This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
File:                     7BZ7trBh__pindKoTM99tExxo1E.mft (raw, json)
Hash identifier:          gjKDP5cfMJpdvjljxsENXpg2AOrs4e7N9joo6R/ZFN4=
Subject key identifier:   FE:78:2E:E5:CC:97:81:40:9E:3C:18:9A:CF:02:29:6D:D8:D1:0F:3D
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       019C126CD88BE9BAD9AC6B2B5C876B29A3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
Manifest number:          17F8
Signing time:             Sat 31 Jan 2026 05:00:49 +0000
Manifest this update:     Sat 31 Jan 2026 05:00:49 +0000
Manifest next update:     Sun 01 Feb 2026 05:00:49 +0000
Files and hashes:         1: 7BZ7trBh__pindKoTM99tExxo1E.crl (hash: lWju6bt7y77xt4rlpqcaJ8TN7dzzY1qf4JADunKi1k4=)
                          2: TE-zkB1WXTHRYrdiQgGmk6uSVdQ.roa (hash: eRgAHRTvSReUmr1Kc9vOCDCB9vNQ0s5lkzXZyGteC2Q=)
                          3: cE9z_vi7aIN7R1MRmejkUdogCNM.roa (hash: ErypDac6PMXFFeqxfqyYQBUhuGPwndIrMS3m77VeKJg=)
                          4: e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa (hash: 5BeMkSTwe8lYH/6FFSl6JdJloHvDA2cuHQFyNcB8z8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Feb 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:12:6c:d8:8b:e9:ba:d9:ac:6b:2b:5c:87:6b:29:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Jan 31 05:00:49 2026 GMT
            Not After : Feb  1 05:00:49 2026 GMT
        Subject: CN=fe782ee5cc9781409e3c189acf02296dd8d10f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:fa:40:c4:24:5f:14:a4:f7:a4:6f:ff:62:
                    80:f0:e0:54:ad:a8:d4:6f:50:bc:74:df:47:82:e3:
                    33:56:8d:55:ff:65:ba:33:25:9a:1e:19:bb:76:91:
                    93:21:81:27:c0:29:ff:05:6c:d0:ce:d2:a8:32:d8:
                    8e:f2:f8:d1:69:17:d3:30:3d:3d:a9:b9:5b:9c:5b:
                    d0:08:db:9c:af:85:3d:78:bd:b5:d9:9f:32:13:8b:
                    60:12:9e:1d:bc:9f:c8:6d:e3:af:04:e2:d9:2e:85:
                    72:4a:72:05:6a:b7:b9:77:4f:8a:22:13:97:fd:f3:
                    3f:2b:41:b4:42:1c:c8:76:a1:c1:ca:1b:56:b9:e6:
                    59:1d:04:fa:4d:eb:6b:ad:98:51:b9:f5:5b:48:c6:
                    96:34:1d:f9:33:a2:fd:48:cb:6d:0b:72:e4:f1:fa:
                    cf:e6:af:6e:3f:ed:f2:38:0b:d0:9d:48:59:f1:e3:
                    9d:26:40:0a:7b:44:1d:89:3a:48:14:bd:c9:05:b4:
                    0d:0a:44:4d:7b:aa:13:ab:c2:2c:75:bc:00:6a:38:
                    c7:3a:02:95:40:d1:cc:66:cb:e5:62:00:5f:7a:5c:
                    5b:c8:36:8e:96:df:56:98:08:54:d8:64:e8:2e:94:
                    b2:59:cb:62:93:c3:b0:a8:68:40:e8:70:3c:e9:d1:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:2E:E5:CC:97:81:40:9E:3C:18:9A:CF:02:29:6D:D8:D1:0F:3D
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:de:85:07:ef:c7:e5:cb:fe:9d:db:51:f0:b4:34:d7:42:d3:
         7a:ca:e2:20:71:69:b4:d3:52:fc:74:6e:4f:f2:55:62:c6:73:
         dc:7c:17:91:5a:22:44:b0:5f:07:81:6c:b5:25:56:e0:02:27:
         2e:af:cc:de:ad:49:b9:8f:98:2b:c2:b6:9d:16:50:df:d7:00:
         fa:ef:22:45:66:40:83:d0:6e:df:7d:94:17:08:7a:24:b7:a6:
         11:a9:2f:b5:53:a0:fa:de:65:1f:c6:be:b9:d9:08:46:53:35:
         6f:b2:cc:ca:48:65:22:40:f6:0b:fa:9d:4d:48:f1:6c:57:04:
         04:9c:2f:11:7a:18:b6:00:3f:07:55:9e:ee:53:ab:fe:04:c9:
         48:2c:ea:7d:0a:76:a5:56:55:83:0e:ad:91:8d:a7:cd:4b:c3:
         39:5e:09:b5:22:74:68:d9:82:eb:29:eb:68:7e:e5:38:88:c5:
         3a:e4:08:e8:45:22:fe:0a:16:82:fa:ef:45:61:4f:08:f7:59:
         43:d0:4b:98:24:1d:4e:56:b4:94:89:1b:50:48:b8:43:99:38:
         68:31:d0:71:4d:56:ac:b4:f7:9e:65:16:d2:99:dc:c8:cd:18:
         63:cb:d3:73:ba:68:1c:ea:b5:3d:03:91:a8:a5:d3:33:6b:79:
         bb:0a:c9:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwSbNiL6brZrGsrXIdrKaO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTY3YmI2YjA2MWZmZmE2MjlkZDJhODRjY2Y3ZGI0NGM3
MWEzNTEwHhcNMjYwMTMxMDUwMDQ5WhcNMjYwMjAxMDUwMDQ5WjAzMTEwLwYDVQQD
EyhmZTc4MmVlNWNjOTc4MTQwOWUzYzE4OWFjZjAyMjk2ZGQ4ZDEwZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9r6QMQkXxSk96Rv/2KA8OBUrajU
b1C8dN9HguMzVo1V/2W6MyWaHhm7dpGTIYEnwCn/BWzQztKoMtiO8vjRaRfTMD09
qblbnFvQCNucr4U9eL212Z8yE4tgEp4dvJ/IbeOvBOLZLoVySnIFare5d0+KIhOX
/fM/K0G0QhzIdqHByhtWueZZHQT6TetrrZhRufVbSMaWNB35M6L9SMttC3Lk8frP
5q9uP+3yOAvQnUhZ8eOdJkAKe0QdiTpIFL3JBbQNCkRNe6oTq8IsdbwAajjHOgKV
QNHMZsvlYgBfelxbyDaOlt9WmAhU2GToLpSyWctik8OwqGhA6HA86dE6UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP54LuXMl4FAnjwYms8CKW3Y0Q89MB8GA1UdIwQY
MBaAFOwWe7awYf/6Yp3SqEzPfbRMcaNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjct
YzY1NWFkNTk0MTkzLzEvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjctYzY1NWFkNTk0MTkz
LzEvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACd6FB+/H
5cv+ndtR8LQ010LTesriIHFptNNS/HRuT/JVYsZz3HwXkVoiRLBfB4FstSVW4AIn
Lq/M3q1JuY+YK8K2nRZQ39cA+u8iRWZAg9Bu332UFwh6JLemEakvtVOg+t5lH8a+
udkIRlM1b7LMykhlIkD2C/qdTUjxbFcEBJwvEXoYtgA/B1We7lOr/gTJSCzqfQp2
pVZVgw6tkY2nzUvDOV4JtSJ0aNmC6ynraH7lOIjFOuQI6EUi/goWgvrvRWFPCPdZ
Q9BLmCQdTla0lIkbUEi4Q5k4aDHQcU1WrLT3nmUW0pncyM0YY8vTc7poHOq1PQOR
qKXTM2t5uwrJng==
-----END CERTIFICATE-----
Generated at Sat Jan 31 11:55:14 2026 by rpki-client