This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
File:                     7v5LdSmMAHIB5xyAalyMCee3dBE.mft (raw, json)
Hash identifier:          r+9Byy8aWDJnPFYOeyrJ+V5wqzTBQeMWNV0p6tFNeMA=
Subject key identifier:   C4:1F:EF:F6:DB:76:DA:64:1B:A6:8B:59:E2:93:BC:F3:B6:19:65:03
Authority key identifier: EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
Certificate issuer:       /CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Certificate serial:       019C44D98E14E06A0FFAF4FE932C2A2B2F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
Manifest number:          013D
Signing time:             Tue 10 Feb 2026 00:00:34 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:34 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:34 +0000
Files and hashes:         1: 7v5LdSmMAHIB5xyAalyMCee3dBE.crl (hash: Q/6tHAa7l5E+p/+kEXVKYd8oZ4yY4iSIvnugVklQvIc=)
                          2: kSMT1dhlyUE_bz-1S4dIcztetw4.roa (hash: F9u5h4O+BQwPhg0+/A9rPBdp4O6XTcDk1n4Wko8CaAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:8e:14:e0:6a:0f:fa:f4:fe:93:2c:2a:2b:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefe4b75298c007201e71c806a5c8c09e7b77411
        Validity
            Not Before: Feb 10 00:00:34 2026 GMT
            Not After : Feb 11 00:00:34 2026 GMT
        Subject: CN=c41feff6db76da641ba68b59e293bcf3b6196503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:ae:f0:20:60:d7:03:ac:73:54:09:34:38:
                    52:01:53:d3:18:c4:82:3a:44:c7:db:52:5e:cd:03:
                    37:7c:7e:e7:24:bb:0d:61:46:43:45:82:95:cf:91:
                    d4:f1:da:bb:b1:92:42:e6:26:b8:23:9f:7b:02:64:
                    0d:0c:a0:ea:fc:cd:44:b2:62:87:7a:a3:39:57:88:
                    62:87:33:79:78:17:e3:28:0f:60:c2:5f:15:23:7e:
                    d3:b8:5c:5e:98:2d:a6:b6:16:6d:33:6d:b2:71:ae:
                    cb:80:39:75:49:e7:5d:b4:dd:e1:80:cf:fd:30:18:
                    74:23:38:89:0b:72:94:7c:3f:30:39:b7:01:7e:bb:
                    5f:42:f5:f9:3f:71:6b:6d:58:d3:3f:35:36:85:4d:
                    90:3a:0d:90:ac:4d:46:09:df:f7:bd:36:39:12:8c:
                    41:da:e0:a7:ad:2b:b6:e1:0e:64:c4:bb:e3:84:75:
                    46:f9:8d:b4:8d:6d:31:da:4f:b3:0c:5c:78:da:fa:
                    71:91:01:9b:07:2c:b8:d3:4e:4f:59:8f:bc:26:8a:
                    3a:92:d4:48:9f:d0:dc:92:94:bd:28:db:1f:3e:f9:
                    c9:4d:de:ee:ef:b1:fa:22:0a:33:fb:a6:5a:b7:c7:
                    b7:d6:ca:75:d7:09:aa:b7:46:51:eb:db:37:4b:e1:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1F:EF:F6:DB:76:DA:64:1B:A6:8B:59:E2:93:BC:F3:B6:19:65:03
            X509v3 Authority Key Identifier:
                keyid:EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:97:4d:b8:ab:14:92:6b:d7:d1:8a:3d:49:20:00:72:6c:18:
         c2:63:13:54:9d:78:0b:0a:29:81:29:e5:c3:97:e1:c3:53:33:
         43:1c:23:f3:21:d0:7c:48:91:be:52:5a:d7:d4:d9:74:50:b6:
         96:bd:bd:8a:55:69:59:3b:47:c2:89:ef:3a:ec:5c:b6:0a:4d:
         64:d4:1a:9a:74:c4:ab:33:ab:45:98:84:ec:8b:17:84:cc:5d:
         e8:9e:ba:04:b6:d5:e0:c6:0e:76:dc:75:54:9d:3c:cf:14:f5:
         17:8e:ea:f8:4b:74:62:4d:dc:ac:06:c4:d0:91:d0:b2:de:0c:
         a6:ac:ef:ef:80:c5:49:91:e6:f1:eb:fc:b7:7a:34:7a:7c:a8:
         10:5e:85:37:bb:11:13:5a:1d:04:ed:34:fa:05:f8:f7:8d:22:
         84:34:5c:3a:9b:24:7e:d3:a7:e0:dd:59:36:8a:a5:cd:f7:b9:
         9e:d7:cb:af:82:7c:ce:3a:48:94:ca:84:59:9a:76:a9:9f:c2:
         5c:1f:dd:78:b7:4a:38:db:f6:7b:a0:0a:ba:b9:8f:b0:ea:cc:
         2d:4d:10:0c:1f:c1:ad:1a:5a:ad:18:99:92:41:59:50:29:ff:
         ab:93:c1:6c:e0:ff:02:2a:33:04:1e:e7:5e:32:f9:0b:f3:c2:
         fb:25:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:01 2026 by rpki-client