This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          lXs/K9a/0MaMrFy+SBTYp+e5SbGWsKcv5ldNrsDkobk=
Subject key identifier:   E4:35:03:E7:BB:F9:60:28:CE:C2:81:66:E5:FA:9E:EF:8D:D2:6D:05
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       019C43593BF1D07D60DC35A84B744030CD95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 17:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:47 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: 0u/zzYN6c6kkGdNHrChsCQCONYkb3eQNo4tCZ3LO0S0=)
                          2: lTILXF_5UJEPBougJpxtW4AUOSc.roa (hash: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:3b:f1:d0:7d:60:dc:35:a8:4b:74:40:30:cd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Feb  9 17:00:47 2026 GMT
            Not After : Feb 10 17:00:47 2026 GMT
        Subject: CN=e43503e7bbf96028cec28166e5fa9eef8dd26d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:2c:f2:78:7e:db:f6:ec:06:54:5a:93:4d:
                    9d:3b:d1:89:5f:ae:81:71:43:e9:16:93:24:a2:2c:
                    a6:e8:24:8e:51:83:5b:e2:20:f0:cd:15:0e:c3:87:
                    cc:99:a7:03:59:d5:0a:1a:7d:70:ad:8e:36:19:02:
                    bf:dd:2a:d7:01:ac:96:51:59:03:a4:80:5b:c0:87:
                    17:21:3d:ca:d7:50:ca:09:1d:07:fe:22:a3:7d:2a:
                    8b:dc:15:09:f4:1e:73:f7:da:02:fa:2f:44:fd:75:
                    c1:8a:27:b1:9e:d3:b8:f1:02:8c:2a:3c:ff:21:9e:
                    89:58:3d:02:30:dc:08:41:8d:b9:b9:56:d2:79:f2:
                    20:07:d5:1a:e3:d5:f5:1a:a2:9d:59:b0:74:61:c3:
                    a5:f5:da:0e:a0:54:24:ca:b6:61:25:c1:29:f6:67:
                    f5:38:48:cf:58:a6:e3:29:55:8d:51:28:fc:cc:fc:
                    ec:dc:88:c7:2b:4b:4d:ef:b0:59:bc:95:a2:69:15:
                    5a:29:15:c8:91:eb:36:7a:81:60:5f:80:06:11:e0:
                    6a:b0:c7:90:d0:0c:5d:7f:fc:e4:48:06:67:e5:93:
                    cd:f3:6c:67:e3:a8:df:3d:27:b1:26:7b:46:b4:4d:
                    2a:db:da:ed:0d:09:d3:12:94:82:2d:1b:1e:1f:49:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:35:03:E7:BB:F9:60:28:CE:C2:81:66:E5:FA:9E:EF:8D:D2:6D:05
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:63:a4:ea:18:1c:9c:cb:8c:04:8c:f6:5c:15:cd:0f:e4:
         b6:b8:90:1d:5d:45:d7:c2:92:5e:e8:f1:bf:eb:a5:71:69:2d:
         0a:7f:3f:c3:81:4e:80:4e:c6:02:eb:78:2f:0e:e2:69:9b:93:
         4a:29:be:fb:8c:4d:f8:a5:f7:35:39:cd:bf:e7:b4:d7:81:13:
         97:87:49:ff:c7:d7:44:07:5a:a9:a8:eb:5a:02:5f:8f:e1:10:
         bf:4a:ad:14:12:fe:67:b3:4a:70:aa:07:9e:3f:ef:ad:f0:fe:
         a0:e9:c7:c8:24:0e:c8:e1:6e:e1:bd:8c:31:25:39:5f:0c:b6:
         47:46:28:45:69:07:8c:b7:cb:04:7b:9d:fe:4e:6f:b6:97:cd:
         ea:a7:50:12:3a:e3:94:e0:83:a1:6d:9e:47:fd:ef:32:b2:dd:
         e3:63:4f:75:65:2f:ae:73:a2:70:4f:96:4e:30:99:2e:0a:ef:
         91:ce:84:f1:c5:0a:09:f9:fc:5e:ba:63:c9:e5:12:8b:c3:ac:
         40:30:7d:03:fc:fb:32:c0:42:bd:b3:72:85:34:35:dd:0c:19:
         b1:85:b9:95:42:e0:68:ae:45:38:ab:1f:ef:db:6f:f7:3e:b7:
         19:7b:97:07:25:89:42:66:26:f8:a8:a5:e1:22:b7:d8:f7:cf:
         fe:9e:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:19 2026 by rpki-client