This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          WTLU6MNNh65VmHHTYFDoNrs3wGWdzObPmD7yGJp9yZ0=
Subject key identifier:   F0:03:AC:A5:31:37:DF:F0:D3:EE:4F:C2:26:66:6D:45:4A:03:23:C6
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       019C41A23FB163EB226B8FCA7563373B4EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          16B8
Signing time:             Mon 09 Feb 2026 09:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:17 +0000
Files and hashes:         1: MwbZOqIggyrSHU4PZ4grNgTv7Vg.roa (hash: PMNvYA3uE+IknWsNwKXqnO+LeFyIQwpnp1UXQEbVx60=)
                          2: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: C6a9e64w5SObUDZOnRMAgqcld+5G9VOlzsHuwgG2bUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:3f:b1:63:eb:22:6b:8f:ca:75:63:37:3b:4e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Feb  9 09:01:17 2026 GMT
            Not After : Feb 10 09:01:17 2026 GMT
        Subject: CN=f003aca53137dff0d3ee4fc226666d454a0323c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:fe:20:22:05:68:00:f6:1c:bb:9e:6e:1f:
                    3d:e1:ef:df:48:6b:df:b4:24:96:4e:6d:7f:62:d7:
                    d3:f9:ed:9b:3c:cb:f2:73:4b:1f:13:29:8e:48:90:
                    af:88:37:39:8a:9e:02:ea:9c:47:80:12:0f:44:ab:
                    de:bc:e8:12:8c:a4:c1:a4:ff:9c:10:9e:63:09:72:
                    76:1b:51:a1:95:ef:2d:99:61:7e:a7:c7:e0:17:90:
                    97:cd:22:2f:bf:b7:6d:2f:77:6a:8d:3b:2b:97:c6:
                    3c:a9:34:cb:ee:36:fe:48:e3:af:ff:ce:55:e1:45:
                    c0:f6:68:2f:bc:10:d1:d1:e1:4c:40:e8:d2:b6:79:
                    5b:cc:c5:48:b2:9a:0a:f7:d5:76:ce:9d:2f:02:5f:
                    37:70:e4:e6:3f:a8:cf:c6:6a:da:0d:04:ca:61:09:
                    0c:ad:f9:ac:53:ef:0a:a4:f6:9e:af:f5:dc:6d:8b:
                    7e:27:2d:54:98:8a:ab:40:ab:62:7e:98:5f:32:12:
                    a6:ec:aa:d8:b4:69:3e:5c:9c:3e:67:3a:5c:71:37:
                    a5:8a:82:3e:57:9a:93:85:78:66:6a:26:d1:21:31:
                    7f:f0:c0:44:d3:d0:65:d6:66:f1:c2:50:d5:9f:cc:
                    df:12:3f:51:e0:f1:9a:09:95:f0:79:a8:9b:38:fd:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:03:AC:A5:31:37:DF:F0:D3:EE:4F:C2:26:66:6D:45:4A:03:23:C6
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3d:4f:dd:04:6f:20:3c:4c:e2:12:c6:bf:fe:e8:43:76:16:
         c5:f2:b4:f8:74:93:67:d5:8a:ad:50:88:e8:20:35:52:e0:5a:
         aa:5c:69:3e:e0:e2:58:be:7d:ce:37:d3:ef:19:82:1f:02:4d:
         9c:e6:3b:6c:dd:65:be:7f:bc:79:8e:fe:19:fc:3b:b9:7e:2a:
         79:a8:37:42:aa:75:8d:98:fc:03:17:a4:93:ea:c8:a0:9b:d5:
         bf:5f:91:24:af:5b:80:e1:9e:8c:00:8d:e3:b7:f7:81:b5:43:
         e5:2e:f2:76:e0:b6:91:7e:4f:b5:4f:8f:64:16:5f:ee:5a:7f:
         88:58:98:7d:a2:06:77:9f:84:cb:bf:b7:c9:09:a5:8c:2e:58:
         cb:1b:56:ed:9b:7c:6a:8d:99:23:9b:07:4d:f7:ec:15:0b:58:
         4a:94:77:4c:c1:66:8d:5e:74:6f:e7:71:7b:ab:bf:86:c4:9f:
         90:96:9e:25:61:a5:ec:43:45:22:3f:ca:f4:5f:67:d5:5f:34:
         8d:60:73:ae:e9:47:7e:fb:6c:84:dd:af:0e:05:f3:37:ab:e7:
         f1:f8:c3:39:26:b6:72:29:5e:a3:8e:d0:22:f8:b6:af:91:b4:
         9a:1a:33:84:e3:fb:8f:27:10:cb:ed:1d:2c:99:eb:63:ca:2c:
         46:14:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:04 2026 by rpki-client