This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          a8qs66oxP8jWTq/RwgXPibjBvPdp3OvWxECX6Xg/7Ug=
Subject key identifier:   C7:B0:F4:EB:19:E3:1E:8C:73:F0:72:A3:7D:B9:1C:46:E9:6F:F5:3E
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       019C420FB4F940C88312BC844F58DD789486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          117A
Signing time:             Mon 09 Feb 2026 11:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:51 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: Jw6GRW8P1KmCT06SBU2ltSaMOeTwMlnTgfLldfCjY60=)
                          2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b4:f9:40:c8:83:12:bc:84:4f:58:dd:78:94:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Feb  9 11:00:51 2026 GMT
            Not After : Feb 10 11:00:51 2026 GMT
        Subject: CN=c7b0f4eb19e31e8c73f072a37db91c46e96ff53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:4e:35:f8:58:68:4c:d8:07:03:d0:e9:53:
                    f2:a5:6c:c5:02:3e:0e:f4:f4:0e:77:fe:a3:8e:5f:
                    83:e0:9c:a9:2e:e1:5e:7f:6b:0b:7d:28:a0:ba:d2:
                    98:19:d3:c5:42:36:1b:e4:7f:3d:fc:29:de:7a:e3:
                    4f:bf:cc:45:49:b8:2b:95:8e:50:7a:4b:40:59:3f:
                    c4:84:ae:12:f5:aa:a3:45:43:10:d0:c1:02:ec:b7:
                    19:6d:ee:a7:91:29:95:a1:f9:d1:06:a4:37:37:20:
                    99:a1:a1:34:78:67:ed:5b:18:36:5e:eb:38:a4:2c:
                    26:43:b3:da:f6:f1:fd:b3:07:9a:57:ff:79:94:57:
                    eb:0e:86:2e:97:b2:98:b5:5d:39:72:c2:c9:99:01:
                    e6:dd:b3:1b:54:d6:b3:1a:a7:37:ec:0f:28:aa:ef:
                    2a:ac:97:86:22:19:c9:35:76:eb:63:60:83:98:ea:
                    8e:a2:e2:4c:43:e3:51:86:21:75:95:ed:53:35:1e:
                    9a:c3:de:97:70:a4:50:11:86:f0:1f:b4:ec:b0:dc:
                    60:bb:b0:47:20:00:90:e5:c2:04:a5:b8:8b:e8:b3:
                    7d:50:c4:8c:61:69:76:5a:45:43:46:ff:86:f2:59:
                    e3:f7:31:f9:ab:75:f3:16:b2:58:cf:3d:35:28:4b:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:F4:EB:19:E3:1E:8C:73:F0:72:A3:7D:B9:1C:46:E9:6F:F5:3E
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:50:e0:8a:ae:87:5c:3e:4b:4a:ad:d4:f4:b9:49:82:f9:
         2e:99:84:9f:31:9b:dd:e1:3a:12:b0:59:6b:1e:db:53:0f:a9:
         8b:e2:84:2f:34:b0:b6:02:c2:97:b0:99:89:06:fa:f3:23:2a:
         0d:d7:8b:c4:57:ae:46:5b:92:f6:5f:f6:53:33:77:4f:7d:e6:
         e9:8c:89:e2:b2:9c:d1:eb:05:36:2e:7c:ff:52:81:f9:3a:9b:
         9e:3b:2d:1d:86:41:dd:14:c8:a9:b5:8a:3c:5b:7f:8d:36:18:
         a9:6e:a8:38:51:e1:5a:10:d9:0d:c7:06:18:e6:30:97:45:c0:
         14:66:33:e7:2e:ab:80:06:3a:89:2b:87:f1:93:97:04:45:e2:
         2f:29:7a:b3:ec:ce:02:20:15:a9:3a:73:59:58:a2:77:ea:11:
         05:70:43:69:6b:bf:13:71:eb:a2:4b:f4:d5:9e:e6:a5:87:05:
         16:2f:12:72:2e:65:2e:10:3c:73:ec:47:c8:b0:75:ec:a9:de:
         57:75:12:f4:7e:22:76:07:cf:3d:6b:7a:9d:23:c6:c2:58:74:
         4f:13:11:1b:42:6c:99:b7:bc:37:09:97:cb:9f:27:67:dc:04:
         8d:b6:9d:10:a8:f4:81:22:57:70:05:13:a1:3f:3e:c5:a8:18:
         06:24:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:54 2026 by rpki-client