This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          /H08Cjisq/sKOgS+6oAWS8aa5HWBHc1ftO6tgpK1nP4=
Subject key identifier:   FE:60:AD:30:5A:2F:D2:FC:45:CF:27:90:5C:DC:E0:82:FE:89:A0:DC
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       019C42B488A24ED683A5E8151E6C1F426511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          0DEC
Signing time:             Mon 09 Feb 2026 14:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:53 +0000
Files and hashes:         1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: pZ0PeFFCNWxV5lHrN+4vl8xYPXZaVfiqOhEIk4T/25M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:88:a2:4e:d6:83:a5:e8:15:1e:6c:1f:42:65:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: Feb  9 14:00:53 2026 GMT
            Not After : Feb 10 14:00:53 2026 GMT
        Subject: CN=fe60ad305a2fd2fc45cf27905cdce082fe89a0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:b0:24:a4:2a:fa:f8:a7:86:df:54:29:ca:
                    13:de:7a:78:32:01:b8:96:d6:73:71:e4:65:fa:18:
                    59:ad:c1:ae:b1:86:90:6c:1f:bc:cb:0e:69:cd:09:
                    c5:61:74:8e:2d:84:21:43:15:87:d4:ae:30:90:60:
                    54:27:3c:2e:0a:bb:87:fc:34:11:e2:76:7e:a1:b5:
                    d8:38:06:d8:5f:e5:15:42:46:86:0d:79:9e:62:2d:
                    ac:2d:81:0c:98:76:98:c4:75:8e:8f:9d:80:6f:e7:
                    8b:4f:15:00:4c:80:e7:32:bd:37:2f:03:08:21:67:
                    ce:f5:07:47:ae:f0:15:19:30:1e:a8:21:a3:91:e2:
                    03:62:88:29:cf:7d:d6:18:7f:ba:fb:18:f8:02:db:
                    20:99:7b:dc:38:4e:73:06:d2:41:a6:7d:e4:5f:47:
                    08:7f:8c:2f:ab:12:d7:10:04:19:05:44:24:63:da:
                    75:8e:3d:2f:3f:ee:71:71:95:90:cf:23:ff:ed:71:
                    e9:57:3d:cc:3c:39:ba:99:04:3b:ff:c4:0f:e8:7f:
                    ea:b2:5c:74:31:05:9c:fe:c9:04:3a:78:04:82:1e:
                    b9:5e:32:44:cb:5f:bd:2e:6c:12:84:24:4f:37:5f:
                    48:a3:a2:6a:84:2d:0e:20:8b:c9:7e:01:e7:ee:63:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:AD:30:5A:2F:D2:FC:45:CF:27:90:5C:DC:E0:82:FE:89:A0:DC
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:76:42:1c:34:13:6b:08:c5:36:bf:13:95:c2:33:ed:3d:
         0b:05:11:2f:2c:81:c7:04:98:7f:da:89:ef:f2:26:8f:51:db:
         cb:31:d5:a2:dd:1e:9b:a2:5e:94:e2:0c:3b:ab:04:69:e5:8d:
         85:06:f3:e7:cb:89:52:42:4d:41:39:5f:ba:d5:fd:99:a0:06:
         33:f5:cd:12:ad:1c:bb:85:22:a4:5d:25:bf:af:0c:bd:71:31:
         d3:9b:3e:5d:dc:04:f3:74:73:70:a7:39:6f:fb:76:e1:c3:7c:
         35:6d:55:06:41:90:b9:e9:d4:ff:76:6e:66:d5:94:01:b3:bf:
         94:6f:76:67:2e:8d:99:7c:d9:53:07:03:db:1d:2a:c9:1d:41:
         ff:42:58:aa:8c:98:0e:c2:bb:4a:43:14:69:f0:a6:d6:c4:28:
         82:02:42:5b:c9:93:db:e2:70:02:ab:10:5d:ed:c3:b1:47:03:
         fa:0b:19:96:7b:c4:61:e3:93:1a:2b:b8:9a:42:10:c3:a3:26:
         a1:8d:05:e7:15:a1:b0:4a:95:ba:ef:2a:8e:97:69:5f:c8:41:
         30:6d:47:3f:43:ae:23:c7:5f:af:af:b7:ff:8d:22:d8:47:09:
         50:e7:da:c0:f2:3e:f6:f7:21:bf:2b:72:84:6b:50:81:fe:ca:
         5b:4f:aa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:15 2026 by rpki-client