This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File:                     7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier:          jdfgIu5WZ//6IZRvPH5eaBUBRQv1bGjUMpmua+8qr50=
Subject key identifier:   02:9E:DD:07:AA:0A:EB:B5:CA:BA:CE:A4:AD:73:90:99:11:8C:67:92
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer:       /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial:       019C2B50E80FE8E954728C1CE062E6E3A493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number:          0753
Signing time:             Thu 05 Feb 2026 01:00:48 +0000
Manifest this update:     Thu 05 Feb 2026 01:00:48 +0000
Manifest next update:     Fri 06 Feb 2026 01:00:48 +0000
Files and hashes:         1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: I5Xp1Yr3jrT0norxAiTBJfyw3QQ3wR7kcPtD1tisiMs=)
                          2: XOqhNOZxOAhHFkz4hARIcbp-d5A.roa (hash: 4hL/1mxlpdw2Hk9JU1ljcj2USapEcK3wvUAzct7W9FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:50:e8:0f:e8:e9:54:72:8c:1c:e0:62:e6:e3:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
        Validity
            Not Before: Feb  5 01:00:48 2026 GMT
            Not After : Feb  6 01:00:48 2026 GMT
        Subject: CN=029edd07aa0aebb5cabacea4ad739099118c6792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:a9:68:47:8f:51:40:1d:99:15:77:d0:06:
                    63:f3:cc:7f:49:b0:64:77:4f:60:ba:8c:40:68:3a:
                    ab:fe:d7:0b:25:53:72:f3:d1:b0:5b:71:45:da:82:
                    66:01:67:38:24:88:ab:f9:61:d4:19:a9:96:89:64:
                    8e:de:7d:fe:0a:16:f9:21:f5:3d:73:0c:ae:ab:4e:
                    1b:94:25:1e:66:ce:79:e3:90:4d:fe:cc:47:be:61:
                    f4:6e:2f:b9:cf:ae:ac:80:6b:83:46:e9:a8:d3:16:
                    f1:5d:e3:10:03:88:e6:47:77:4e:79:33:2c:8c:3a:
                    f8:08:47:f6:ef:70:34:af:7f:c0:1a:9b:81:f5:34:
                    52:83:a4:d1:1f:14:b8:aa:0f:da:42:ff:1a:1f:a4:
                    2d:93:57:5b:e6:f4:2d:4a:f7:b1:28:6b:38:7c:0b:
                    1e:1e:fa:6d:86:4b:5e:cc:d3:c9:ca:d4:9c:ba:bd:
                    44:aa:85:db:e2:d5:04:46:73:08:0c:92:f4:ea:9a:
                    e8:d5:5d:6c:f4:5a:8d:2c:97:14:20:f1:b9:e4:ab:
                    83:88:ea:45:db:77:23:27:f8:56:fa:9a:66:6e:9a:
                    0d:8a:3e:be:6d:20:41:9f:44:9c:29:37:86:16:7e:
                    34:a0:04:ca:2e:60:93:f1:fc:ae:7b:98:45:6f:82:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9E:DD:07:AA:0A:EB:B5:CA:BA:CE:A4:AD:73:90:99:11:8C:67:92
            X509v3 Authority Key Identifier:
                keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:85:40:b0:57:9e:22:e5:1d:40:c1:4d:19:2f:7c:4b:b9:
         fc:40:e5:25:c6:f3:70:b4:18:af:3b:6e:d5:31:c2:ea:8b:00:
         1a:74:e6:64:5c:51:ae:4f:d0:21:83:fa:db:3e:ed:99:14:19:
         84:64:92:24:98:99:36:26:4d:d4:11:52:d1:cd:5d:3a:00:68:
         07:48:98:92:92:d3:ec:a5:fb:b7:d5:c9:bc:bd:62:aa:ee:e8:
         96:3b:dd:85:9c:37:ae:43:60:60:50:d4:9d:a6:e7:c8:b6:88:
         5c:1e:55:80:66:ae:3f:b0:75:be:28:7c:ba:27:6d:4a:e9:ce:
         ac:20:74:b1:39:59:46:b1:ea:c7:0e:9e:6d:21:0e:47:6b:fa:
         9a:96:3b:75:ee:f5:43:c4:80:ff:d4:99:0c:6c:ca:9a:4a:39:
         c7:11:2c:5f:24:ec:87:f5:95:e3:75:ed:46:d6:d9:b1:c9:07:
         93:14:62:e0:9a:2d:c2:95:5e:e5:73:37:79:48:38:be:e5:4f:
         7f:ec:d6:eb:97:e1:b7:a2:38:c6:b4:74:11:d5:5b:96:e0:83:
         5a:ca:cc:01:0e:2d:cb:c0:ff:64:34:b5:9d:cf:6a:95:15:da:
         ef:0b:4a:e9:52:c9:ec:68:69:26:14:84:83:62:35:72:96:f8:
         a9:ce:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:31:33 2026 by rpki-client