This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
File:                     7lOyfPFdNQRZRzp5DbXbdv60CkM.mft (raw, json)
Hash identifier:          P10Hdx06J34rTFsdoH2ZOEBuBv9/rjjWIgtJq+vq57g=
Subject key identifier:   09:2F:16:43:A6:BB:2F:7F:D4:B9:04:1A:74:C8:20:ED:BF:87:E5:BA
Authority key identifier: EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43
Certificate issuer:       /CN=ee53b27cf15d350459473a790db5db76feb40a43
Certificate serial:       019C43225EEE8DFEF9B78E6FD7F85064E5E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
Manifest number:          1D
Signing time:             Mon 09 Feb 2026 16:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:51 +0000
Files and hashes:         1: 7lOyfPFdNQRZRzp5DbXbdv60CkM.crl (hash: v5RJW5e5/G/EEK7+RNM8EhHIVgZyF4R2aIDnH73jg1I=)
                          2: L9Frwtp3y9J9orpf147yoe-Tyr0.roa (hash: POgvv3guoi89kV3dVMswqbK01pH72kXEXSFin0qGmsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:5e:ee:8d:fe:f9:b7:8e:6f:d7:f8:50:64:e5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee53b27cf15d350459473a790db5db76feb40a43
        Validity
            Not Before: Feb  9 16:00:51 2026 GMT
            Not After : Feb 10 16:00:51 2026 GMT
        Subject: CN=092f1643a6bb2f7fd4b9041a74c820edbf87e5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:ab:bf:6d:fd:b3:f2:97:3c:92:9e:98:3b:
                    73:e8:94:79:50:7f:31:f4:42:ea:21:c8:05:60:ff:
                    44:26:6a:bd:c2:ab:ee:69:9a:c6:d6:fd:fb:32:a6:
                    50:f1:95:4d:e1:18:4c:27:d8:0f:b3:33:c6:02:ff:
                    44:3c:b0:8d:43:04:06:81:c3:a3:c4:c7:b4:8e:89:
                    34:5e:62:6b:71:f6:d7:a7:c9:a2:07:09:e0:12:ed:
                    57:a8:30:50:02:d6:20:73:5d:c3:91:b0:d2:79:d5:
                    56:9d:7a:17:34:78:f7:a9:6e:0d:e7:45:7c:77:a8:
                    e8:2c:52:62:2e:30:a4:3a:96:64:96:00:7b:df:dd:
                    57:54:5c:76:82:9f:05:44:19:3c:34:51:d0:3e:91:
                    6e:88:57:c2:7e:0b:7d:4d:43:8b:9c:11:a4:39:d8:
                    10:21:5f:fc:68:15:37:95:6a:71:75:e3:79:6e:ab:
                    72:1f:2f:fa:ee:88:af:59:81:d6:86:b0:c3:ea:24:
                    4d:27:3d:ff:59:ca:20:60:f0:4d:4b:db:3a:f4:76:
                    c8:87:7a:70:97:85:65:82:07:73:28:b7:c4:e2:4a:
                    82:0e:80:72:36:e9:41:61:c3:ab:a0:f7:f6:96:fe:
                    5e:8b:84:0a:95:c2:d5:3b:ea:7a:0e:3f:b9:ed:11:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2F:16:43:A6:BB:2F:7F:D4:B9:04:1A:74:C8:20:ED:BF:87:E5:BA
            X509v3 Authority Key Identifier:
                keyid:EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:ca:4b:67:3e:bc:66:87:8a:4f:a2:13:27:9b:de:7d:a3:
         3a:4a:12:86:1b:b2:f6:fa:b9:8c:5b:36:a1:b9:0b:13:13:20:
         66:4b:74:cc:12:fe:02:f3:2a:48:9a:cf:dd:11:22:88:8b:fc:
         22:10:fd:06:b0:3e:27:d2:3a:8a:58:8e:7d:b4:09:d1:9e:ef:
         b8:29:f5:8f:0d:9b:7f:8d:d9:42:1c:de:c2:c0:8f:e2:2b:f4:
         1c:52:89:d2:d3:20:ae:36:43:d2:74:3a:26:e0:b2:19:6c:6a:
         f0:4c:93:1c:98:1b:af:b5:33:5a:4b:f2:45:d6:aa:2e:a0:4a:
         2c:50:f2:5a:dc:2d:e4:1e:1e:36:b5:6a:c2:b2:54:29:57:f7:
         85:63:cf:a1:13:35:38:b4:00:59:e5:e8:f5:45:bf:05:b4:91:
         4f:2f:04:b7:38:c5:4e:99:8f:b1:26:29:66:60:a1:d3:79:b7:
         14:7a:86:c4:92:18:24:89:4a:fc:f1:00:0e:a3:d0:9c:ff:7b:
         40:4d:e9:f3:f3:36:0f:a8:4c:55:e0:ba:04:c4:d9:8e:86:3f:
         76:1b:2d:ee:b5:e4:56:1a:04:20:11:b9:d9:2d:58:35:0f:88:
         49:b2:7d:66:6a:1b:13:bb:d2:df:5e:6a:56:e3:66:7e:a8:ce:
         e4:41:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:24 2026 by rpki-client