This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          f1HJm8tF1UAvBteHDsFRUTD8ucspG2J96qd5Pzm3e1I=
Subject key identifier:   F7:1E:3A:AF:C3:01:B9:A8:C0:7E:1A:14:AB:75:7C:BC:85:9E:64:80
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019C42B422EBF4EFE0F9FB26D42F5F148798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          15F6
Signing time:             Mon 09 Feb 2026 14:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:27 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: MAxGGhSPfNknFOR5qePjsiaoczjaKSAjqIlGh0/oUKk=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:22:eb:f4:ef:e0:f9:fb:26:d4:2f:5f:14:87:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Feb  9 14:00:27 2026 GMT
            Not After : Feb 10 14:00:27 2026 GMT
        Subject: CN=f71e3aafc301b9a8c07e1a14ab757cbc859e6480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:1a:8b:83:1c:8c:86:ee:5a:bf:cf:2e:b4:
                    a1:ab:c0:b5:30:a8:1b:58:ee:20:c9:31:c1:f7:1a:
                    16:ee:a4:a2:e8:16:fd:60:da:78:9e:d8:5e:e8:3b:
                    62:15:9f:9b:dc:52:6a:0a:e2:32:57:b4:de:c5:c4:
                    4a:5b:a7:d2:04:81:d8:d0:bc:73:07:c2:6b:1e:5e:
                    f7:c2:3d:28:f0:bb:f9:fc:46:50:9f:78:83:d6:5f:
                    4c:c2:5c:c9:f9:c8:a9:74:8d:6d:04:9c:4a:4d:d3:
                    73:a4:6a:06:59:2d:e3:18:f3:df:40:5b:70:57:44:
                    f9:57:1e:17:f0:c2:40:0a:5b:02:ff:e5:86:7e:69:
                    de:a3:a0:29:f9:74:f9:ee:81:01:38:c1:18:8f:27:
                    15:f2:be:60:52:c8:3c:08:4a:e5:0b:04:84:a0:40:
                    bf:9e:5b:28:85:47:55:81:ef:95:db:f4:d7:e5:4a:
                    0f:cb:58:9d:93:0d:c4:14:f6:13:62:d2:26:e0:f2:
                    bf:ed:e4:0e:d6:37:55:f6:04:1a:5a:b9:67:1c:d3:
                    c0:e4:33:c6:47:8e:c3:cf:dc:49:f5:5a:81:b5:f0:
                    9a:a7:aa:e9:6d:80:e3:15:e4:cd:da:d3:39:d9:6f:
                    d7:d9:f8:27:a7:89:7d:e7:2e:25:f9:ed:56:fb:57:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1E:3A:AF:C3:01:B9:A8:C0:7E:1A:14:AB:75:7C:BC:85:9E:64:80
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:5a:fc:7a:2e:31:dc:6a:2f:4a:e3:67:42:62:0d:27:46:
         80:cf:39:36:b2:b0:c1:ff:13:9b:32:c2:63:7d:28:3c:15:55:
         29:03:22:23:9e:cc:f2:4b:c4:ea:41:3b:b6:59:b8:cd:11:9d:
         d5:19:54:32:c6:38:76:02:88:ec:04:67:25:4f:9e:d1:06:b7:
         b5:a9:01:3d:70:86:47:8f:2f:75:21:02:8b:9a:45:d4:39:b4:
         63:c5:0d:81:90:44:42:7d:9d:92:b5:ea:ed:58:00:13:c2:30:
         b6:8e:3f:8e:57:cf:91:57:c4:08:5f:96:bf:94:71:4b:46:db:
         6d:b0:61:a6:5a:f1:e5:ca:04:6d:a6:73:6a:95:5c:93:4d:ae:
         7d:50:34:59:40:a5:04:b4:bb:62:5b:75:0f:b2:f4:5d:6d:25:
         3a:9d:b3:54:93:7c:85:ac:db:13:12:e5:0e:48:42:c7:51:08:
         09:15:95:81:00:45:e6:d1:38:4c:da:8d:8e:ba:10:a1:a6:f4:
         cf:61:81:bc:2d:5f:b4:2a:be:35:86:4d:31:ce:48:ef:f8:6e:
         e1:fe:46:8e:ad:15:fe:ac:29:df:a3:26:bd:43:ee:63:f0:0a:
         18:f1:e0:9b:97:2d:1d:8e:28:31:d5:5f:6f:dc:46:e2:d0:8a:
         55:95:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:20 2026 by rpki-client