This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          hWuRibNkIHltNQPGlrRLZVSUt8FrxJ3s4fWTZi1o/L8=
Subject key identifier:   00:6A:76:27:87:E0:14:E9:6B:37:8B:05:E3:63:96:07:7E:7E:9F:89
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019C24E155DC5D3973E758B445A0589735CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0B84
Signing time:             Tue 03 Feb 2026 19:01:13 +0000
Manifest this update:     Tue 03 Feb 2026 19:01:13 +0000
Manifest next update:     Wed 04 Feb 2026 19:01:13 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: XkZX7qDYhWBuS3ZskiYlyh/677nIOjycg2U6Z9+Zu3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:e1:55:dc:5d:39:73:e7:58:b4:45:a0:58:97:35:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Feb  3 19:01:13 2026 GMT
            Not After : Feb  4 19:01:13 2026 GMT
        Subject: CN=006a762787e014e96b378b05e36396077e7e9f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:d5:70:57:0f:6e:75:4f:29:b2:f8:f1:fa:
                    f7:ae:3e:f8:14:2a:f9:7a:03:74:a8:0a:54:07:18:
                    a4:3c:fe:63:14:67:0d:40:5b:ad:e5:1e:cf:3f:91:
                    8b:22:f2:61:c0:f4:e5:cf:b9:25:38:ff:f6:81:6d:
                    59:63:d2:6d:bc:80:da:f2:e3:fc:dd:f0:35:f1:fc:
                    34:a0:d7:47:12:f2:85:7e:ab:9e:4e:9f:56:5c:42:
                    c9:c5:72:b7:1d:ed:4d:2d:7c:14:20:1a:b2:05:89:
                    aa:c5:df:5b:6b:59:fc:66:6b:e1:f5:8f:76:0a:7f:
                    ae:e5:e1:e4:cd:b9:2a:69:5b:15:82:39:19:7c:6a:
                    f1:0a:80:2b:66:10:50:76:50:80:23:6f:55:42:d8:
                    77:90:d0:d0:5d:42:51:af:79:e4:f4:fe:b5:e6:39:
                    12:ff:3d:b6:f7:cc:d4:e5:a2:1f:fa:e5:2d:44:98:
                    19:f4:9c:75:a4:1a:ae:9f:4d:24:83:af:7d:c6:89:
                    2e:f2:56:5c:60:58:b8:3a:8d:49:04:a2:fe:93:82:
                    38:5f:13:48:ed:f3:d9:00:14:c1:d0:ec:db:a7:db:
                    3e:72:f1:8d:b4:d5:7d:66:11:99:4a:e8:3f:ad:be:
                    e1:0f:83:d4:07:6e:8d:f2:2e:1f:cc:39:a1:58:eb:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:76:27:87:E0:14:E9:6B:37:8B:05:E3:63:96:07:7E:7E:9F:89
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:0d:5e:e6:61:11:fa:dc:d9:c2:91:94:24:3e:87:2c:4d:
         fe:e4:76:7b:cf:02:a1:62:60:c3:b5:ae:d9:a9:24:2e:f6:7d:
         4f:2b:fe:8a:52:a2:25:3f:2b:9d:3c:a8:57:d0:2c:b5:cc:43:
         e7:ba:e8:31:0b:32:58:2f:c4:35:ba:b1:c5:f7:9a:e9:66:f8:
         6b:34:49:44:ed:89:46:c0:8e:72:90:ee:03:97:23:ea:b3:71:
         55:24:99:88:9a:e6:7f:b8:7d:e3:bf:69:24:2b:7d:f9:d9:db:
         21:75:b9:ca:a1:ad:32:b8:e5:ed:8f:ec:ba:26:8d:d9:37:d1:
         57:24:a2:bc:c9:ca:40:aa:a6:f1:2a:c4:06:0f:0c:de:d6:3c:
         e7:8d:77:60:f9:b9:4e:65:da:f2:0c:cb:29:8d:5c:68:9e:29:
         51:c5:1f:c8:db:7f:46:0f:fb:ed:a5:0f:95:de:b7:d1:18:df:
         8e:1f:44:2b:13:1e:70:86:c9:2d:ef:55:e2:45:3d:6a:cd:b6:
         d5:02:da:20:72:2d:c2:bf:be:c3:7b:7f:c5:0a:68:e8:3a:50:
         ac:02:02:ec:41:f2:32:2b:b4:a3:47:1c:20:99:6e:f7:68:40:
         bf:b4:94:cb:a7:d6:11:d7:3b:90:8e:d9:46:f6:db:de:41:9b:
         09:8a:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 04:36:37 2026 by rpki-client