This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          cOx/VbqpVRWZNPRFOI25f02QTfoVTV4jNe6hz1oTfHM=
Subject key identifier:   EB:3A:E2:B9:87:7D:57:37:A5:EE:33:87:FA:31:F8:A7:A0:69:75:F8
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019C4322E9C6F94B5B428C5167892527012E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          11CE
Signing time:             Mon 09 Feb 2026 16:01:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:27 +0000
Files and hashes:         1: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: puHhx03j4HrmVNOcBg0PID1vktkqyVE92jkwYlPv2do=)
                          2: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (hash: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw=)
                          3: NdtOCJvzGmFZlmDg7mwNpBd1B_Q.roa (hash: W9vZQt0X+AIDjmeyVAUiJ2h6aMzNBj5GBkBeIxqmyoM=)
                          4: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (hash: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:e9:c6:f9:4b:5b:42:8c:51:67:89:25:27:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Feb  9 16:01:27 2026 GMT
            Not After : Feb 10 16:01:27 2026 GMT
        Subject: CN=eb3ae2b9877d5737a5ee3387fa31f8a7a06975f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:5f:70:2f:fc:1c:d9:10:07:53:22:16:f0:
                    b1:8e:a3:0e:5b:41:88:c0:4e:22:3e:13:e3:e6:e6:
                    fe:29:fd:57:04:b5:1d:b2:aa:97:3f:d0:ce:28:04:
                    c4:59:5b:1c:54:62:43:b2:2b:9b:fe:03:dd:19:c0:
                    05:33:bd:3a:36:5e:19:13:73:bd:40:b4:86:bc:80:
                    b1:e6:26:8d:1a:f5:e2:4e:e1:f6:2e:48:b9:b2:0f:
                    7e:25:01:83:36:63:71:ad:43:ba:d2:92:0d:50:e4:
                    5a:df:77:6a:19:25:6b:e0:2b:91:76:bc:67:62:2a:
                    b8:0d:ca:16:66:b2:2c:4d:9e:f3:ab:4e:7f:61:53:
                    98:3b:21:50:18:4a:02:c9:39:58:0a:f7:51:3a:3e:
                    47:28:10:9d:76:bc:0d:95:08:87:2a:55:a0:d1:dc:
                    fd:f3:fb:d5:a7:66:51:4b:61:c1:51:3a:c3:14:7f:
                    84:da:88:54:7c:60:3b:1f:28:ca:36:79:e1:4f:ad:
                    d0:c7:d8:8c:ba:8f:61:d3:50:6f:50:7d:ee:49:b9:
                    67:ba:e2:87:71:8c:c1:90:1a:54:80:10:fc:72:b8:
                    b0:bb:aa:74:ab:c6:e9:29:0b:f9:c4:a3:86:ee:e5:
                    38:5c:33:ed:ec:4e:2a:54:26:14:d7:0b:33:91:c4:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3A:E2:B9:87:7D:57:37:A5:EE:33:87:FA:31:F8:A7:A0:69:75:F8
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:75:dc:e1:25:15:0f:6d:7a:e9:26:9e:72:6f:9f:a9:6f:
         e6:ef:6f:4a:44:59:10:8e:bd:90:e4:36:76:46:9a:db:be:37:
         48:d4:c4:40:48:7f:ba:59:07:22:e2:48:e2:0d:07:ce:18:c0:
         fb:f2:63:bd:d6:8e:b7:10:53:7a:9f:44:20:b9:4a:b0:9b:a0:
         8c:5f:e9:d1:75:7c:eb:3e:a8:a0:b4:a8:76:28:f2:2d:73:9b:
         e7:64:16:72:f3:e6:2a:7d:dd:bd:a8:1a:c1:50:33:1b:f8:44:
         0c:de:16:99:41:da:7d:77:6f:43:89:a5:de:8b:f0:6b:5e:6a:
         50:e8:56:d5:22:1d:8b:b4:38:42:ba:49:74:fd:84:35:e2:88:
         5d:75:f9:00:c3:45:63:24:f9:99:93:bf:95:68:f8:f8:99:74:
         9d:4f:10:f4:7b:80:8d:b9:6d:66:4e:58:7b:0b:f0:af:cf:a2:
         db:5f:7d:ac:14:19:ff:ac:28:45:3e:45:dc:41:e8:4d:4d:0f:
         a6:27:80:d5:3b:95:e7:2a:bb:24:fc:84:b0:48:62:62:70:9c:
         04:29:50:2f:d8:04:de:6d:01:ec:0e:70:67:c6:0a:15:6d:e4:
         3f:50:c2:e6:e4:d5:d6:47:c2:40:db:b4:61:34:46:4f:f2:f3:
         4c:fb:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:04 2026 by rpki-client