This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File:                     erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier:          ztoGVTz3wGrZy1JGrFEeYyMiw2CFwe/Nr9SWlqXuo84=
Subject key identifier:   A3:7B:52:2D:D1:07:C9:65:05:9E:9E:18:DF:A3:EF:9A:89:DF:8B:BC
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer:       /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial:       019C42464260372D541B897C088EDBEE6EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number:          17CB
Signing time:             Mon 09 Feb 2026 12:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:26 +0000
Files and hashes:         1: d5IKW5lyIc-4snAyg_x7-P-5HbI.roa (hash: rUMBMUTEgmWsLi88zfR9+uFDERqTwgRrauGY6l+zcME=)
                          2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: vDwigQCzWAJnGnSOX1F6jN4vG+jUmnekud8+AIIQVMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:42:60:37:2d:54:1b:89:7c:08:8e:db:ee:6e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
        Validity
            Not Before: Feb  9 12:00:26 2026 GMT
            Not After : Feb 10 12:00:26 2026 GMT
        Subject: CN=a37b522dd107c965059e9e18dfa3ef9a89df8bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:78:9b:53:04:b1:2a:aa:06:0e:34:aa:04:
                    26:be:df:a4:7e:9c:11:7a:a4:87:41:e2:e5:87:69:
                    7e:40:bc:de:ef:17:e5:44:67:24:92:19:82:73:dc:
                    1b:65:57:79:52:d9:71:d1:1e:92:6e:81:54:29:2f:
                    04:06:57:73:33:82:9f:f0:47:3c:14:41:21:e0:00:
                    f7:ea:65:59:d1:cf:c8:1b:42:b1:a8:a8:39:ae:4f:
                    2c:ad:6e:05:3c:70:dc:34:a4:48:97:d5:b4:ca:52:
                    ce:b0:77:63:92:b0:3c:f8:3a:4f:11:5d:65:c0:62:
                    4a:92:71:07:b4:ea:00:37:2e:e5:3d:15:36:60:52:
                    db:79:a3:98:03:2c:12:dc:92:59:ba:ca:64:55:c3:
                    02:c6:2d:0f:46:be:aa:fb:69:01:3b:36:b1:dc:a7:
                    bc:a4:50:f5:8b:2f:1b:de:33:c5:61:b5:07:70:03:
                    cb:01:03:3c:58:9e:d3:a0:a7:d3:52:11:dc:63:6b:
                    30:fd:2a:35:5a:a1:19:5b:6e:bc:9c:3c:47:99:64:
                    01:61:31:27:88:36:21:3c:09:f9:0e:72:1e:90:11:
                    57:f9:39:48:28:ce:45:ff:2e:e4:1c:28:a3:a5:ff:
                    ec:a8:bb:ac:f5:d5:13:3d:4b:bd:79:b2:e2:9d:e2:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:52:2D:D1:07:C9:65:05:9E:9E:18:DF:A3:EF:9A:89:DF:8B:BC
            X509v3 Authority Key Identifier:
                keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:91:f4:d7:e1:1c:5d:3b:7d:50:73:aa:2e:74:d5:37:36:
         ae:5c:12:bd:63:73:57:c5:56:cf:40:7e:55:8c:9c:8d:a5:a6:
         e8:29:72:07:77:bf:f8:74:41:21:c4:e0:75:6a:b2:db:ed:c1:
         02:b5:64:60:aa:2c:d7:bc:5a:65:0b:46:e4:ca:fb:45:17:79:
         99:50:20:53:af:fd:12:7f:ab:b0:af:2a:e0:37:02:6c:4e:3f:
         e0:dc:2c:a3:bf:93:fe:89:97:91:97:bf:0c:8a:68:36:d7:7d:
         2d:0c:0a:89:d2:c0:85:ad:d7:fa:5f:01:69:f3:91:54:04:9b:
         b2:f3:f3:ff:38:1f:76:7e:48:04:58:36:19:a3:ba:41:e2:c2:
         3e:78:81:22:29:2c:52:d5:f4:d0:21:c3:05:e4:53:7c:ba:bd:
         62:39:33:82:ea:bd:3f:7e:9b:d1:ee:84:73:8e:8d:dc:d0:49:
         67:b2:b0:51:05:c7:a0:1e:59:d2:a9:aa:5b:f7:5f:cb:d9:0e:
         af:8b:da:c9:50:ca:fa:67:72:17:51:de:e5:ce:79:66:06:e7:
         80:c6:aa:b2:6b:3a:e4:c5:f6:5a:57:7d:2d:5c:6a:fb:06:84:
         18:50:1e:57:04:61:dc:12:17:3c:4e:56:25:cf:f8:31:80:ab:
         9e:5a:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:08 2026 by rpki-client