This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File:                     2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier:          ZwCwqwBSv6TBXVBTHzcu+COuSgunXAc4MZJk7TcZxGw=
Subject key identifier:   97:1A:07:AC:58:BC:38:87:7D:7B:25:50:92:82:0E:01:A5:4B:85:EB
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer:       /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial:       019C427DD67229E1A3B41AAFB50A4F30BA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number:          01E6
Signing time:             Mon 09 Feb 2026 13:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:08 +0000
Files and hashes:         1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: QHEOA6i+73a6efm101iGQXf/7C8IXBUoJ+Yylq+gkAM=)
                          2: 3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa (hash: t4uGj4/wTSstzpMGs7YKMuCqSdG4+YDmS+F49g2Xx/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d6:72:29:e1:a3:b4:1a:af:b5:0a:4f:30:ba:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
        Validity
            Not Before: Feb  9 13:01:08 2026 GMT
            Not After : Feb 10 13:01:08 2026 GMT
        Subject: CN=971a07ac58bc38877d7b255092820e01a54b85eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cc:ea:3e:71:c9:98:a7:84:5e:d3:81:b2:95:
                    9a:f3:e6:0f:42:57:0b:80:8d:22:5f:36:a9:39:62:
                    57:92:16:2f:99:9f:c9:1c:3a:09:73:a1:2e:d8:ae:
                    74:80:cc:57:16:4a:04:45:3a:54:48:57:44:9c:65:
                    0e:88:db:85:6b:b4:9d:b6:b9:ed:62:14:42:1c:33:
                    13:46:af:03:05:d5:6a:ab:c2:48:e1:ca:d9:23:72:
                    6e:22:96:81:c1:d5:de:0f:24:25:18:5d:a0:5b:c3:
                    46:bf:a9:e2:b0:6e:da:d1:80:37:6a:44:2a:c0:09:
                    5d:1f:ba:cc:20:e0:ce:d6:17:3b:e9:6e:ac:3c:56:
                    6c:09:90:62:60:03:c0:ce:2b:8d:c7:82:d0:10:d6:
                    ce:99:9f:c4:20:84:7d:a8:4e:83:68:37:9e:83:ec:
                    25:43:6a:c3:9c:05:01:7e:11:ea:7d:f5:5f:2f:7e:
                    25:27:4d:37:20:2b:00:7e:c8:d6:d7:7c:b5:35:8b:
                    c7:eb:fa:03:05:8e:66:5a:8b:ba:5b:a6:a2:34:65:
                    70:9a:66:c1:d8:cf:85:57:71:21:2d:86:c8:1b:31:
                    28:e8:b9:6a:c2:45:97:1e:df:f3:d3:1f:e8:49:87:
                    4d:cf:98:da:69:7f:37:7b:78:40:17:d3:2d:c4:a2:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:07:AC:58:BC:38:87:7D:7B:25:50:92:82:0E:01:A5:4B:85:EB
            X509v3 Authority Key Identifier:
                keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:c3:e4:70:49:f6:b6:4b:c0:03:13:01:22:13:c1:03:93:
         f4:fe:6b:d9:7e:9d:84:e0:cb:f9:c6:83:3a:9a:6f:0e:e1:6b:
         16:61:a8:fd:9e:70:27:5a:07:02:ac:71:e6:a9:33:cc:31:c4:
         14:7c:8d:92:d9:73:3a:ed:86:5f:6a:be:2f:38:9c:21:6c:5b:
         1a:40:c9:a4:ba:42:8c:cb:ea:38:cd:40:74:02:84:4f:2e:1e:
         7f:f4:bd:1a:ce:e0:c8:b3:84:23:4e:fd:3d:34:e5:fd:f7:c6:
         71:22:b0:14:de:1b:ff:d1:04:0d:32:1b:d7:b6:83:3f:fd:b8:
         81:69:25:08:39:a5:d1:01:ca:30:1a:8b:61:1f:db:8d:a1:c3:
         72:f6:2c:ab:74:48:87:75:5e:c2:8f:cd:04:67:22:23:38:e4:
         bf:4f:eb:1e:5c:93:a4:87:5b:16:20:3d:e9:73:ff:eb:09:f4:
         88:ad:c0:e9:33:ac:ec:5f:df:28:a8:34:ac:81:18:31:ea:d3:
         79:94:42:3e:41:41:c9:08:99:52:cd:23:20:40:70:ed:87:e0:
         9f:f8:19:6c:5a:c8:23:48:be:19:c0:3d:8a:33:dd:6c:85:be:
         28:9e:52:ec:ee:3f:db:c7:f2:1f:46:a5:2e:8c:f5:6d:4a:b2:
         0c:b1:0f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfdZyKeGjtBqvtQpPMLpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NDQyZjJjMmY4OGQ5ZjZlYjJkOWM1ZGYzNjgwYmUyMWVl
N2M5YjMwHhcNMjYwMjA5MTMwMTA4WhcNMjYwMjEwMTMwMTA4WjAzMTEwLwYDVQQD
Eyg5NzFhMDdhYzU4YmMzODg3N2Q3YjI1NTA5MjgyMGUwMWE1NGI4NWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjczqPnHJmKeEXtOBspWa8+YPQlcL
gI0iXzapOWJXkhYvmZ/JHDoJc6Eu2K50gMxXFkoERTpUSFdEnGUOiNuFa7Sdtrnt
YhRCHDMTRq8DBdVqq8JI4crZI3JuIpaBwdXeDyQlGF2gW8NGv6nisG7a0YA3akQq
wAldH7rMIODO1hc76W6sPFZsCZBiYAPAziuNx4LQENbOmZ/EIIR9qE6DaDeeg+wl
Q2rDnAUBfhHqffVfL34lJ003ICsAfsjW13y1NYvH6/oDBY5mWou6W6aiNGVwmmbB
2M+FV3EhLYbIGzEo6LlqwkWXHt/z0x/oSYdNz5jaaX83e3hAF9MtxKKwuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcaB6xYvDiHfXslUJKCDgGlS4XrMB8GA1UdIwQY
MBaAFNhELywviNn26y2cXfNoC+Ie58mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMt
MGY1NDZlMTRlYjFkLzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMtMGY1NDZlMTRlYjFk
LzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwLD5HBJ
9rZLwAMTASITwQOT9P5r2X6dhODL+caDOppvDuFrFmGo/Z5wJ1oHAqxx5qkzzDHE
FHyNktlzOu2GX2q+LzicIWxbGkDJpLpCjMvqOM1AdAKETy4ef/S9Gs7gyLOEI079
PTTl/ffGcSKwFN4b/9EEDTIb17aDP/24gWklCDml0QHKMBqLYR/bjaHDcvYsq3RI
h3Vewo/NBGciIzjkv0/rHlyTpIdbFiA96XP/6wn0iK3A6TOs7F/fKKg0rIEYMerT
eZRCPkFByQiZUs0jIEBw7Yfgn/gZbFrII0i+GcA9ijPdbIW+KJ5S7O4/28fyH0al
Loz1bUqyDLEPSA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:27 2026 by rpki-client