This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          k0m5VyXKpf9sqUiTsTiyJruUWLyflCCtrZfjthApsKE=
Subject key identifier:   EA:DB:B7:7B:36:E4:08:15:FA:29:AA:70:92:3D:0E:3C:DC:01:1E:23
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019C427DF2101DDF696C91CCEB0A5E0E1959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          0480
Signing time:             Mon 09 Feb 2026 13:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:16 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: lqZSvo/JDphePGJ+IX6cDnkmHOwhqtsUhcqmmnsvKDA=)
                          2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:f2:10:1d:df:69:6c:91:cc:eb:0a:5e:0e:19:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Feb  9 13:01:16 2026 GMT
            Not After : Feb 10 13:01:16 2026 GMT
        Subject: CN=eadbb77b36e40815fa29aa70923d0e3cdc011e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:94:64:2c:b3:49:da:23:44:26:42:3a:d4:
                    c6:76:ae:0d:0f:ba:ac:e6:4a:d2:6a:4a:a3:52:2f:
                    6c:43:2d:00:76:ed:83:2c:86:f7:c4:3b:d9:01:ac:
                    a2:2b:3a:88:dd:94:8d:32:63:be:c7:cb:4b:55:97:
                    d9:da:db:9f:a0:3a:9e:0d:d6:8a:34:a5:46:f1:82:
                    30:57:f9:de:87:19:18:82:ad:0c:b2:2f:c2:b2:6b:
                    db:d2:ff:6c:e4:e4:d4:f7:2b:5d:df:32:da:67:67:
                    61:30:26:f6:46:97:7d:d5:b3:f0:3f:9d:0e:eb:5b:
                    e3:3e:c5:ba:c7:e7:04:99:e5:b3:9e:24:40:00:c0:
                    ed:67:60:db:7c:8d:fb:db:75:d6:c7:cd:b6:0f:f8:
                    54:00:02:a1:6f:ec:4f:0b:bc:4c:ea:40:9e:49:b8:
                    70:71:69:45:64:78:dd:79:06:29:74:9a:87:2e:a4:
                    c9:42:07:f9:97:f0:75:81:a3:83:09:40:50:92:a1:
                    53:9e:48:6b:73:66:f6:38:14:57:8d:a4:72:a7:99:
                    9e:b3:59:f6:8f:cc:d6:a8:83:ea:12:d6:f3:6d:e5:
                    61:ab:ad:a9:89:65:08:5e:dc:a7:00:e7:74:45:68:
                    84:fd:f4:0f:d3:a1:34:c3:cd:26:0f:6b:8a:40:7c:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:B7:7B:36:E4:08:15:FA:29:AA:70:92:3D:0E:3C:DC:01:1E:23
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:39:e4:29:82:27:61:c8:c0:4e:82:4e:a3:5e:00:4b:e5:8a:
         0d:cc:bb:35:e6:27:1f:1d:e0:0f:16:4c:92:b4:1d:44:fe:78:
         e9:2b:cb:1e:5b:a0:02:b8:77:ef:f5:73:4a:30:5c:20:01:9a:
         c5:5b:1c:1b:59:ae:58:d0:70:a0:5d:9c:67:bc:c4:a5:d1:7b:
         89:19:a8:00:04:17:44:e7:61:0c:d3:20:27:d9:67:58:68:05:
         5b:34:80:7d:32:49:22:4f:88:70:ea:c6:f4:4b:1e:c5:dc:07:
         4e:1d:02:e2:c7:32:45:27:62:31:94:2e:ac:5f:dc:59:25:79:
         a8:c5:c2:67:6c:3a:22:a1:ca:26:26:c7:5b:f9:61:cf:28:33:
         75:94:c9:f7:d8:83:9f:cb:b8:b0:28:5b:a1:bb:16:b9:fd:84:
         6f:d4:78:25:c9:e0:2b:8f:8b:57:f6:56:a1:55:9c:63:23:34:
         04:a4:9e:c4:1b:c8:2d:92:65:e6:15:55:1c:06:a2:a3:21:b6:
         88:e8:30:e0:94:21:09:e2:25:48:8f:95:05:5a:f6:97:52:f7:
         71:ed:81:96:8e:b0:aa:f1:36:7e:ed:81:03:8c:58:dd:71:1e:
         88:a3:92:4c:e9:01:27:24:c7:77:81:ba:04:43:c8:99:70:d3:
         7d:60:ee:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client