This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          i15dD3DDwLNdumAk86N72yNbkq1UEx2mCdUsaP5vF0o=
Subject key identifier:   3E:C9:92:06:86:47:93:37:0B:11:7C:70:56:EA:07:4F:E6:39:CF:0F
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       019C427D2FBC614AEA5BFA9B8A95ABE50961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          0E3C
Signing time:             Mon 09 Feb 2026 13:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:26 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: xN+jHpo6Euwk57rJT8SkiZVtDFCtfo4mfRtPjwXw81k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:2f:bc:61:4a:ea:5b:fa:9b:8a:95:ab:e5:09:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Feb  9 13:00:26 2026 GMT
            Not After : Feb 10 13:00:26 2026 GMT
        Subject: CN=3ec99206864793370b117c7056ea074fe639cf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:9e:72:01:56:0b:b5:84:ce:2f:c1:ba:f4:
                    9e:43:50:4d:4b:52:37:26:b6:e8:27:76:d4:14:a8:
                    8d:24:8c:65:79:bb:87:58:0e:4a:16:cc:49:72:9c:
                    e9:95:27:e3:0f:dc:f6:bf:13:4f:b9:e1:a5:3d:b6:
                    fe:be:9c:f2:c9:6c:fc:50:03:31:43:66:df:92:af:
                    b4:39:77:80:e8:79:0e:a3:6c:0c:59:47:b0:de:81:
                    52:ea:44:28:18:56:d0:e9:8b:be:c7:be:26:85:3f:
                    ee:5d:29:39:66:9f:2b:d1:a8:25:ae:f3:01:28:10:
                    ae:11:99:b2:a0:61:ac:31:f3:5d:1a:ba:74:85:ce:
                    cb:ef:31:43:c6:4d:10:c4:b2:af:c7:4d:4a:53:31:
                    67:bb:9c:ab:2a:36:f0:7e:1c:9e:2c:fb:8a:87:0a:
                    d2:23:a1:43:f4:7d:e5:e4:75:f0:9b:c1:b6:77:64:
                    83:fe:e0:b1:18:70:72:5f:cc:82:6f:16:67:2e:00:
                    be:2e:a8:03:d6:f9:96:01:11:e6:c2:3b:98:c0:56:
                    4c:3d:26:d6:f2:9f:73:9a:4a:fb:02:06:da:27:a3:
                    bd:e2:40:61:80:d9:39:83:82:b2:f8:52:d6:b8:da:
                    4b:4b:0c:1b:9d:e4:b2:7d:e9:e4:9d:34:a5:40:8f:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:92:06:86:47:93:37:0B:11:7C:70:56:EA:07:4F:E6:39:CF:0F
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:6f:cd:ea:a6:28:6f:15:33:12:b8:c4:0e:f3:a1:50:21:
         92:2f:9a:30:65:6f:14:ff:91:44:61:61:09:6f:ca:04:3c:8b:
         49:64:bd:f5:46:56:44:64:8c:fe:b1:18:e1:2c:ee:41:a0:46:
         3d:d7:99:8b:c8:bb:b2:38:ca:ee:c3:ee:30:95:c1:03:14:98:
         f6:72:16:9d:4f:16:bc:ec:7f:bb:59:f8:22:78:d1:33:d9:2a:
         2d:12:52:40:b7:71:37:1e:aa:0f:30:1d:80:1b:d6:2d:c9:c3:
         ec:9b:6f:4d:c5:79:8f:48:a8:4d:b7:2a:90:45:ef:e6:29:8a:
         37:db:de:5c:bb:0e:1d:cd:54:4d:24:bf:42:bb:1d:38:13:72:
         cd:23:5b:cb:38:3c:ef:3b:e0:a4:e8:0d:9a:f2:53:a0:c6:af:
         1d:7a:54:bd:70:43:b9:77:17:d4:30:c3:63:1f:fe:cc:fe:3d:
         71:37:e8:4e:c2:eb:71:42:46:65:73:ba:c7:b9:48:98:78:13:
         b8:a5:5f:e5:a6:ad:70:ca:cd:5d:36:4e:b2:8a:c1:cb:a7:22:
         2b:82:f5:ca:11:c5:66:b6:e5:7d:46:b8:f5:c7:91:43:e7:a9:
         18:bd:f3:51:c0:80:ea:bf:4f:4d:67:23:5d:0a:bd:2e:7a:9a:
         db:5f:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:16 2026 by rpki-client