This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File:                     EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier:          QfyjVCFEoN0Rcjxi6b00b2DyYW01cvt0ZrkINm8gIHg=
Subject key identifier:   EA:03:E3:55:24:00:10:4E:BD:36:25:B7:ED:E5:73:CF:84:AE:69:FB
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       019C420F59C70866799B29E237449C1E813E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number:          1376
Signing time:             Mon 09 Feb 2026 11:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:28 +0000
Files and hashes:         1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: oCoAWFoZ/PO14f7OLb8IyunMoW3/O6Nyovk5LJ9mvxA=)
                          2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:59:c7:08:66:79:9b:29:e2:37:44:9c:1e:81:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: Feb  9 11:00:28 2026 GMT
            Not After : Feb 10 11:00:28 2026 GMT
        Subject: CN=ea03e3552400104ebd3625b7ede573cf84ae69fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:60:57:84:0a:24:83:5e:a3:00:cc:08:ed:
                    43:ae:ad:70:ba:16:00:b3:72:e2:65:be:5d:04:7a:
                    08:de:74:6e:74:2c:83:12:bf:ea:cb:74:78:b6:02:
                    b4:14:3e:9a:6b:92:0f:43:fd:75:26:cb:87:a7:6f:
                    e5:af:b1:7b:ea:dd:4c:5e:8b:a8:c8:01:09:d1:5e:
                    c9:91:96:12:2b:92:55:47:13:c6:34:13:7c:80:a2:
                    3b:e2:f2:0b:59:5c:7b:58:5f:11:3c:48:fe:46:67:
                    8f:97:8e:6b:3a:51:a3:5f:14:72:a3:b1:29:57:ff:
                    04:b5:bf:6c:2f:30:08:cf:22:00:14:c2:1a:b5:b6:
                    b4:21:ca:9e:dd:b0:db:0a:36:f7:49:b6:c7:bf:2e:
                    b8:45:45:23:8d:ab:b7:b9:fb:a2:43:c7:a4:95:72:
                    34:b0:e2:59:f2:cf:7d:29:ab:2f:16:49:45:76:dc:
                    3e:74:a7:1f:70:03:3c:76:36:29:17:ed:e7:d9:a6:
                    1c:bc:38:12:d0:75:33:69:ce:f4:79:49:0f:7f:72:
                    07:31:da:28:1e:7d:d6:07:a0:89:13:1e:6a:29:ec:
                    50:38:4f:76:15:cc:88:ed:0b:09:ac:bc:c3:d8:66:
                    c6:ad:51:1b:23:eb:bd:2b:71:4e:2a:f6:ff:6a:5d:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:E3:55:24:00:10:4E:BD:36:25:B7:ED:E5:73:CF:84:AE:69:FB
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2d:dd:39:8d:bc:4a:19:69:28:3f:eb:d7:d9:41:5b:88:89:
         50:ce:84:c8:ef:f0:c6:58:21:16:45:47:85:76:50:72:94:e6:
         02:77:79:d2:08:f5:27:13:d8:84:5f:ea:8b:53:29:5b:fd:0f:
         bf:68:cd:11:0f:de:f4:dc:1b:00:0b:ac:32:36:c2:a8:50:e4:
         ae:74:6d:ff:96:06:90:7d:75:3e:e6:ad:78:5f:50:21:89:92:
         7a:0d:26:1d:4c:78:bb:1b:26:e4:66:d3:7e:04:69:01:78:1b:
         39:5a:c5:6d:70:15:86:5b:4d:57:47:1f:b7:52:94:62:a8:c9:
         60:c7:36:fb:d1:a8:80:4a:a4:a4:2f:03:50:5f:9c:d5:1b:1b:
         45:f0:2d:b5:f6:14:36:5b:17:2d:07:1e:8b:4d:e0:95:80:cb:
         4d:47:51:d5:e4:79:14:89:ef:f8:d8:db:81:10:19:76:cb:9e:
         b5:ab:92:92:6e:6a:b3:2d:b2:58:80:4e:de:16:db:ec:a2:3e:
         a0:e1:78:39:61:8b:44:69:62:4b:a0:ba:b9:3a:fe:e0:73:64:
         77:15:d9:23:c0:57:df:9d:48:63:3c:f0:07:d6:97:b5:86:0f:
         89:89:18:18:0c:a3:02:5a:9d:f0:b9:81:77:98:1f:f6:7d:da:
         6d:15:b8:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD1nHCGZ5myniN0ScHoE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj
YjY2MDkwHhcNMjYwMjA5MTEwMDI4WhcNMjYwMjEwMTEwMDI4WjAzMTEwLwYDVQQD
EyhlYTAzZTM1NTI0MDAxMDRlYmQzNjI1YjdlZGU1NzNjZjg0YWU2OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTtgV4QKJINeowDMCO1Drq1wuhYA
s3LiZb5dBHoI3nRudCyDEr/qy3R4tgK0FD6aa5IPQ/11JsuHp2/lr7F76t1MXouo
yAEJ0V7JkZYSK5JVRxPGNBN8gKI74vILWVx7WF8RPEj+RmePl45rOlGjXxRyo7Ep
V/8Etb9sLzAIzyIAFMIatba0Icqe3bDbCjb3SbbHvy64RUUjjau3ufuiQ8eklXI0
sOJZ8s99KasvFklFdtw+dKcfcAM8djYpF+3n2aYcvDgS0HUzac70eUkPf3IHMdoo
Hn3WB6CJEx5qKexQOE92FcyI7QsJrLzD2GbGrVEbI+u9K3FOKvb/al1eBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoD41UkABBOvTYlt+3lc8+Ermn7MB8GA1UdIwQY
MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt
MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw
LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxS3dOY28
ShlpKD/r19lBW4iJUM6EyO/wxlghFkVHhXZQcpTmAnd50gj1JxPYhF/qi1MpW/0P
v2jNEQ/e9NwbAAusMjbCqFDkrnRt/5YGkH11PuateF9QIYmSeg0mHUx4uxsm5GbT
fgRpAXgbOVrFbXAVhltNV0cft1KUYqjJYMc2+9GogEqkpC8DUF+c1RsbRfAttfYU
NlsXLQcei03glYDLTUdR1eR5FInv+NjbgRAZdsuetauSkm5qsy2yWIBO3hbb7KI+
oOF4OWGLRGliS6C6uTr+4HNkdxXZI8BX351IYzzwB9aXtYYPiYkYGAyjAlqd8LmB
d5gf9n3abRW40w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:56 2026 by rpki-client