This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          K44N1czDyMcAWbTQBnSiQUAWIDyJZIPpyCVJYuY44AQ=
Subject key identifier:   68:82:75:90:2B:C5:03:12:11:CF:6B:28:24:E4:6B:AA:74:37:85:6F
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       019C42EADA67835F5839D126E418D29A866E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:13 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: J/3rswiw/GHN2yIgDGuvtSRNZbPd/ZLOEKnlYSdpOUw=)
                          2: RY-r8degIdRULqk_qmxjFefq8O0.roa (hash: lLpPZuz/t5Yw8zlJe7ERdvGB1DRM1TuO1Rrg7Us/30Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:da:67:83:5f:58:39:d1:26:e4:18:d2:9a:86:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Feb  9 15:00:13 2026 GMT
            Not After : Feb 10 15:00:13 2026 GMT
        Subject: CN=688275902bc5031211cf6b2824e46baa7437856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:2e:81:96:0e:14:a0:1b:31:17:f2:df:6b:
                    8b:d8:94:a5:1b:fa:bf:f5:6e:da:46:be:b1:ed:e8:
                    c1:35:2e:37:d7:8e:89:3b:6f:85:b2:64:1f:ff:42:
                    e2:fe:c5:6f:61:ce:39:dd:54:fa:0e:bd:04:eb:0a:
                    a4:f6:40:b6:a5:45:62:42:cb:5e:36:58:db:cd:55:
                    77:24:24:c3:80:54:6d:9c:e0:42:d6:bf:b0:dd:1d:
                    c4:df:c7:16:17:f5:a6:37:e1:a8:7d:9f:f0:c8:e9:
                    14:56:13:bf:31:0d:b2:d7:3d:10:65:81:d3:b7:ed:
                    8a:14:3e:e3:a5:c4:a7:13:5a:97:c2:06:1e:44:dd:
                    49:de:49:3b:18:57:6c:40:f0:43:a7:f3:47:63:d5:
                    a4:7f:0e:d8:c1:f8:8a:31:72:8c:a7:d4:d3:28:6a:
                    c0:77:21:7f:a2:18:cb:d1:7c:26:fb:eb:a8:8d:94:
                    d8:48:03:63:94:c9:63:10:ca:0c:b4:87:15:b2:97:
                    70:04:a3:2e:47:67:be:d9:d3:db:15:82:cf:53:57:
                    b7:2a:9f:f5:65:e4:93:58:1e:21:80:7e:32:f2:0a:
                    b5:ba:a6:02:a6:bc:2a:31:25:ec:5a:f5:76:3c:9b:
                    25:f4:b4:9b:72:ae:72:d7:db:67:26:21:c8:d8:36:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:75:90:2B:C5:03:12:11:CF:6B:28:24:E4:6B:AA:74:37:85:6F
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:81:35:87:5b:44:14:17:49:9e:4a:35:90:f3:aa:8a:92:3b:
         09:bf:6c:79:9e:27:fe:13:56:cb:5d:39:09:00:71:61:dc:b5:
         16:1d:39:7a:34:e3:eb:61:ae:8e:a3:86:0f:f0:6f:ab:8d:70:
         37:97:cd:e7:3d:73:a9:d1:e1:ac:59:a9:56:44:8f:55:cc:e9:
         2f:93:9b:91:46:16:b2:a8:70:50:48:2e:33:56:ef:39:c8:74:
         6d:5f:8f:92:85:11:1a:33:25:f7:74:ba:20:90:5d:a8:a9:c9:
         ae:3a:0f:b5:73:ba:ce:50:46:4b:8f:0c:52:f0:1b:f8:65:05:
         45:df:d7:6b:6f:50:b4:a0:68:da:95:14:10:16:fc:38:d1:9e:
         18:80:d5:e4:96:8b:b6:72:9d:1d:11:62:2b:84:ab:1a:dd:e9:
         1e:6f:cc:73:64:59:be:2f:0c:be:01:86:67:d7:8b:2b:15:68:
         34:69:0c:f7:1c:54:cd:ae:b2:36:42:7d:d9:ff:e5:bf:fc:b9:
         9c:a2:38:7a:d3:e6:48:d3:a1:f2:b9:c7:6a:86:98:c4:24:76:
         68:53:79:2b:f1:29:57:e0:27:06:3f:31:03:3b:0e:d6:d7:f5:
         7a:a7:a3:48:32:c2:41:51:07:33:03:40:8a:f1:f6:c0:b2:97:
         34:78:af:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6tpng19YOdEm5BjSmoZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjdhMGMxYmFiZDYyMWU4MjIwZDBkNzc3ODc3YTg0NGI0
MTNjMTAwHhcNMjYwMjA5MTUwMDEzWhcNMjYwMjEwMTUwMDEzWjAzMTEwLwYDVQQD
Eyg2ODgyNzU5MDJiYzUwMzEyMTFjZjZiMjgyNGU0NmJhYTc0Mzc4NTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPougZYOFKAbMRfy32uL2JSlG/q/
9W7aRr6x7ejBNS43146JO2+FsmQf/0Li/sVvYc453VT6Dr0E6wqk9kC2pUViQste
NljbzVV3JCTDgFRtnOBC1r+w3R3E38cWF/WmN+GofZ/wyOkUVhO/MQ2y1z0QZYHT
t+2KFD7jpcSnE1qXwgYeRN1J3kk7GFdsQPBDp/NHY9Wkfw7YwfiKMXKMp9TTKGrA
dyF/ohjL0Xwm++uojZTYSANjlMljEMoMtIcVspdwBKMuR2e+2dPbFYLPU1e3Kp/1
ZeSTWB4hgH4y8gq1uqYCprwqMSXsWvV2PJsl9LSbcq5y19tnJiHI2DZIFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiCdZArxQMSEc9rKCTka6p0N4VvMB8GA1UdIwQY
MBaAFAe3oMG6vWIegiDQ13eHeoRLQTwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYt
ZmI5MjE3MDI4YzVjLzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYtZmI5MjE3MDI4YzVj
LzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4E1h1tE
FBdJnko1kPOqipI7Cb9seZ4n/hNWy105CQBxYdy1Fh05ejTj62GujqOGD/Bvq41w
N5fN5z1zqdHhrFmpVkSPVczpL5ObkUYWsqhwUEguM1bvOch0bV+PkoURGjMl93S6
IJBdqKnJrjoPtXO6zlBGS48MUvAb+GUFRd/Xa29QtKBo2pUUEBb8ONGeGIDV5JaL
tnKdHRFiK4SrGt3pHm/Mc2RZvi8MvgGGZ9eLKxVoNGkM9xxUza6yNkJ92f/lv/y5
nKI4etPmSNOh8rnHaoaYxCR2aFN5K/EpV+AnBj8xAzsO1tf1eqejSDLCQVEHMwNA
ivH2wLKXNHiv/g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:04 2026 by rpki-client