This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File:                     m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier:          1zg+xUJWDoC12G7xDnzv1SFaco6DsYV4xG71X2uWGVc=
Subject key identifier:   02:AE:33:99:B3:61:43:1B:11:D4:34:91:AD:92:9B:CE:35:A1:24:B7
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer:       /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial:       019C427DD783EB8D7FB12CA376FAEC73810E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number:          13A7
Signing time:             Mon 09 Feb 2026 13:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:09 +0000
Files and hashes:         1: 3M-I49wkG4qtVUQtqTf_KmrWNvA.roa (hash: iXuHTvqfqDOn3nAH4lrOfDQTC+bw79xI1HWf+6YE6Ng=)
                          2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: IimeLgdorK2e3PhcJKLXPinHI8ET2kXidzNFQwgqPJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d7:83:eb:8d:7f:b1:2c:a3:76:fa:ec:73:81:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
        Validity
            Not Before: Feb  9 13:01:09 2026 GMT
            Not After : Feb 10 13:01:09 2026 GMT
        Subject: CN=02ae3399b361431b11d43491ad929bce35a124b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:c2:0d:74:93:36:bf:87:94:78:51:e7:03:
                    b1:1b:80:bd:d0:4d:a7:a7:23:e7:f9:ce:d7:68:c8:
                    ff:68:84:f4:0f:15:4b:20:0b:32:c1:7b:dd:c4:b9:
                    68:a9:8a:4c:9e:26:cd:f9:52:11:bd:b2:9f:3d:67:
                    cc:59:a6:19:07:9c:6f:ba:59:c1:96:21:c5:c3:94:
                    3f:ba:92:73:4d:a7:ff:74:af:5b:d8:cc:ac:8d:9d:
                    97:bf:ca:cf:71:19:b2:8c:22:38:b3:29:a0:6e:bc:
                    2d:1b:c8:58:47:ef:81:6a:be:4a:63:a9:54:9b:9f:
                    fb:c5:5a:ed:50:13:ca:69:7d:59:84:cc:8d:d4:09:
                    3b:ca:65:6e:b7:64:b7:56:91:0c:c7:63:77:68:2b:
                    9e:14:e1:b6:1d:d9:7d:f7:fd:7d:87:ea:48:cd:88:
                    17:81:38:62:f7:b8:b0:b4:5b:e8:09:b3:17:79:2f:
                    18:e8:ab:e0:61:6f:00:f0:48:e9:d1:76:78:d3:74:
                    92:aa:06:75:8f:f2:c2:0e:bc:a1:b4:7a:0e:e3:09:
                    ba:27:dc:56:d4:aa:cf:70:b8:27:a8:39:c6:94:27:
                    82:77:3d:08:dd:23:99:5c:67:79:41:cb:3e:1e:dd:
                    7f:ab:5d:6e:b1:c8:d3:9c:88:e0:bb:92:e7:4e:cd:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:33:99:B3:61:43:1B:11:D4:34:91:AD:92:9B:CE:35:A1:24:B7
            X509v3 Authority Key Identifier:
                keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:0e:b8:96:1f:1b:b5:47:70:97:35:d1:5d:d1:82:0a:9a:
         25:37:ac:f2:52:51:64:4d:61:67:c6:16:0e:f7:5e:4c:bf:71:
         1c:c9:32:ba:11:68:e9:28:a6:2c:c1:c4:84:cf:c6:30:65:fc:
         2b:0a:80:fc:14:3d:9a:0b:57:5d:d7:e1:b5:86:56:77:7a:c1:
         b5:4c:5f:92:11:a2:a5:4a:8c:0b:91:1d:85:ce:2a:35:b8:21:
         6f:d6:2c:02:9a:03:02:a6:a7:7d:92:3f:9a:0a:8b:89:71:fc:
         c3:a2:86:64:bd:83:22:bd:0c:bc:f6:d0:1c:21:55:e8:08:c0:
         26:f4:3f:46:5b:48:5e:2b:98:72:85:d8:10:94:18:4e:5f:c1:
         b1:bf:61:bb:86:db:b3:11:10:5f:df:a2:5d:46:16:3c:eb:b9:
         0b:87:f4:f9:01:ac:f7:dc:1d:0b:8a:c8:65:8d:fc:0b:d2:f3:
         04:34:de:7d:39:23:07:2a:13:ca:28:80:86:8b:fd:c8:b3:21:
         7e:a2:52:9b:e5:a1:fd:4d:68:bf:02:87:27:a7:3d:8b:d0:3d:
         e2:a2:28:bf:59:be:6b:01:f7:0c:ca:f1:ed:1c:7a:74:ac:77:
         3e:ae:65:e4:cd:bc:08:ab:c9:46:b2:e6:6f:69:3c:be:c3:8e:
         da:60:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:45 2026 by rpki-client