This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
File:                     eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft (raw, json)
Hash identifier:          00HwgMRX218j6OC6Ql3kc3UpeLDjMPtyUKOJjArBI3Q=
Subject key identifier:   D9:5D:B6:EA:E8:3E:6B:2E:0F:65:44:55:AF:2D:11:45:61:BE:D4:D2
Authority key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D
Certificate issuer:       /CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
Certificate serial:       019C4390C22EC017D101E602895611DD15EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
Manifest number:          0474
Signing time:             Mon 09 Feb 2026 18:01:26 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:26 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:26 +0000
Files and hashes:         1: eXBL0IY8mmgnQLW1xI74swf6S6A.roa (hash: HsmXrftQWUw6hDHYWb3a78tIwnu4xuqq368XPLs6+1E=)
                          2: eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl (hash: jgUcMtxg0RotSihqrgPwd5ezePoMHwrtAdP0hMI/qkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:c2:2e:c0:17:d1:01:e6:02:89:56:11:dd:15:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
        Validity
            Not Before: Feb  9 18:01:26 2026 GMT
            Not After : Feb 10 18:01:26 2026 GMT
        Subject: CN=d95db6eae83e6b2e0f654455af2d114561bed4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:7d:d2:06:19:d2:3e:31:15:91:e1:55:03:
                    c1:07:c9:8f:38:41:c3:5d:54:23:11:b8:17:e6:2c:
                    ce:d3:b7:b0:be:79:85:45:96:af:b7:b0:9d:89:03:
                    53:bf:6e:90:af:f2:b3:5b:e8:69:8b:ed:e2:18:41:
                    69:46:80:db:6d:8b:f8:d0:3c:14:1d:b8:92:fd:51:
                    52:3a:90:8e:e5:d0:a2:88:b7:38:f4:a4:ad:ab:eb:
                    9a:ce:ee:bd:29:25:98:3a:6b:42:45:80:d4:16:6c:
                    83:9b:73:e4:da:5d:9b:02:ce:ec:04:61:0a:bd:b2:
                    e8:fa:89:71:55:bf:cd:58:fa:c2:2a:45:57:9b:43:
                    de:2f:37:5b:fe:a3:5d:9f:4b:73:2e:f3:5e:5c:35:
                    4f:d6:86:1b:bc:35:40:c3:99:ef:43:63:96:cd:37:
                    d3:b5:0a:4a:b2:0b:7d:ca:a5:69:fe:01:91:33:c2:
                    e5:94:4c:b0:a7:73:3d:d3:3d:bc:20:92:ec:50:54:
                    77:c2:ee:07:29:e0:78:71:af:92:28:70:a5:e3:b3:
                    2d:4c:0d:f5:46:c6:87:82:3c:e0:84:39:83:09:cd:
                    7f:db:59:54:5e:e8:a1:98:7e:94:af:2f:1d:57:77:
                    04:68:b0:b9:d4:18:4e:3e:66:70:46:c9:b4:db:a2:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5D:B6:EA:E8:3E:6B:2E:0F:65:44:55:AF:2D:11:45:61:BE:D4:D2
            X509v3 Authority Key Identifier:
                keyid:7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:4d:39:2c:c8:cc:56:43:c8:74:55:84:50:be:34:69:4f:
         d7:27:c4:96:f9:65:c3:31:62:15:d2:93:d7:b3:f5:44:a0:8e:
         19:fa:5b:36:5d:54:a3:01:46:8c:a5:5b:2e:01:d1:e4:84:57:
         99:2d:6e:cd:7f:8f:26:a8:9d:68:34:c6:03:8c:87:d3:15:f2:
         f1:23:7b:de:35:82:06:44:1d:13:97:2a:9a:81:f0:fc:36:56:
         8b:e3:b4:71:fa:b4:36:52:42:1d:30:94:07:95:94:39:3e:8d:
         eb:81:da:7f:3e:af:a3:ed:a9:6e:a2:27:7b:f8:4b:71:ce:4f:
         43:80:34:26:25:d0:64:5f:1e:4f:f2:cb:73:be:1a:44:40:d2:
         7c:41:fc:1e:9e:33:b0:51:e1:a4:49:56:4f:e3:8c:d0:3d:9b:
         42:88:fd:2f:86:1e:df:55:31:3c:17:c1:35:ac:42:a8:07:bb:
         3f:24:83:a7:b7:5b:2e:af:12:99:3b:5c:3c:be:22:cc:62:53:
         90:70:fc:dc:af:8f:43:67:25:32:e5:0d:7c:8c:79:63:1b:94:
         c8:69:e8:79:3a:af:94:ce:7c:53:37:21:5d:c6:04:40:7a:6c:
         94:a5:85:a4:56:7d:ee:16:3c:ca:cd:f6:1f:cc:0b:d3:52:a9:
         bc:4d:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:45 2026 by rpki-client