This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File:                     7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier:          KtTMyqTUJnvI/gh0JCP5ATa9cPQFk0q8731D+oghyPA=
Subject key identifier:   F3:CA:E9:5B:DD:49:23:A2:9E:39:3C:18:88:44:E3:20:22:85:0B:24
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer:       /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial:       019C4322A99B51EC39550423AA8EA8BBFF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number:          07D5
Signing time:             Mon 09 Feb 2026 16:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:10 +0000
Files and hashes:         1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: 8zziwDfxyDe/7ri/tHA1Y5I0TDNll6yI2Z65ybFAtmA=)
                          2: rvf0hbFsWVEpBXykcpuVRP8DxR4.roa (hash: GCo9KByc6i3SxxBxNly9glVqB6hv/1pXfge2kLwR0es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a9:9b:51:ec:39:55:04:23:aa:8e:a8:bb:ff:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
        Validity
            Not Before: Feb  9 16:01:10 2026 GMT
            Not After : Feb 10 16:01:10 2026 GMT
        Subject: CN=f3cae95bdd4923a29e393c188844e32022850b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:c8:8a:17:ad:1e:6c:7f:cc:70:ef:79:0a:
                    60:2b:1e:75:41:21:03:1b:6e:e5:f0:5b:8a:2a:c2:
                    99:2a:ea:9b:01:b9:88:8d:c4:eb:10:8c:46:73:b9:
                    2f:b2:90:b3:83:1b:98:d4:6f:e1:2d:47:e3:8d:fe:
                    cb:a0:54:ba:9f:38:21:bd:8f:ec:a9:d7:65:91:67:
                    9d:87:4e:0c:31:a1:7d:10:a0:94:ce:1a:0f:ab:59:
                    ad:01:17:a5:11:ee:a8:89:b5:34:06:5e:1e:44:72:
                    9d:a3:c7:31:f2:27:00:55:d9:38:58:a2:eb:c1:b4:
                    4c:b5:05:6c:49:c2:e0:bb:e3:59:5f:e9:00:f4:eb:
                    ba:c8:f3:89:f3:f3:37:af:12:99:43:53:12:cc:15:
                    32:4d:7f:d1:7b:0e:06:92:bc:eb:71:37:70:ab:3a:
                    24:9c:75:6e:2f:e7:d0:2a:5e:6e:b1:b3:ec:34:cd:
                    b2:bd:22:0d:0e:17:f7:7c:40:8d:15:5e:88:3d:63:
                    b9:b6:99:ad:81:8a:dd:fa:b3:e3:d7:68:65:b9:67:
                    a8:3f:2b:4c:da:d5:71:0f:ae:7c:df:4e:37:92:57:
                    68:bc:6c:70:bd:4b:94:dd:69:d5:63:90:bb:e6:30:
                    d9:ac:19:e8:4a:64:e3:a3:ce:da:07:20:99:0e:60:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CA:E9:5B:DD:49:23:A2:9E:39:3C:18:88:44:E3:20:22:85:0B:24
            X509v3 Authority Key Identifier:
                keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:e6:da:84:d0:81:89:9a:be:6f:af:b6:a3:5f:46:fd:17:
         51:4a:8d:0f:2c:03:5e:c2:e6:85:83:d6:17:59:21:62:e0:16:
         f1:ef:43:55:09:bd:0b:4b:0b:c5:46:c3:c4:4a:86:18:d1:d8:
         55:d9:2c:11:d1:5d:e2:33:f6:38:ce:d2:15:39:b1:86:40:80:
         49:67:4a:da:38:ce:f9:86:96:29:76:7b:50:d2:09:af:1e:d0:
         29:20:23:8d:a7:0e:8b:2d:a0:93:ef:c9:06:f5:08:e1:f1:ab:
         bc:06:5f:b3:e6:7d:d3:79:a2:df:22:41:18:85:ee:9f:d2:9f:
         75:77:44:6d:86:03:c3:c2:87:4c:87:0d:51:7e:69:d9:7f:da:
         ae:f9:2d:4e:f7:67:78:8d:a8:41:fe:b6:ab:dd:4b:bb:76:04:
         d8:47:91:e3:01:65:9e:79:a7:71:f4:33:d3:cc:14:83:a2:99:
         3f:e4:be:d3:89:b7:26:8b:84:51:52:2a:6d:ff:63:b6:dc:cc:
         bc:6c:5e:4b:30:9b:60:85:c2:93:aa:ed:01:c3:64:89:b3:79:
         0c:e7:12:31:71:ae:ed:e8:04:c3:e1:4b:e9:0a:df:a0:e1:57:
         3c:9d:53:ce:26:b4:89:c5:71:88:29:4b:ce:e6:14:f4:3c:38:
         cb:dc:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:21 2026 by rpki-client