This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          9zywbJt8rI/CLOcAyba1iSocWHeR+JDujNfQscgykHU=
Subject key identifier:   20:75:93:08:C0:2A:96:43:AA:C8:B4:77:BA:13:AF:77:35:14:44:3C
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       019C4246C3F9607201EE936C49BAD5EC2389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:59 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: aiQg+xUaXttNmhID+8ABaXy3fCC/gPnqOvlN/fCW7ik=)
                          2: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (hash: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c3:f9:60:72:01:ee:93:6c:49:ba:d5:ec:23:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Feb  9 12:00:59 2026 GMT
            Not After : Feb 10 12:00:59 2026 GMT
        Subject: CN=20759308c02a9643aac8b477ba13af773514443c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:5b:c0:fe:47:e1:88:35:0b:37:30:3f:18:
                    e0:0b:08:bf:56:6e:80:fc:3c:e2:ed:46:33:d9:e9:
                    43:df:b3:1e:fb:3a:07:c2:67:b1:a3:e2:46:6e:f8:
                    1f:66:89:f5:f8:96:5a:4a:4e:ef:cc:80:1a:92:35:
                    c2:7d:f2:91:cb:b4:59:66:95:b5:36:67:a2:e6:f6:
                    13:e8:b7:85:96:7a:3b:9e:a0:9a:28:d1:b5:be:0e:
                    3c:44:ec:8d:a5:03:87:23:3a:ae:f6:3d:75:d4:02:
                    3d:c1:94:5c:27:17:5b:1b:30:00:a5:69:94:43:04:
                    c6:1e:54:c3:a5:cd:7c:78:65:d0:2c:30:75:52:69:
                    5d:0e:7d:ed:60:33:52:17:ca:44:ae:d5:53:59:ff:
                    a7:ff:e6:8b:40:31:60:25:ec:cb:71:f3:36:1f:e1:
                    2d:61:b4:79:24:6c:49:6d:74:76:4a:df:50:48:80:
                    a5:19:37:d1:6c:60:ef:a8:28:8a:73:b9:f1:06:bc:
                    0b:0d:e8:ca:35:4a:a1:72:66:56:ef:69:53:d8:ba:
                    51:86:8f:4b:35:0d:15:26:1e:c9:0a:54:bb:46:fb:
                    33:5c:e6:ea:6f:80:31:48:d1:0a:42:76:91:9d:da:
                    2c:2b:10:f8:79:e4:17:f0:f5:14:56:94:1a:8f:4f:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:75:93:08:C0:2A:96:43:AA:C8:B4:77:BA:13:AF:77:35:14:44:3C
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:4e:1e:25:93:c2:bd:d0:e6:cc:4f:b4:ed:33:be:32:bc:
         b7:bc:07:76:f3:81:d1:78:03:af:26:8d:89:8f:94:57:8d:d8:
         ed:78:59:ad:f0:cc:d1:22:a4:f2:ec:ce:97:5f:e7:97:d3:45:
         9a:08:e2:fb:28:fc:53:88:1a:fa:73:d9:d9:d4:a6:44:f1:0f:
         7a:39:d3:17:b0:a6:77:af:6d:24:e0:e3:fe:0d:e1:bb:98:47:
         50:d2:b8:0e:a4:40:be:aa:cb:09:08:e6:ef:3e:c8:96:c1:43:
         63:92:9d:29:41:b2:a6:23:be:9a:36:d9:dc:a9:59:19:22:a1:
         45:d3:9e:46:d5:7a:c7:d6:f1:23:cb:a6:cc:15:a3:c9:f6:13:
         a5:54:b4:47:10:cf:c0:71:eb:96:d3:83:1e:78:02:03:62:61:
         e1:95:55:54:b9:35:fc:61:38:bb:4d:89:f5:ce:b1:7b:10:e4:
         5d:f2:a1:99:01:c2:28:91:42:8a:9d:e6:f2:2b:01:2b:ae:48:
         fa:90:de:a6:4d:4c:22:b3:03:15:da:d6:f3:66:dc:60:94:13:
         e6:36:2c:e0:80:2b:93:b2:cf:c8:a4:ca:48:fe:fe:c0:a0:8d:
         28:b0:d5:c2:8d:46:5a:f1:9d:61:b0:58:7d:13:74:18:c5:2c:
         3e:58:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:41 2026 by rpki-client