This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          Z7hrI99xX2QoQq6w9KkSaaVeUXOxyBTkzMfcyQhQxb8=
Subject key identifier:   8D:F6:F3:90:89:9D:25:CA:E1:76:F0:EF:C4:EF:39:CF:40:5B:41:95
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       019C427D72E0E2F5D8619C108E802EBD4545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:43 +0000
Files and hashes:         1: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (hash: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=)
                          2: YddULzzqlHaijBKc45wV-2A9NRg.roa (hash: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=)
                          3: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: OqrUCcDCgytUz48QFs8e5opmJCNgMZECfdVV5vbwaJU=)
                          4: g4nCWXK_03YbprQHpph4RAU5af4.roa (hash: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:72:e0:e2:f5:d8:61:9c:10:8e:80:2e:bd:45:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Feb  9 13:00:43 2026 GMT
            Not After : Feb 10 13:00:43 2026 GMT
        Subject: CN=8df6f390899d25cae176f0efc4ef39cf405b4195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:81:c9:cb:c1:aa:0b:0e:81:47:8b:22:39:
                    82:99:b3:2d:f5:63:a8:4e:e3:89:bd:9b:e4:f6:0e:
                    2b:f7:95:2e:ea:d8:0b:bc:07:5b:ed:7a:c2:a8:af:
                    5d:dd:b1:a6:1c:63:17:46:7e:bb:0c:84:8a:04:33:
                    3a:2f:4b:45:8c:d1:da:73:0a:c5:91:90:61:7e:4b:
                    08:8a:15:65:b7:37:db:a5:9f:59:59:65:07:54:c6:
                    6d:d5:36:43:55:14:4e:5b:0c:a0:9d:28:5d:40:1c:
                    a7:25:c6:65:ab:65:4f:92:ef:31:a7:13:6e:46:0c:
                    b1:8c:a4:7d:89:13:f9:e7:cf:28:3c:57:a5:03:5b:
                    3d:ed:9b:73:e3:da:a3:56:c3:c2:cb:23:72:a0:e9:
                    c0:36:ca:4d:7f:89:a7:ff:a9:34:01:6e:f2:13:5d:
                    50:c8:2a:1f:f9:d3:6b:27:89:22:1c:4d:b4:44:bd:
                    37:b6:8f:58:45:61:22:3a:b6:5f:9d:47:25:30:7b:
                    89:0a:bb:bb:1a:60:a6:29:0d:0c:b6:e9:45:d2:15:
                    5a:ab:24:cf:2d:ac:be:76:3d:30:a2:6f:e0:04:66:
                    a6:28:d6:76:ee:f6:8f:08:78:75:01:63:5c:69:cb:
                    1b:6e:9f:2a:66:cc:4d:7b:f3:5a:03:a1:b8:91:f5:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F6:F3:90:89:9D:25:CA:E1:76:F0:EF:C4:EF:39:CF:40:5B:41:95
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:31:de:72:70:2e:bc:ed:b4:02:c1:ec:aa:4f:a2:34:3b:
         7e:9c:34:f1:90:55:fb:02:c9:b3:58:2a:9e:69:c6:66:41:64:
         33:09:f7:d6:9c:4b:35:43:a7:90:0c:45:d3:61:52:a7:4f:c5:
         d1:c9:a4:83:11:c4:29:f2:06:fe:0e:8d:0e:9d:f2:06:e3:57:
         b4:82:8c:58:01:5b:96:d4:35:0e:69:ab:b9:9e:43:c1:be:ce:
         dc:fb:7a:26:c1:4c:db:90:42:a3:72:32:16:67:52:0c:b2:37:
         84:d6:e9:b5:bd:49:dd:5e:b0:85:21:b3:28:ac:cb:44:ba:d2:
         37:de:48:6b:84:dd:65:1d:86:d2:72:3d:e4:3f:98:08:08:90:
         63:a4:a7:47:56:ba:f1:75:10:b5:4c:a1:eb:bb:2c:fe:0a:98:
         48:94:af:aa:22:7a:9c:5f:e7:60:fa:0f:57:31:a9:fa:64:2d:
         5f:eb:f7:de:ea:48:29:83:93:c0:25:f4:99:81:f5:de:f8:3e:
         25:6d:de:71:0b:ad:24:db:fe:ad:1e:1c:e7:13:7e:b9:84:19:
         fc:ea:c3:53:9b:84:3c:c0:76:83:ea:59:11:45:a9:49:97:45:
         70:f0:12:6d:0c:2d:9e:68:93:45:8a:a1:80:60:65:07:4d:75:
         f3:97:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:46 2026 by rpki-client