This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File:                     r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier:          mGyXDjwuEGdcPgXy0kiZGQhnJg5QG/QZJxwCHQ168bo=
Subject key identifier:   E2:57:D9:69:09:D6:09:CE:EC:FA:02:61:AF:E7:5A:7F:ED:B8:D5:FE
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       019C42B3EA7219AC87D3E83C4E44452570C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number:          0919
Signing time:             Mon 09 Feb 2026 14:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:12 +0000
Files and hashes:         1: CQ6pDyg1WnAvbUeSKsU2KF2TxFI.roa (hash: JGS4S+jSN2ALWQUeZ10tMWFRs27F1DHl4owC84Ny3Kk=)
                          2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: eX+HVRbp9sA4hsCI0hdLW6toKbwvAy4KRFx92/ujP88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ea:72:19:ac:87:d3:e8:3c:4e:44:45:25:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Feb  9 14:00:12 2026 GMT
            Not After : Feb 10 14:00:12 2026 GMT
        Subject: CN=e257d96909d609ceecfa0261afe75a7fedb8d5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:a9:7b:40:26:70:5c:fe:6e:48:ce:d9:44:
                    36:d4:4a:8d:e4:4b:58:65:21:48:88:aa:f8:eb:fb:
                    57:10:b4:dc:c2:c8:dc:74:01:4b:d3:44:eb:a6:d3:
                    2c:8e:b1:ea:f6:7e:05:e8:43:32:7e:4c:a1:d1:38:
                    bd:a1:30:36:ab:92:37:6d:f5:3f:84:a8:e9:f0:d5:
                    52:33:2b:c9:5b:a3:8d:24:d5:7a:02:03:b1:c3:f0:
                    ce:49:c8:0d:6a:64:c1:e8:33:fe:f6:ed:04:8e:0c:
                    0b:75:03:9f:b8:d6:15:e6:43:60:12:b0:f2:4f:15:
                    c9:0c:b5:c3:6a:be:06:97:61:bb:3e:56:ac:19:d5:
                    b1:6b:cd:4f:fa:86:68:c9:60:5e:22:34:4b:82:84:
                    2a:9d:73:43:95:46:dd:12:0d:b8:dd:b0:67:d0:b4:
                    cf:b1:2d:7c:bb:f2:ed:b3:07:b0:94:5a:d1:b9:2b:
                    a7:69:57:2b:d4:16:13:a4:a1:ba:51:41:23:17:bd:
                    89:0c:f9:e4:3d:34:38:d7:64:62:77:21:fe:46:fc:
                    d3:bb:7d:8d:2b:b0:46:6f:f9:04:15:6f:ef:12:cd:
                    e2:1e:ff:af:9f:15:00:9c:16:39:f2:74:1e:2d:fb:
                    87:4e:67:29:c1:f4:c3:02:53:c1:f2:6f:49:ab:43:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:57:D9:69:09:D6:09:CE:EC:FA:02:61:AF:E7:5A:7F:ED:B8:D5:FE
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:b2:00:ce:77:c7:fe:bc:28:43:ee:3c:66:e8:a9:dc:e1:
         f9:61:25:6d:0a:f5:a9:b5:14:50:14:dd:61:15:f8:7e:b1:ff:
         ca:69:63:35:36:17:7b:7c:e3:e4:d5:08:52:18:d5:f5:64:63:
         8c:77:e9:b9:c7:52:8c:61:fd:51:ec:f1:67:6a:90:31:a4:1d:
         8d:1a:00:ac:16:bd:f0:c6:7e:4a:55:df:fb:1a:21:18:c2:b4:
         20:74:b4:3e:a9:d5:98:ee:40:9b:ff:06:c5:ef:de:59:9d:66:
         75:87:c4:af:5f:19:d4:26:05:9c:11:01:12:ae:06:51:b9:8f:
         71:97:de:bf:7d:87:da:76:9c:eb:6f:31:34:ca:cc:91:ab:bc:
         12:01:86:21:68:5f:30:9c:02:9f:ec:f8:d1:4f:3a:19:1f:04:
         bf:0d:bd:11:56:26:40:b0:83:90:79:6f:80:dc:1e:aa:4b:a7:
         36:e2:12:71:d9:5c:48:02:15:e7:35:43:25:0d:47:25:26:b2:
         7b:d3:29:e9:ea:cc:04:03:9d:a7:5f:ea:f4:f2:9c:ad:a6:71:
         eb:64:e3:c3:ed:e8:2f:23:2a:82:bc:47:87:f1:59:7e:e8:23:
         04:d8:84:2d:d0:7a:69:02:c5:24:db:06:84:33:2a:97:8d:b2:
         73:eb:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:01 2026 by rpki-client