This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File:                     8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier:          8obFcCbl1gPB8RVHFXCnUVSf8KlhVLTdKAgjaEb1A5M=
Subject key identifier:   7D:35:DA:5A:0F:D7:59:B9:2D:6C:F6:A1:BF:FD:39:CC:A6:0B:3B:7E
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer:       /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial:       019C4322F2023C8014A7CF8F42D93C12814C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 16:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:29 +0000
Files and hashes:         1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: rlq74HbbZbtweJd8ZJrzXNypFyUCDuHZBA82p3vdn6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f2:02:3c:80:14:a7:cf:8f:42:d9:3c:12:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
        Validity
            Not Before: Feb  9 16:01:29 2026 GMT
            Not After : Feb 10 16:01:29 2026 GMT
        Subject: CN=7d35da5a0fd759b92d6cf6a1bffd39cca60b3b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:c1:82:75:e9:73:28:79:8c:c1:a7:7b:8c:
                    e2:1c:64:01:f1:23:22:34:87:af:41:b2:80:c1:f7:
                    d3:a1:29:1f:87:02:04:14:a9:41:04:65:d8:ae:a3:
                    65:c6:be:e5:db:9e:ef:fb:51:ec:ca:9d:46:b9:76:
                    e5:00:5e:4a:c7:fa:79:0f:ec:d9:28:a2:3a:73:44:
                    5b:5f:ee:57:48:58:3e:f6:b7:55:b1:ef:90:d0:d9:
                    8e:f6:c1:46:ff:e8:97:fc:78:fb:83:9d:e6:5f:1f:
                    0f:75:4c:4d:36:50:56:0a:45:bd:45:0e:c9:c0:2e:
                    66:9a:a5:2a:9e:4e:53:f3:f0:04:28:c4:3e:85:c4:
                    2b:bd:3d:34:d3:06:36:86:4d:cc:c7:dd:2c:84:4b:
                    d5:fd:5f:06:fd:11:cb:cc:52:50:57:75:81:5b:43:
                    97:ef:1e:7e:37:31:b9:88:9d:18:80:ca:c7:fd:a3:
                    98:b3:b1:f3:81:11:72:d5:05:70:fc:93:4f:a2:b1:
                    28:d3:d0:4f:7d:92:67:77:4b:f8:d1:c0:16:75:77:
                    c3:26:71:7c:d6:af:87:bf:a7:19:40:b2:c3:6f:db:
                    a3:bc:33:e2:ec:af:1e:19:0c:8c:09:d9:65:8a:53:
                    33:26:a9:44:7d:32:85:a5:b7:e4:3a:98:00:56:d3:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:DA:5A:0F:D7:59:B9:2D:6C:F6:A1:BF:FD:39:CC:A6:0B:3B:7E
            X509v3 Authority Key Identifier:
                keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:66:06:c4:91:c6:d0:a9:2c:4c:0e:34:30:c3:97:36:a9:3c:
         0b:7b:0d:cb:0e:ae:d6:32:81:8d:4f:cd:81:d7:b0:e3:d2:57:
         db:86:31:df:f5:62:6b:53:c5:e4:9f:1e:64:25:63:77:97:c0:
         58:87:60:24:87:52:c7:2b:c2:44:6a:52:57:ac:b1:04:9b:81:
         06:b5:b9:27:0d:89:e4:67:01:70:c1:63:e0:42:1f:63:d1:63:
         7f:30:df:da:db:2f:b5:12:69:45:86:7a:d0:c6:5b:55:23:a3:
         e9:f0:ed:7d:a3:f9:39:d2:16:95:57:f6:df:20:3a:ae:7b:1c:
         81:d4:cb:9c:f4:70:03:27:9a:63:51:34:7e:53:b5:90:32:22:
         5a:ec:df:d0:c8:f8:9d:b7:34:a4:55:13:a8:2b:16:59:28:5a:
         b4:cd:d1:f6:2d:d7:9e:31:d2:69:d2:dc:98:4f:88:4b:fe:95:
         bc:99:d8:70:e4:0d:9e:f0:7b:13:13:ed:34:a4:03:0f:4a:a7:
         4f:6a:84:91:c0:77:f3:1f:78:13:4c:77:51:e1:63:f2:a6:23:
         98:e5:c0:3f:94:53:57:73:af:d3:dd:69:af:07:71:91:50:a4:
         1a:0d:07:39:07:df:14:fb:8b:b2:37:ed:1a:d3:af:fc:ed:d1:
         b2:79:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:33 2026 by rpki-client