This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File:                     d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier:          8o+FMwE/kW9xMPAzuSVzxSuWXXm67MSKdhSu01vK77Y=
Subject key identifier:   D6:9C:F6:F9:97:90:7A:AC:60:93:41:EB:96:5D:BE:AE:5B:30:F0:6C
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer:       /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial:       019C42B3EBB05DFFA4E5651486166BEF6D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 14:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:13 +0000
Files and hashes:         1: KH6ejIMdhy_mMZU1YZa7EnoxyY8.roa (hash: Ow6WQnn0i2VGlKGMfx6ZfMd3IxlNgwXn7QWPpo0rp20=)
                          2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: jwfG6Q35QFbi1v90cbHZcIIPqmY5NGBn5SRVjXBsIGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:eb:b0:5d:ff:a4:e5:65:14:86:16:6b:ef:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
        Validity
            Not Before: Feb  9 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2026 GMT
        Subject: CN=d69cf6f997907aac609341eb965dbeae5b30f06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:e0:41:ea:bc:0f:07:23:b7:ba:a0:f3:ae:
                    fa:32:3d:0a:72:04:05:7d:91:61:87:fc:7f:38:7b:
                    6b:e7:f3:75:b6:a6:43:6d:1a:e6:c9:cd:08:27:40:
                    2d:54:0b:38:eb:81:82:78:63:85:df:1b:17:4b:a1:
                    b4:b1:9c:10:e2:5d:1a:dd:58:95:a6:1e:8e:c4:19:
                    b1:af:bd:ac:ae:47:8c:cb:b0:40:8a:f9:1d:96:a7:
                    dd:54:f0:c4:bd:68:94:d4:d2:52:be:8e:48:00:d5:
                    46:9d:cc:42:59:36:6e:9d:58:8a:98:ff:f9:99:ca:
                    f2:09:37:f7:75:04:86:e6:1d:d6:ef:09:52:91:88:
                    5c:3d:01:b2:91:06:8c:53:03:99:ee:27:76:26:52:
                    21:d0:e0:94:2f:8d:94:77:a0:71:ed:15:f4:81:43:
                    58:27:25:b0:6e:e3:fc:59:da:37:cb:b8:c6:ef:b2:
                    05:aa:a7:61:be:8e:9a:3b:4c:c4:cf:f1:5e:c8:9a:
                    c0:38:86:fb:33:ea:ee:d9:1b:48:c9:a0:2a:34:6a:
                    2d:19:9e:79:1b:a3:b2:ac:d9:c3:a6:1a:70:4c:41:
                    bc:ec:ab:1b:37:4d:07:0b:e3:8c:97:00:1e:01:bf:
                    71:59:97:95:ef:3b:c4:4b:63:61:86:1d:ce:f7:04:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:F6:F9:97:90:7A:AC:60:93:41:EB:96:5D:BE:AE:5B:30:F0:6C
            X509v3 Authority Key Identifier:
                keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:2e:4f:d8:e8:7a:52:3a:21:2b:0f:25:60:a4:93:57:ff:
         75:5f:81:a9:24:a3:10:97:2d:d8:dc:64:cd:ea:d0:30:07:de:
         02:ed:bc:8a:05:1d:78:11:00:08:c2:b1:40:69:6e:43:f7:23:
         d9:80:57:97:0d:f2:e9:52:df:2d:14:9b:50:48:3b:40:72:30:
         48:52:5b:dd:71:b6:d4:43:ce:c7:c2:4d:05:a7:1d:29:1a:87:
         aa:b1:c1:45:fd:74:e4:ac:06:91:5e:c9:87:6a:e9:c5:ab:66:
         ef:25:01:70:fe:56:88:c9:ff:db:d2:91:56:2d:0e:0c:70:60:
         15:f5:1d:27:39:d6:fc:b1:ee:ff:b4:ce:fa:a0:ab:83:e6:22:
         9c:a4:9d:4d:83:5a:14:52:c3:df:3d:09:66:e5:f4:f2:d7:cf:
         e2:0f:3c:8e:be:2d:37:ec:ab:18:66:e2:db:02:73:b8:90:36:
         5e:fe:51:2e:d9:0a:05:b7:18:6e:db:20:14:05:1e:d2:67:bc:
         70:bf:42:1f:c3:73:4c:3d:f6:0d:e4:8b:66:6d:9f:30:6a:2e:
         55:ed:a7:5e:0d:13:fd:3c:72:16:df:7f:9e:42:54:48:33:5b:
         0c:43:66:c9:26:36:1c:83:38:41:7d:bb:a3:33:4b:fe:d0:b3:
         a9:5b:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:59 2026 by rpki-client