This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File:                     eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier:          Rqt5HQiFPSUFi8f5Gi65eBj5LfMT6c2n737SREu7Ats=
Subject key identifier:   6B:5A:E6:A5:71:72:F4:07:4F:3C:BC:98:EA:CC:22:06:C9:15:4C:39
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer:       /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial:       019C41D8C85B9AE3CB9B69616373DFBBD7DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number:          0505
Signing time:             Mon 09 Feb 2026 10:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:51 +0000
Files and hashes:         1: 1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa (hash: zpB+4xP9DfxiPXYyO76KcFfYZAOeUtNUuwf832esy4E=)
                          2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: Nhp7I9W9S1Hu6F5NIA7IAO1zABnzU/hHwWyZtE5DFMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c8:5b:9a:e3:cb:9b:69:61:63:73:df:bb:d7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
        Validity
            Not Before: Feb  9 10:00:51 2026 GMT
            Not After : Feb 10 10:00:51 2026 GMT
        Subject: CN=6b5ae6a57172f4074f3cbc98eacc2206c9154c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:65:e7:ee:f4:a3:eb:08:ba:50:3f:2b:fa:64:
                    92:58:91:21:e4:cb:57:d8:aa:59:4c:c9:63:4b:56:
                    22:a0:4a:8e:c6:32:97:30:de:b1:e4:9f:79:c6:c6:
                    1a:75:4b:39:2d:6c:40:4d:d8:47:74:41:ed:35:fd:
                    a3:b7:93:10:e4:fc:2e:27:ab:f5:54:e0:53:22:26:
                    82:ec:98:e8:56:14:cd:0c:4b:22:d5:f7:ec:00:0a:
                    e0:fb:d9:3c:e0:67:ee:e5:88:ef:29:ae:1a:fb:f1:
                    40:f8:67:e7:7c:45:8f:de:9f:47:9e:5a:c1:b0:ee:
                    4b:a8:f5:f7:f8:98:55:26:e8:01:93:f9:dd:2c:5d:
                    ab:70:ba:80:95:35:12:67:e3:d4:33:51:1a:71:b4:
                    51:20:7c:1e:94:1f:2e:db:ff:78:7e:ec:a5:ff:13:
                    01:ee:09:27:3c:7b:42:b1:d8:13:65:17:e7:5e:96:
                    95:92:05:9c:26:2f:93:9a:9a:ed:d7:c5:85:96:eb:
                    01:e5:08:08:5f:28:c4:6b:6f:75:6b:00:fb:26:ce:
                    1d:1a:d3:fe:e2:9a:34:b2:98:1f:6e:ca:2a:8f:45:
                    30:7f:8f:41:1d:07:40:27:2e:ff:a5:74:05:4f:3e:
                    11:17:c8:e0:c6:80:44:65:17:63:7b:8c:99:55:9e:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:E6:A5:71:72:F4:07:4F:3C:BC:98:EA:CC:22:06:C9:15:4C:39
            X509v3 Authority Key Identifier:
                keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:50:e0:62:3b:12:b3:dc:41:ac:86:38:e6:d0:b5:b4:6d:69:
         c1:66:66:89:57:1c:41:62:99:c3:f9:9c:16:72:89:d2:07:71:
         34:27:0f:2c:16:d2:46:16:88:5e:f7:14:a1:d4:9b:33:6c:64:
         23:dd:1d:d6:8f:e9:5e:a1:fd:9f:b3:08:fb:93:7d:6e:48:db:
         b3:36:93:45:65:0b:6a:c4:c9:e0:8d:04:54:43:df:8d:49:01:
         fe:d8:ff:03:02:9b:33:dc:3d:99:ce:99:ca:d6:00:bf:52:7b:
         35:9a:7a:67:94:22:3d:9b:cf:f8:fc:e0:3a:3b:df:e5:5e:5e:
         2b:ef:40:43:d7:ca:fe:6a:d6:7a:ea:7a:a1:5e:97:3d:12:60:
         e4:f8:fe:53:d8:fb:49:b1:b8:9b:a7:08:5a:0e:d6:6c:05:ac:
         6c:c0:e1:e3:dd:1b:e6:c3:e5:c6:2c:9d:7b:74:53:cf:c1:18:
         2e:9f:c7:8f:a4:58:97:0f:26:e5:9a:aa:80:73:ff:b2:d6:51:
         b7:56:13:e7:bc:9e:ce:64:e0:90:97:13:20:89:27:2c:17:2e:
         2e:8f:f7:9d:fd:80:ba:9a:f9:6b:67:c7:e3:ce:7a:ad:5e:4c:
         2f:ca:a5:87:52:6f:46:2d:36:8a:bd:bf:f9:0c:48:b1:a0:98:
         d7:42:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:05 2026 by rpki-client