This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File:                     EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier:          chsKUC8FGSbXcYeUPWPFEArdqOyKIbceRB1QOsl60uM=
Subject key identifier:   FB:F7:28:2F:97:47:F6:7D:D7:0D:20:CC:7E:E0:BF:C5:4A:A0:6E:9A
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer:       /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial:       019C43FD844E6AD2AC8242B2D638433EA393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number:          1768
Signing time:             Mon 09 Feb 2026 20:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:13 +0000
Files and hashes:         1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: vyrY0PIcRq1aUZjSdCtpEsx3/kXvopjoOpUEFpHcUzs=)
                          2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:84:4e:6a:d2:ac:82:42:b2:d6:38:43:3e:a3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
        Validity
            Not Before: Feb  9 20:00:13 2026 GMT
            Not After : Feb 10 20:00:13 2026 GMT
        Subject: CN=fbf7282f9747f67dd70d20cc7ee0bfc54aa06e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:a9:98:a0:cd:46:72:23:28:90:39:fe:18:
                    19:86:df:48:13:cb:44:af:09:22:55:d2:49:ed:d1:
                    1a:af:dc:22:a6:77:90:20:c2:31:0c:ab:b8:21:f6:
                    99:b9:b6:04:67:de:55:7a:02:c2:68:6a:f9:f9:96:
                    ea:48:20:68:e6:fc:84:fd:a9:c5:cf:02:98:2c:15:
                    76:b4:b3:aa:27:f2:6e:3c:45:46:6c:cb:ce:a3:d5:
                    47:e7:c6:86:c3:2b:59:06:9e:cc:79:8a:69:7d:2b:
                    97:81:13:2c:d9:27:4d:8f:51:7f:a2:eb:f4:60:2f:
                    6c:25:28:1a:04:a3:e5:c5:08:f6:33:e5:a2:f0:9c:
                    8c:d5:f6:88:1f:ed:19:3c:a6:bb:26:9d:95:7c:d3:
                    ab:6f:4d:1e:a7:1e:1d:71:3c:c8:18:d7:4a:6b:19:
                    05:21:31:cb:cf:03:8e:21:92:77:12:2c:d0:02:6d:
                    9e:81:ee:6b:ee:de:d5:7f:aa:61:f3:35:d0:6d:89:
                    6b:47:e1:a7:5d:bb:c8:98:e3:7e:3a:db:a6:92:e0:
                    27:f1:1f:15:5b:15:eb:a6:c7:c6:29:f1:f4:50:7f:
                    70:e9:90:fe:03:b7:f5:e0:ce:89:11:86:3e:1a:ed:
                    b3:9a:5e:c1:c0:32:34:95:ac:ea:da:e6:bf:37:63:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:28:2F:97:47:F6:7D:D7:0D:20:CC:7E:E0:BF:C5:4A:A0:6E:9A
            X509v3 Authority Key Identifier:
                keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:72:7e:57:23:0e:3e:eb:82:32:b4:5f:1d:42:a8:54:6c:eb:
         ed:e8:86:4b:b3:04:e6:92:7a:db:d3:b3:38:6c:7a:95:7a:66:
         f3:ee:c7:d2:7b:88:be:05:b1:fb:1d:98:1d:00:fb:c1:45:48:
         2a:8e:77:a4:d7:49:6e:b7:a5:b5:83:9b:3c:4c:98:ed:2d:24:
         36:43:dd:2a:51:ce:cf:09:27:16:16:47:56:7a:0c:d4:12:64:
         1e:b4:7b:88:2b:2e:70:31:58:a6:77:af:79:ff:50:1c:80:94:
         c7:e9:7e:8e:14:8b:95:ec:11:30:61:73:aa:f4:b2:d9:a2:89:
         fa:ff:68:0c:f8:88:a6:b0:26:b9:04:64:93:9b:29:20:83:c2:
         67:35:88:13:55:ea:51:81:2c:52:5f:b2:7a:22:b6:99:95:3a:
         5b:d0:cc:42:23:10:8f:ea:c4:db:f1:aa:a0:47:7c:0f:e7:83:
         5c:90:24:09:bd:be:f9:b7:f9:7a:a2:81:d0:f7:1f:ba:fa:18:
         50:4a:13:26:36:e7:c0:6d:74:fc:d7:c6:80:a4:3e:3c:50:51:
         35:7b:d5:7d:1b:51:b0:7f:fa:17:1c:cb:4b:e8:a6:9f:45:27:
         b8:a9:8b:77:02:0a:45:53:09:0b:18:c7:8a:7e:0a:62:c6:c7:
         11:aa:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:33:41 2026 by rpki-client