This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File:                     ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier:          9mN3Zc5Le10MV2noWp6m9C1ktlvLntD7bJAf5BtTbLw=
Subject key identifier:   AC:0D:2D:2F:74:4B:B6:D6:68:02:81:05:EE:C7:10:18:B6:20:95:52
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer:       /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial:       019C43C7083FB64DC6E256414A4F6BC42E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number:          1632
Signing time:             Mon 09 Feb 2026 19:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:43 +0000
Files and hashes:         1: 0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa (hash: IFhoLkFpjChfV3wyKbItrjVFxiC4Oyb3ylSVZABFfD0=)
                          2: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: YAF2S50OysnL4XkxKaK8jhDa/S/uzRUAPX1C30sgRrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:08:3f:b6:4d:c6:e2:56:41:4a:4f:6b:c4:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
        Validity
            Not Before: Feb  9 19:00:43 2026 GMT
            Not After : Feb 10 19:00:43 2026 GMT
        Subject: CN=ac0d2d2f744bb6d668028105eec71018b6209552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:69:f3:75:c0:c4:92:6a:40:46:b5:52:da:
                    4a:95:56:5c:f3:ff:3d:fe:76:c2:55:c5:6a:89:da:
                    64:8c:11:30:14:80:70:b6:55:c9:43:25:cd:9e:ee:
                    23:a2:a7:39:90:24:2e:d8:59:a8:e7:6c:03:51:0c:
                    43:e2:3e:9e:99:fc:4e:8d:60:42:f7:cc:23:a4:80:
                    da:02:84:90:d0:6b:56:ca:c3:71:b7:97:57:57:77:
                    4c:7b:da:a9:50:38:d7:1a:95:42:3d:ae:2f:cd:bc:
                    71:02:76:ff:e2:08:42:85:be:a1:83:28:20:74:c8:
                    8d:a6:41:28:f0:39:44:e2:0d:da:28:bd:94:6a:a5:
                    9e:73:bb:06:3b:aa:7f:4b:82:a9:e6:dd:1d:ad:c9:
                    c0:90:b6:6b:fe:64:b8:20:e9:07:86:70:c1:eb:4c:
                    6f:01:30:78:93:59:cb:e8:d9:c2:13:31:7b:78:0f:
                    d8:73:24:19:23:41:01:66:2e:af:ff:91:67:89:4d:
                    f1:e1:b5:cb:06:b1:af:db:81:ae:3b:30:f9:f4:3d:
                    00:d8:87:f4:84:d5:80:f6:ae:24:5c:50:47:d8:8b:
                    11:e8:fe:4e:21:cb:6b:97:36:53:8f:1d:1f:06:85:
                    24:02:e4:cf:ea:ad:80:d2:12:04:1e:14:4c:60:8f:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:2D:2F:74:4B:B6:D6:68:02:81:05:EE:C7:10:18:B6:20:95:52
            X509v3 Authority Key Identifier:
                keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:f7:32:02:6b:12:9c:e2:46:c6:a6:e7:dc:65:98:70:44:
         16:3f:a9:df:23:88:af:d7:0f:46:a3:bb:28:99:42:f5:16:0c:
         30:21:b0:08:07:0c:b1:3a:3f:3f:b5:77:f4:d8:4b:6b:11:2d:
         f2:ac:98:a8:6e:8e:4d:f8:b5:84:17:88:25:79:e2:d5:8d:9b:
         ef:e4:8b:be:10:51:5d:f3:4c:38:0c:fc:ac:5b:98:80:52:a1:
         3e:9f:4a:2c:7b:7b:fb:67:39:e1:a0:02:15:54:85:cd:d3:99:
         27:f2:36:9d:b1:43:3e:df:2f:d3:85:9e:69:16:49:b3:df:60:
         0a:73:dd:fe:e6:7f:82:74:ee:17:6c:29:ea:c4:d5:2b:b9:9c:
         cf:85:fd:5f:55:71:1c:52:3f:f2:4a:a5:7e:93:c4:df:e6:2e:
         c2:43:e0:05:90:f5:9f:2e:6f:43:55:90:f0:57:c6:75:97:0c:
         40:8d:2d:a6:f9:c3:9f:91:70:b3:d4:48:79:47:80:49:4c:d7:
         c2:19:67:50:d9:b7:9e:fb:31:6c:07:7b:4a:2b:c0:ae:75:f0:
         bd:dd:39:cc:c2:c6:7d:85:66:d3:4e:62:24:57:3f:88:a9:0f:
         f8:81:68:3f:71:07:b7:b4:23:ad:49:26:42:ea:60:53:dc:87:
         41:54:38:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxwg/tk3G4lZBSk9rxC6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjk4NDZkOGY3NWQ2NDVmZjYzMDhjZTAzMDA4N2EyOTdl
NmIzNTkwHhcNMjYwMjA5MTkwMDQzWhcNMjYwMjEwMTkwMDQzWjAzMTEwLwYDVQQD
EyhhYzBkMmQyZjc0NGJiNmQ2NjgwMjgxMDVlZWM3MTAxOGI2MjA5NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPFp83XAxJJqQEa1UtpKlVZc8/89
/nbCVcVqidpkjBEwFIBwtlXJQyXNnu4joqc5kCQu2Fmo52wDUQxD4j6emfxOjWBC
98wjpIDaAoSQ0GtWysNxt5dXV3dMe9qpUDjXGpVCPa4vzbxxAnb/4ghChb6hgygg
dMiNpkEo8DlE4g3aKL2UaqWec7sGO6p/S4Kp5t0drcnAkLZr/mS4IOkHhnDB60xv
ATB4k1nL6NnCEzF7eA/YcyQZI0EBZi6v/5FniU3x4bXLBrGv24GuOzD59D0A2If0
hNWA9q4kXFBH2IsR6P5OIctrlzZTjx0fBoUkAuTP6q2A0hIEHhRMYI/jwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwNLS90S7bWaAKBBe7HEBi2IJVSMB8GA1UdIwQY
MBaAFBK5hG2PddZF/2MIzgMAh6KX5rNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMzhmN2QtNTliYi00ODI1LWI2YmYt
Nzg4NTE5MzJiMjdmLzEvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMzhmN2QtNTliYi00ODI1LWI2YmYtNzg4NTE5MzJiMjdm
LzEvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyf3MgJr
EpziRsam59xlmHBEFj+p3yOIr9cPRqO7KJlC9RYMMCGwCAcMsTo/P7V39NhLaxEt
8qyYqG6OTfi1hBeIJXni1Y2b7+SLvhBRXfNMOAz8rFuYgFKhPp9KLHt7+2c54aAC
FVSFzdOZJ/I2nbFDPt8v04WeaRZJs99gCnPd/uZ/gnTuF2wp6sTVK7mcz4X9X1Vx
HFI/8kqlfpPE3+YuwkPgBZD1ny5vQ1WQ8FfGdZcMQI0tpvnDn5Fws9RIeUeASUzX
whlnUNm3nvsxbAd7SivArnXwvd05zMLGfYVm005iJFc/iKkP+IFoP3EHt7QjrUkm
QupgU9yHQVQ4Gg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:57 2026 by rpki-client