This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File:                     E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier:          Z2rNF8CdGhrKQV4qWSeuu6TefwGK/fK+FSE1iGFjPrY=
Subject key identifier:   10:D0:23:F1:AB:CF:6E:38:4C:0D:6A:31:64:7C:EA:1E:85:CE:95:9D
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer:       /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial:       019C42EB71385F7DC8E272FACA8DA62DEB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:51 +0000
Files and hashes:         1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: 49F3h91Djzq/KMLBfmhcKBx+3ylcRTZPmkM6bMGRsgw=)
                          2: Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa (hash: riBhCRYBSK/hU06s7Utiuh3DGPbPNRVt2NaABQjgoC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:71:38:5f:7d:c8:e2:72:fa:ca:8d:a6:2d:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
        Validity
            Not Before: Feb  9 15:00:51 2026 GMT
            Not After : Feb 10 15:00:51 2026 GMT
        Subject: CN=10d023f1abcf6e384c0d6a31647cea1e85ce959d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:94:cb:a5:8f:7d:ef:eb:f7:7d:ea:f8:d3:
                    1d:59:be:58:3f:51:2a:db:af:7e:7d:b1:5c:f8:c2:
                    cf:b7:5e:12:0f:2d:e0:c0:ed:f3:30:15:de:0f:73:
                    62:2a:da:4b:97:86:c1:21:e3:29:cf:54:53:98:3b:
                    7c:7a:75:9f:a6:c7:4b:c7:77:6b:b4:23:b9:7c:6f:
                    a4:fe:dd:d7:17:1b:8d:fb:c3:fa:d4:25:e3:ac:30:
                    78:5a:a9:64:80:43:17:35:33:cd:b7:e6:74:e3:08:
                    98:6a:97:5a:c2:49:99:f7:41:2e:c6:9b:5e:3d:d8:
                    49:2f:8c:a6:0b:97:8f:47:e8:6b:03:7f:39:7f:5d:
                    f7:06:73:9a:7d:32:40:fc:68:76:52:9b:fd:41:c6:
                    c1:19:e1:3f:e1:ce:9d:6f:70:0e:c1:a7:02:37:ef:
                    48:d7:00:aa:5d:1c:49:cd:3e:75:f7:f2:05:73:53:
                    87:0d:57:dd:46:1f:b6:fe:b7:28:fd:39:4e:ca:d7:
                    80:c5:3c:9a:51:b9:31:a7:82:fb:c8:25:3c:6f:fb:
                    c4:d1:5c:78:05:fc:01:a9:5e:f9:21:4f:b1:26:40:
                    d7:4b:6d:a3:64:fe:c8:18:ce:54:b4:b5:1a:84:27:
                    a1:57:d3:5b:62:df:4e:11:f2:9b:06:f6:66:64:18:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D0:23:F1:AB:CF:6E:38:4C:0D:6A:31:64:7C:EA:1E:85:CE:95:9D
            X509v3 Authority Key Identifier:
                keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:77:84:b6:4a:7c:9c:cd:35:f2:b1:5c:4d:8c:21:d8:9e:
         ce:ce:88:33:90:2d:f7:8b:86:05:0f:8f:7f:65:11:6f:88:84:
         c6:f3:79:ba:2d:e6:5a:7f:a1:66:a9:70:89:68:6d:1f:fa:53:
         83:7b:3c:33:64:6e:26:3d:81:30:be:e6:ee:10:5b:a0:91:9e:
         50:5f:d2:72:1f:80:97:4a:ec:01:d4:9e:99:41:9f:f4:de:05:
         9f:4c:51:1f:dc:e9:67:bb:28:cd:bd:05:06:13:38:33:27:74:
         d0:06:29:8c:64:14:17:3f:f2:4c:ba:08:1e:93:52:d4:db:e5:
         a9:fe:74:db:a3:0a:8d:3e:77:e4:56:1d:ff:66:37:e1:55:f8:
         79:f0:a4:da:64:3a:1b:2c:8f:09:e1:6d:50:42:3e:51:d7:22:
         e2:ad:94:97:59:73:9b:02:a7:c1:5b:9a:72:8b:cf:09:ec:82:
         fc:4f:e3:b1:88:2c:6e:6f:36:cb:a1:89:7e:27:b5:31:03:b0:
         a7:50:63:e5:12:2f:ac:64:42:0c:09:a1:f6:a7:77:2f:72:86:
         25:8d:98:d8:d7:7d:1e:7b:b8:fb:c4:8a:6d:51:0d:3e:59:1e:
         0c:1a:63:65:6d:09:1b:93:17:9e:a5:d9:0b:db:31:6b:43:be:
         31:a0:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:53 2026 by rpki-client