This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File:                     e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier:          qgpH8jvujVGAvjbbP8IATFAJANhPtAdA2zTQT+wQN6E=
Subject key identifier:   4D:1B:3D:77:50:65:3E:35:EE:56:A0:A5:4C:82:8A:08:AA:17:B1:3F
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer:       /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial:       019C4133A5FE075F7C11003C47711D7102B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number:          0569
Signing time:             Mon 09 Feb 2026 07:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:29 +0000
Files and hashes:         1: 9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa (hash: XSIKM2J7ehZpb0tQX1yj15wm/mofvKw8ffgNRz1IrEo=)
                          2: bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (hash: 9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=)
                          3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: SolVwYmGSjqdJZ9NDmgCNMGOUQCJXyVGblgM+G4ABgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:a5:fe:07:5f:7c:11:00:3c:47:71:1d:71:02:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
        Validity
            Not Before: Feb  9 07:00:29 2026 GMT
            Not After : Feb 10 07:00:29 2026 GMT
        Subject: CN=4d1b3d7750653e35ee56a0a54c828a08aa17b13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:6d:65:4b:a6:f6:24:28:6a:72:ab:ff:1c:
                    14:0a:0e:79:0a:2e:64:44:fe:ed:19:0c:77:36:6b:
                    09:9d:d9:8f:28:ed:69:5c:e1:bf:6d:06:4f:81:68:
                    4b:2d:8d:dd:dc:01:50:eb:fc:72:a5:87:a7:df:f7:
                    d7:54:c2:83:a7:30:60:07:5e:1c:d0:e4:65:88:bc:
                    74:c7:ab:b8:59:a9:33:15:55:9a:0d:fa:76:7e:f7:
                    0e:4f:c3:e3:09:62:0f:ea:76:59:19:57:fe:8b:d6:
                    6a:82:63:1d:b3:9b:98:8c:c3:07:08:a3:70:bf:44:
                    59:54:a1:f8:de:1a:95:5f:85:37:3d:94:95:6b:98:
                    81:6d:24:9c:66:48:2d:18:35:21:2f:a3:e4:95:7c:
                    93:2a:38:f4:37:e7:21:67:24:17:e2:be:93:c1:d4:
                    77:50:96:94:09:38:13:05:da:cb:7d:77:b5:3d:be:
                    c6:75:af:6a:d5:7c:0d:4a:35:2f:da:3a:f3:d0:ed:
                    5b:bd:ac:34:88:86:01:ed:2e:98:aa:cd:41:75:19:
                    57:34:64:1c:7e:36:66:3a:bc:4b:a4:7a:27:58:97:
                    78:e8:d7:b1:64:2e:df:06:0a:ee:fe:20:4c:36:ff:
                    68:5e:6a:0c:6c:bd:06:8c:00:c9:2f:86:8c:d5:cd:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1B:3D:77:50:65:3E:35:EE:56:A0:A5:4C:82:8A:08:AA:17:B1:3F
            X509v3 Authority Key Identifier:
                keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:24:ce:81:9d:3a:08:d4:59:07:bb:71:8d:63:3d:d1:ef:2f:
         97:a8:08:ed:6b:45:e2:b9:b3:94:23:1d:a2:9d:c6:66:48:58:
         31:da:e0:66:b4:31:70:5f:02:58:81:97:21:48:2f:e1:c9:58:
         74:3c:f9:a9:b9:b8:5b:d7:9f:d8:77:80:68:0e:a9:06:da:c4:
         c7:b7:5f:97:d9:ea:5a:c9:4c:fd:d9:07:23:21:ef:0f:b2:b6:
         8a:d7:67:7e:39:98:fb:a6:e9:ed:1b:5a:31:89:a7:72:68:00:
         84:c0:d4:88:fb:39:18:4d:e0:3f:6c:42:11:5f:d2:2b:12:29:
         7b:16:1f:1d:7d:25:20:f3:7b:a7:b1:cf:36:52:b0:29:7d:f9:
         a1:3b:a5:f6:51:64:01:7e:76:50:18:17:3c:96:f0:15:ec:0f:
         41:58:73:72:28:d8:1b:1a:18:7e:83:0d:b7:63:d3:a3:e7:66:
         7a:4d:10:ac:12:42:d3:a5:83:7b:f7:ad:46:88:df:0f:72:eb:
         75:40:0e:d5:7d:38:f2:27:f3:17:ba:43:7d:81:0f:2f:28:b9:
         ef:38:86:d8:7e:18:d1:2e:43:9d:df:89:53:3f:3e:e1:27:06:
         71:05:25:cc:d7:11:5c:bf:e6:a3:4c:81:45:04:ff:10:80:db:
         7a:42:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:39 2026 by rpki-client