This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          PEfsMt939804U3w17loiKwMwSK8cMfwl5jgbZ7WuItc=
Subject key identifier:   94:F0:E8:37:9B:E4:5A:94:F4:C8:C6:C7:13:D0:5B:DD:26:FA:3B:EE
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       019C44A2CE415D844ED50DBD6DDE6AC49D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 23:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:45 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: GxRVrcGQcx8tee8erXAOSojRgBrkLoazztS4ovth2lY=)
                          2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:ce:41:5d:84:4e:d5:0d:bd:6d:de:6a:c4:9d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Feb  9 23:00:45 2026 GMT
            Not After : Feb 10 23:00:45 2026 GMT
        Subject: CN=94f0e8379be45a94f4c8c6c713d05bdd26fa3bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:61:75:22:ff:f7:7a:f7:5a:a6:6d:bc:8e:
                    50:09:86:4c:67:40:e7:e8:f9:94:25:52:6c:79:bb:
                    ab:8b:00:d8:47:f8:16:8f:d8:ee:8e:0d:fd:dd:74:
                    44:3b:39:2c:ce:d7:a8:21:c7:f4:a0:1e:6d:23:cd:
                    fb:25:5b:d7:b4:2a:60:2c:cd:10:d4:82:e2:77:c3:
                    c7:8e:f8:4f:e3:98:9f:d2:20:7e:ad:9a:4f:d8:41:
                    9f:95:69:a4:dd:5b:71:5c:38:43:98:f4:13:c5:a7:
                    ba:f2:36:e1:3f:38:e5:9a:3e:73:69:60:2e:d2:88:
                    de:02:6b:5f:af:01:5e:17:95:0b:7c:06:67:b5:18:
                    3c:76:fb:7e:7a:bb:6a:f6:99:04:84:cb:8c:53:c5:
                    fd:58:c4:7c:95:62:a0:d0:e8:79:be:95:5c:13:58:
                    28:75:74:b0:4e:42:c3:b5:7b:f1:b1:1f:f9:56:53:
                    64:a1:04:48:14:c4:84:37:e8:62:3f:9d:e7:df:a1:
                    53:bb:8e:f8:29:5f:56:a2:40:fd:e8:38:a1:b0:5f:
                    29:94:a7:fb:50:82:fd:d4:55:20:cf:7e:95:20:11:
                    78:f7:ab:35:f6:28:42:4d:90:4a:c8:ed:0a:b8:14:
                    fc:67:8f:d6:90:8f:ba:6c:bf:eb:0c:25:3b:51:7c:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F0:E8:37:9B:E4:5A:94:F4:C8:C6:C7:13:D0:5B:DD:26:FA:3B:EE
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:51:53:a5:c2:eb:d2:7e:d6:71:2e:35:d4:5c:ac:37:ef:3f:
         01:3e:c7:b8:9b:c1:3d:e1:81:b4:64:25:4d:e1:2c:9c:2f:0d:
         74:77:d5:17:9c:a6:c2:ec:25:5c:dc:4e:19:0d:ee:cf:c2:e2:
         02:c8:47:0c:0d:9c:e9:ce:25:76:45:8d:2b:30:05:60:70:79:
         26:97:28:53:ab:1b:ab:f3:a2:f4:1a:42:ae:cd:d3:be:5b:eb:
         4b:97:12:c1:51:76:68:81:35:08:79:94:88:a5:81:bb:ea:81:
         27:80:01:2c:06:d0:ea:3b:1e:c8:ab:d3:b0:96:57:d3:51:0b:
         be:cc:41:09:58:c1:cd:c9:59:51:21:94:0c:86:37:da:1b:44:
         bf:0e:a9:24:3b:bd:2e:f2:80:8b:be:c4:a7:cd:46:f1:01:08:
         d9:1f:36:b6:1e:b7:eb:5d:68:e3:97:6f:28:45:94:c5:52:70:
         2d:fe:f0:4c:63:6b:40:3a:0e:33:b4:b0:7c:f4:bd:d5:10:7f:
         7c:60:93:1b:91:08:d7:ff:4f:ba:8d:87:ef:ba:de:04:0e:18:
         95:bf:ad:18:33:a6:a8:68:4c:a8:37:9b:e6:c8:81:c9:fe:7e:
         ef:c9:28:84:5b:ad:b3:c8:1c:8d:b3:a9:c8:32:b4:b1:bb:6f:
         fe:a3:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:56 2026 by rpki-client