This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File:                     7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier:          e4Qm9POtgLAfojTIGgPZ/LjaAPBDJFoFawFddENwIzI=
Subject key identifier:   CD:F0:6A:19:34:69:98:57:6D:8D:D1:2D:42:CB:68:C7:7C:F6:21:E8
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer:       /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial:       019C43C6A497A8D4465B94C376F5269BE7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number:          0A83
Signing time:             Mon 09 Feb 2026 19:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:17 +0000
Files and hashes:         1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: WEznXUCm/cjB6vpqrCd2R93y8wJpkMLnrd1mizONKC8=)
                          2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a4:97:a8:d4:46:5b:94:c3:76:f5:26:9b:e7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
        Validity
            Not Before: Feb  9 19:00:17 2026 GMT
            Not After : Feb 10 19:00:17 2026 GMT
        Subject: CN=cdf06a19346998576d8dd12d42cb68c77cf621e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:f4:89:b9:f7:88:15:2b:40:ed:34:7a:4a:
                    c5:2a:9b:62:79:61:09:64:32:fb:d5:13:3f:ac:f6:
                    09:15:37:b5:14:63:df:37:7c:d7:4f:9a:0c:ff:89:
                    ed:e3:55:07:97:ed:cf:ec:d2:e2:45:94:54:e0:c3:
                    0d:59:2d:23:3b:f5:97:14:21:2c:f7:75:fa:e7:e7:
                    6d:6c:90:90:1c:0a:15:50:50:7a:24:06:94:9b:e7:
                    6d:7c:96:96:93:37:2b:78:78:49:3a:81:8a:60:27:
                    5c:33:7a:45:5d:1b:d3:f2:3b:1e:7e:94:86:92:36:
                    e6:c2:73:11:17:43:18:2f:d7:33:32:f4:f8:6d:fc:
                    60:8f:d5:2b:90:c9:a9:22:c9:6e:94:c9:50:91:1a:
                    50:bd:3a:df:4f:a5:9a:81:c0:84:1d:0e:d8:46:6c:
                    5f:4e:18:cb:6b:fb:40:20:67:e1:eb:a6:60:15:96:
                    e8:44:c9:d9:6f:31:cf:22:3e:17:15:ef:c2:ca:77:
                    8e:5c:df:1e:c5:ac:96:35:e1:e3:fd:85:85:65:96:
                    c3:a1:fa:da:6b:1e:69:d9:01:ea:45:40:77:1a:5e:
                    e2:7a:52:11:a1:30:55:81:3c:28:58:64:92:78:25:
                    57:c8:ec:42:9d:70:03:58:0d:40:ff:20:34:5d:ad:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F0:6A:19:34:69:98:57:6D:8D:D1:2D:42:CB:68:C7:7C:F6:21:E8
            X509v3 Authority Key Identifier:
                keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:68:c6:28:85:76:15:7f:93:1f:43:87:9e:1d:27:31:ad:92:
         14:80:3a:fd:25:3a:96:3f:11:7c:e4:06:3e:90:11:db:72:b7:
         4f:a2:a0:be:56:54:b2:5c:16:80:48:5b:ea:89:c2:78:0f:d1:
         1f:6f:1d:c1:fd:b5:05:5e:9a:3b:41:38:b4:0f:53:b1:34:c8:
         c4:4f:ca:26:b6:e5:6a:50:b6:05:f6:44:8b:5b:41:18:4d:ed:
         e5:e7:d8:36:ba:61:a3:c1:24:67:32:7d:d6:e5:09:d0:b3:5c:
         65:dd:1e:de:65:70:66:01:1c:44:97:ab:98:8c:e8:4f:28:31:
         ab:05:2a:be:a7:b4:11:87:da:d3:ce:fc:be:08:af:45:44:23:
         d6:77:6f:88:24:54:0d:7c:09:a5:32:ec:f7:65:5d:44:0a:55:
         56:5e:ec:7d:8e:c9:8d:b6:f0:58:3d:dc:c6:bc:2b:af:d1:78:
         c9:9e:f6:f8:68:fe:f6:a7:e8:ab:e2:11:9d:e1:9b:33:6c:7d:
         fe:3c:4b:79:7e:bf:d2:b9:fa:0a:e4:d9:bb:1e:66:8f:c1:7b:
         40:7f:be:68:eb:d7:46:b0:b1:e1:7e:56:47:2d:32:11:4c:76:
         53:e2:25:5e:9c:28:74:c4:bc:45:4a:0e:06:f4:ce:20:1d:af:
         44:e9:1a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxqSXqNRGW5TDdvUmm+e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4
ZTNjYTgwHhcNMjYwMjA5MTkwMDE3WhcNMjYwMjEwMTkwMDE3WjAzMTEwLwYDVQQD
EyhjZGYwNmExOTM0Njk5ODU3NmQ4ZGQxMmQ0MmNiNjhjNzdjZjYyMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxan0ibn3iBUrQO00ekrFKptieWEJ
ZDL71RM/rPYJFTe1FGPfN3zXT5oM/4nt41UHl+3P7NLiRZRU4MMNWS0jO/WXFCEs
93X65+dtbJCQHAoVUFB6JAaUm+dtfJaWkzcreHhJOoGKYCdcM3pFXRvT8jsefpSG
kjbmwnMRF0MYL9czMvT4bfxgj9UrkMmpIslulMlQkRpQvTrfT6WagcCEHQ7YRmxf
ThjLa/tAIGfh66ZgFZboRMnZbzHPIj4XFe/CyneOXN8exayWNeHj/YWFZZbDofra
ax5p2QHqRUB3Gl7ielIRoTBVgTwoWGSSeCVXyOxCnXADWA1A/yA0Xa3tGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3wahk0aZhXbY3RLULLaMd89iHoMB8GA1UdIwQY
MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt
NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0
LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWjGKIV2
FX+TH0OHnh0nMa2SFIA6/SU6lj8RfOQGPpAR23K3T6KgvlZUslwWgEhb6onCeA/R
H28dwf21BV6aO0E4tA9TsTTIxE/KJrblalC2BfZEi1tBGE3t5efYNrpho8EkZzJ9
1uUJ0LNcZd0e3mVwZgEcRJermIzoTygxqwUqvqe0EYfa0878vgivRUQj1ndviCRU
DXwJpTLs92VdRApVVl7sfY7JjbbwWD3cxrwrr9F4yZ72+Gj+9qfoq+IRneGbM2x9
/jxLeX6/0rn6CuTZux5mj8F7QH++aOvXRrCx4X5WRy0yEUx2U+IlXpwodMS8RUoO
BvTOIB2vROkajw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:51 2026 by rpki-client