This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File:                     eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier:          WMT8ZQGngvuBpsgemKvD5PBYPdvmq4RWl7x0gmrTAu4=
Subject key identifier:   7A:28:E9:83:07:42:34:75:87:5C:C6:D9:FB:FF:39:D1:C4:16:22:FC
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer:       /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial:       019C41D888C3F2357389E6BA8F57126F6522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number:          133A
Signing time:             Mon 09 Feb 2026 10:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:35 +0000
Files and hashes:         1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: CGfXUfrD5p7oFVdx3WrMW/lHXjWVqOhrVmJ8II0e7ts=)
                          2: nm43m5JBni2gazwkwkpR5vwEWZE.roa (hash: vSYWgwULGrCYTXxb/vfIvAtMG0pvAZFSpwnb7bS2Sfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:88:c3:f2:35:73:89:e6:ba:8f:57:12:6f:65:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
        Validity
            Not Before: Feb  9 10:00:35 2026 GMT
            Not After : Feb 10 10:00:35 2026 GMT
        Subject: CN=7a28e98307423475875cc6d9fbff39d1c41622fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:ac:e7:58:f8:97:21:aa:4c:1a:8a:7a:35:
                    d4:18:99:74:d1:c3:ad:d2:59:4a:da:2a:27:51:61:
                    74:c5:9f:30:c4:f5:09:fe:db:0d:53:60:a0:52:1f:
                    cd:9d:08:31:ab:c4:70:b1:1b:9b:c2:e7:46:91:28:
                    be:ba:67:06:89:b4:29:ab:07:05:4d:b6:c4:e8:7b:
                    fa:06:19:bb:08:43:be:1b:b1:24:93:3c:cd:fd:f0:
                    0d:1a:dd:49:9b:b3:1e:a3:23:95:33:b1:1b:c8:95:
                    2b:43:48:6b:2c:a7:07:f0:6f:4c:b3:c8:18:56:17:
                    69:0d:05:83:9f:78:13:8a:22:71:65:46:d4:57:53:
                    74:64:2e:5c:27:e0:e2:38:b0:9a:54:5b:b6:29:d4:
                    07:b0:7a:83:bc:30:99:df:ee:03:31:6f:f3:c4:00:
                    49:7e:d7:17:d2:4a:5a:69:b8:a4:d7:ed:6a:9f:0d:
                    a6:1e:a3:09:25:db:2e:b9:18:69:dd:4d:16:8c:2a:
                    92:dd:25:7a:0b:fc:c9:7d:9a:49:99:ba:5f:8a:e8:
                    f0:cd:4b:5f:81:90:4d:27:b8:74:1b:7c:a6:d8:46:
                    61:56:f3:08:47:08:fe:b5:fe:07:a7:6e:85:76:09:
                    1b:46:d7:24:49:72:f4:7f:4c:39:a6:38:8e:47:84:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:28:E9:83:07:42:34:75:87:5C:C6:D9:FB:FF:39:D1:C4:16:22:FC
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:76:6d:bf:4f:75:ce:85:a0:52:2b:0d:69:b9:26:73:7e:17:
         2f:e9:4a:68:49:ba:bc:6f:45:61:c9:cb:e1:8d:14:1f:d7:a8:
         14:52:07:6f:78:5f:0e:dd:fd:24:29:4e:0a:cb:0f:a1:6a:25:
         c0:d4:b9:7d:40:9b:d1:a8:8d:56:c9:b5:bc:3f:79:78:5c:ed:
         07:f5:85:2c:00:1a:76:0f:4f:ac:e7:bc:ec:aa:98:12:58:d5:
         f9:25:bb:81:c0:8c:73:09:1e:8d:98:39:1b:99:aa:2f:b1:d5:
         0f:31:e6:f4:28:4c:c0:7b:77:63:20:7d:47:17:c4:8f:0c:99:
         ca:96:66:cf:fe:01:23:e0:19:fc:bf:db:1e:ea:2d:d7:d1:00:
         6a:86:06:d4:8d:1c:b9:4a:55:ca:cb:74:b1:47:0e:c5:26:18:
         45:47:d4:c7:05:dc:2a:bf:d3:23:9a:ec:5b:2c:71:7f:29:46:
         8c:9c:0e:cc:21:43:7e:9b:70:d6:7b:0d:a4:f9:20:ff:ac:b7:
         b4:13:5d:e6:f3:0f:90:66:57:ea:c5:10:a2:91:b4:ad:a5:d5:
         35:96:65:8d:34:fe:23:d5:4d:94:63:7a:86:ad:5b:b2:80:79:
         ab:39:f8:f3:f8:a3:ea:a3:e5:d0:7a:48:b7:d3:41:2a:23:25:
         8f:6f:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:05 2026 by rpki-client