This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File:                     eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier:          zdjFV/8JwxMSsfp5L5aJaoXN2DsQsFCpQy5z4SMCoBo=
Subject key identifier:   A0:75:7B:15:AD:89:36:E5:9A:E0:5A:F7:37:CD:B8:9F:EB:2B:F6:15
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer:       /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial:       019C41D8E6C4F5B2C874D837AD54258E9966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number:          0EF8
Signing time:             Mon 09 Feb 2026 10:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:59 +0000
Files and hashes:         1: GQ-SbgfC8MIeM9gcufA_-1qzAXc.roa (hash: KV1JNt34o+H7DaSa9GDJPYnWz3s55bQ0FiJGe7uGgr0=)
                          2: Kx0VUGAT79oWA-cyRKWJVf52D4Y.roa (hash: 9vDSqAA9sKbg10kGGfffYdHsPHCsPjZ37Jvu2FldDuU=)
                          3: N8W6aW0riM_3M90H1ZPp8kp3yHQ.roa (hash: wUxFvKdtoCc4uBF7RszaarkR6hmxjfvZWGVXKaQQ8Q4=)
                          4: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: X20cS/D+VkYpZ6JN4JempUV7f1mkpaJOntGV1H5rgIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e6:c4:f5:b2:c8:74:d8:37:ad:54:25:8e:99:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
        Validity
            Not Before: Feb  9 10:00:59 2026 GMT
            Not After : Feb 10 10:00:59 2026 GMT
        Subject: CN=a0757b15ad8936e59ae05af737cdb89feb2bf615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:60:29:8b:30:35:ec:b0:49:c7:e1:78:5c:
                    fe:c4:e9:6b:8a:92:22:cd:a0:7c:e3:c8:87:13:0d:
                    de:c6:54:c3:10:80:ee:4c:25:4b:de:82:04:b7:7c:
                    cb:4a:f9:f6:b4:b0:d5:60:d9:c8:1e:62:b3:16:09:
                    54:32:ab:c0:de:be:26:4b:2d:c9:1e:dd:99:61:0b:
                    95:38:14:ad:83:8b:00:af:65:1a:52:60:05:ee:d0:
                    1f:9a:8e:fb:7c:f3:37:3c:71:1a:8c:c5:85:ff:30:
                    bc:58:db:ab:0a:eb:dc:d4:98:f6:1c:a2:ea:aa:7a:
                    5c:a3:b4:29:14:ee:ae:31:11:86:94:e5:f6:8e:f5:
                    e4:ac:5c:a2:e5:81:e2:1e:7d:2f:7c:b5:ec:4f:ac:
                    cb:07:cd:7e:ac:93:b2:17:bf:88:e2:2d:e8:a6:39:
                    f3:c1:18:f1:15:0a:dc:41:5d:91:38:1e:a9:cb:d1:
                    9f:21:03:7d:d8:fe:4e:20:fe:5a:c0:1f:3d:58:20:
                    2b:00:5e:59:ce:ea:2f:56:86:7e:63:10:25:6f:33:
                    c4:72:0b:c9:6b:16:83:ab:7a:3f:f6:ec:ea:4e:e3:
                    56:49:a4:fb:f3:13:1d:fe:b8:28:94:ca:1a:b5:6c:
                    cb:b5:0c:6c:46:49:c8:5d:2e:00:97:1a:b2:a4:c1:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:75:7B:15:AD:89:36:E5:9A:E0:5A:F7:37:CD:B8:9F:EB:2B:F6:15
            X509v3 Authority Key Identifier:
                keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:11:8a:67:94:cb:3a:15:7d:8b:61:8f:95:8d:0e:ac:11:
         31:cd:1a:cf:8b:40:2d:c2:6b:29:e9:2c:1b:b9:dd:18:66:45:
         59:5f:66:39:1b:22:40:7d:27:49:f9:7b:47:7f:58:45:41:a0:
         1a:db:ee:37:c8:89:68:9c:a6:68:9f:cf:f5:d6:1b:c2:d4:b4:
         fc:be:5c:6c:f1:62:d3:ee:35:85:0e:de:39:80:ad:cd:d8:c5:
         cd:f9:d3:73:c5:5d:74:8f:17:04:36:a1:4b:03:53:70:ad:10:
         48:64:69:bb:62:d9:ea:45:65:6d:a4:63:03:e9:64:ca:b2:c5:
         63:48:21:6e:a1:f8:7f:30:17:dc:b6:18:39:af:19:a0:46:58:
         e2:34:3e:12:42:d5:83:23:d5:48:d0:d5:8c:b7:fd:41:f0:33:
         e7:37:65:60:cf:2b:2c:8c:90:9a:a0:c1:1b:8b:8b:d9:84:e2:
         57:60:25:7e:3d:88:a6:05:7b:34:07:77:b7:05:fe:56:b2:21:
         4b:99:59:b1:d8:b3:64:02:3a:e4:4a:a3:7c:8b:8e:89:6c:22:
         5d:36:d7:c3:97:f2:cd:d0:14:e3:fd:a4:81:2c:c1:9c:fd:87:
         c8:73:2a:ee:52:23:13:0c:8d:14:0d:bf:1e:92:08:60:81:c9:
         e4:46:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:47 2026 by rpki-client