This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File:                     7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier:          ZkyBV7nv+jRaW9+rtAFL2uI/CbmqzfRdJaA5cBny7Zk=
Subject key identifier:   D0:D2:4C:80:A5:88:9F:11:6F:79:EE:E6:D2:E4:D3:5D:91:94:06:32
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer:       /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial:       019C427D56F1A6B92DACA05F77E085660283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number:          0585
Signing time:             Mon 09 Feb 2026 13:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:36 +0000
Files and hashes:         1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: FObdwYGwiOlUr+Ob603gViv4xysE41KLIxsolw7argc=)
                          2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:56:f1:a6:b9:2d:ac:a0:5f:77:e0:85:66:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
        Validity
            Not Before: Feb  9 13:00:36 2026 GMT
            Not After : Feb 10 13:00:36 2026 GMT
        Subject: CN=d0d24c80a5889f116f79eee6d2e4d35d91940632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:9f:b0:04:74:6d:6c:be:87:76:81:ad:b7:
                    e0:a9:ef:99:fb:74:6b:b3:4b:69:dc:19:1b:dc:3d:
                    79:54:c7:01:f7:e7:61:4b:72:8e:09:3f:21:62:f9:
                    b9:85:7a:d6:1f:09:89:d4:30:6c:c3:18:a2:74:a4:
                    ea:6a:83:27:64:e8:de:f7:85:3a:bf:91:d1:4d:02:
                    95:ae:69:9c:c0:7e:27:c5:fd:0c:a5:be:dc:6b:3e:
                    c6:56:32:3e:39:e0:ee:64:e0:0a:3e:bf:14:26:52:
                    7f:b2:81:68:4f:d3:a0:72:0b:4e:75:97:a2:1b:74:
                    b8:d4:77:34:3b:39:24:10:39:83:ed:44:c4:42:7b:
                    eb:5d:e5:9d:26:1c:8f:88:6e:47:96:c0:4b:09:99:
                    a4:6b:ba:59:de:c3:a0:cd:5f:d3:6b:7c:81:c0:b3:
                    24:f4:df:b9:73:3a:97:56:60:9a:98:ca:dd:a6:e3:
                    70:c4:28:21:21:aa:7c:6a:40:1a:8c:3b:60:8f:ec:
                    9a:d7:38:92:86:e3:7d:92:33:66:06:59:3f:ae:e6:
                    0c:5a:eb:d6:85:76:83:02:5d:68:37:38:50:8c:a3:
                    bd:f7:d0:fa:07:b5:b4:ac:bc:17:d1:c8:b3:65:44:
                    d3:07:66:f2:ff:60:b7:44:75:f9:ba:33:41:47:c9:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:4C:80:A5:88:9F:11:6F:79:EE:E6:D2:E4:D3:5D:91:94:06:32
            X509v3 Authority Key Identifier:
                keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:01:35:f6:bd:ba:30:92:66:88:55:f5:fd:06:1e:04:43:
         f1:56:82:b5:87:13:dd:e3:77:64:71:de:86:66:37:2c:6a:4f:
         92:7d:c6:fc:6e:49:db:c8:52:71:10:60:41:db:33:39:89:49:
         4e:dc:fb:60:10:82:43:4b:9c:a1:02:a8:df:a6:71:fe:3f:4f:
         8c:48:4e:51:69:ce:28:73:fb:19:f7:c2:be:07:86:b6:ff:fd:
         f4:75:61:b2:ba:5e:de:b6:66:6e:90:6c:f0:8c:85:2a:69:71:
         67:61:b3:fb:d2:44:1c:64:0c:fe:85:c4:37:86:ff:46:06:f8:
         aa:df:e8:87:47:00:62:a5:d8:a0:1f:aa:28:59:37:28:b6:18:
         48:80:0a:3e:1e:2c:dd:4e:08:87:4c:37:ca:83:7b:04:52:4c:
         4f:e4:ef:d3:ba:45:eb:b2:cd:ca:6e:b3:f2:3e:9c:b1:f6:c4:
         22:55:bf:fb:f1:fb:a0:eb:eb:ab:ca:67:26:06:b8:d9:e8:df:
         0c:26:f8:cd:82:98:ce:5b:65:18:f2:80:9c:dc:9b:01:f5:b1:
         ca:a5:3c:78:7f:9d:d0:e0:89:d3:30:5f:22:db:62:89:40:a4:
         18:ee:d1:1f:6d:7d:48:7c:d2:78:fe:3d:fc:33:be:c1:d4:49:
         7c:98:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:39 2026 by rpki-client