This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          SfJ5LQHYCSK5zbIXBjoulOKxZ29ROtn7yN/Tpbkn9EY=
Subject key identifier:   C9:A1:B0:29:56:7B:8E:57:81:6F:7D:32:DA:4C:7F:03:55:8A:07:15
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       019C1B0254040A3E99B2DC1F217B9B3C0F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          17FE
Signing time:             Sun 01 Feb 2026 21:01:03 +0000
Manifest this update:     Sun 01 Feb 2026 21:01:03 +0000
Manifest next update:     Mon 02 Feb 2026 21:01:03 +0000
Files and hashes:         1: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 30O9e+X35ij/o9LEbj/FuScT1vFkFVVbe2pYFL+F5fU=)
                          2: k6X22bQfluylqHARD-L5Ikhx1sQ.roa (hash: dFpw1lhqCaKbzT3oHGvLx20tpk89gIoCNO+pACDK98E=)
                          3: sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa (hash: zJTKqjeO7h7C95S8GlHsLV4A/G2qaaF0osBDhe62kaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:02:54:04:0a:3e:99:b2:dc:1f:21:7b:9b:3c:0f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: Feb  1 21:01:03 2026 GMT
            Not After : Feb  2 21:01:03 2026 GMT
        Subject: CN=c9a1b029567b8e57816f7d32da4c7f03558a0715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:f8:f4:8a:d1:9a:e7:7e:f0:13:76:8b:58:
                    53:a5:b8:d8:c6:e0:6d:91:5d:2c:ea:80:8c:5b:63:
                    f9:85:6a:00:07:39:e9:13:f6:1d:a1:87:12:9b:19:
                    fc:97:84:c1:96:1b:f5:97:c3:1e:71:98:49:f7:64:
                    8c:ce:65:4d:4f:af:37:aa:82:2f:3f:ea:b3:a8:7a:
                    ee:de:d3:db:e2:c0:7e:fa:b3:2b:b4:95:46:0f:24:
                    21:fb:1f:cb:b3:ca:de:b4:df:ef:d9:b7:e3:50:11:
                    8c:ac:28:5c:44:78:b5:06:fa:4e:e5:0c:53:2d:c6:
                    8e:ce:24:6d:d9:70:f4:a4:ab:bb:75:38:23:0c:58:
                    6f:d8:ea:e5:c5:1a:d9:c1:97:4e:24:61:4b:c8:ef:
                    ce:61:d4:2c:7d:6c:11:93:45:85:e0:58:67:87:43:
                    4f:e3:1f:1e:49:d7:c0:5a:7b:4a:11:3f:bb:d6:d6:
                    f8:3d:89:1f:44:a3:1f:6d:d3:b3:f7:10:07:09:90:
                    bb:50:65:4a:9a:75:0d:77:35:d7:64:24:6e:a4:0e:
                    44:d6:94:98:af:c9:d6:a7:59:0c:69:44:8a:47:7b:
                    2a:2b:da:63:29:1b:63:84:1e:94:56:2e:61:5b:a3:
                    af:2d:17:b5:e0:9e:bb:86:b4:d7:e2:b8:54:98:8c:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:B0:29:56:7B:8E:57:81:6F:7D:32:DA:4C:7F:03:55:8A:07:15
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:2e:b1:9b:f3:a7:9d:9f:d6:39:6d:e6:a7:90:90:d5:f3:
         c4:0d:76:b8:61:b9:59:3d:7b:71:6c:fc:74:79:fd:da:bc:58:
         b6:0b:86:bd:e3:5e:09:64:87:bf:1c:74:61:95:77:15:8f:d1:
         46:04:fa:e0:5b:2b:6a:57:d5:21:61:9b:fa:81:f9:3d:3e:44:
         54:3b:0d:f9:65:be:95:d3:b7:fc:d2:34:d5:e0:a5:99:46:98:
         14:14:c5:23:d2:ff:9c:77:95:04:d8:94:28:95:df:11:f9:e6:
         1e:87:41:6a:94:87:c7:44:1c:22:f6:2d:ea:7b:d8:4a:ba:55:
         3a:c2:bf:ab:2f:bd:49:7d:84:0f:b5:6d:2e:fd:03:ad:6e:c3:
         aa:67:6b:72:15:d6:f4:24:51:ee:e7:93:7c:81:27:86:3b:e1:
         63:97:27:b3:64:9f:ea:3f:17:db:78:e7:01:98:5e:d5:c5:fd:
         a8:ba:e3:a5:46:d3:dc:20:78:df:2d:fe:e7:7b:44:7c:f9:9f:
         21:4f:9d:4b:20:f2:ba:64:5e:76:c9:fb:b9:6b:53:53:bb:dc:
         e6:b1:6a:46:c1:aa:a7:6e:26:5f:80:17:05:14:44:7d:cb:60:
         64:18:a0:1a:83:bc:a5:94:1b:3b:80:48:14:e4:77:b7:21:14:
         d2:27:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:42 2026 by rpki-client