c:1d:60:65:ed:0d:89:27:
                    06:9e:c4:9f:c8:f0:ec:6c:1d:2e:a6:8f:5c:bb:95:
                    ac:de:f6:cd:3b:ac:e7:9a:27:42:01:5d:c8:36:2d:
                    cb:36:fb:51:f7:21:c6:b6:d2:b5:bd:4a:4d:80:c5:
                    22:b3:de:47:83:93:36:99:a3:36:a0:9c:c0:64:29:
                    50:9a:13:90:80:66:3f:a2:ab:c1:17:b1:af:8f:65:
                    bf:52:41:e7:cc:f1:93:28:ce:ff:30:0c:0a:da:83:
                    9a:59:82:8d:af:68:e3:77:2e:47:b6:50:d4:b7:6a:
                    a3:04:38:01:08:09:28:d1:e7:2b:87:a4:88:da:c4:
                    20:7a:06:5b:86:fa:3f:f8:e0:e9:cb:74:f8:c0:c8:
                    8d:5d:44:3c:67:65:6e:de:49:ac:86:a6:f2:10:1c:
                    64:b6:3c:d8:58:dc:f5:2f:0b:7c:9f:86:b1:d5:7c:
                    a3:aa:3d:1d:7b:9b:91:14:79:6a:86:87:9d:20:94:
                    f7:c6:da:be:fa:6a:0c:d9:ff:49:1d:a8:8b:57:bf:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:53:9D:FD:67:5E:1C:68:28:4D:D6:0D:82:F1:87:3B:E9:71:CB
            X509v3 Authority Key Identifier:
                keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:95:f7:a0:ab:b1:f5:a1:84:d3:6d:f5:cb:96:b1:e3:0d:
         07:9d:77:2c:fb:6b:ba:ea:91:c5:2e:5b:f0:88:b7:a3:1a:00:
         b0:bb:28:26:90:37:70:a8:5d:29:20:df:8a:cf:7f:19:0f:92:
         a5:7b:3b:88:56:f5:01:39:96:33:ee:72:70:87:ba:57:7b:50:
         f1:8f:c2:8c:e5:5d:39:ea:06:ea:06:c7:91:a1:67:b4:f2:5e:
         ad:b3:7b:9f:b2:b9:b2:e2:8c:ed:53:27:c8:25:c3:5d:23:6a:
         ed:fd:ce:e8:8e:61:1b:5f:ce:b1:de:bd:46:50:11:2b:06:86:
         56:8c:61:92:2d:fc:62:89:76:d1:2f:80:aa:88:fa:22:ae:c9:
         fe:38:9c:1b:b9:ff:ed:26:62:14:4e:be:6c:fc:33:63:8f:09:
         26:02:37:71:4e:c4:d0:9c:15:14:9b:48:a9:26:42:93:93:4d:
         80:31:e3:32:97:db:ea:21:93:21:88:06:05:b3:e3:04:d5:6c:
         dc:32:32:21:a9:03:7e:b3:06:a7:a1:23:4a:7b:d2:6c:6d:6d:
         6b:fe:da:19:95:4d:4a:8a:27:bb:8a:35:06:9f:a5:c1:02:11:
         21:05:b3:21:85:a0:64:7d:72:26:35:07:bb:4c:0e:ca:3d:be:
         a2:08:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:39 2026 by rpki-client