This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File:                     7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier:          Xan0xZxalD+PQsJc9clvy+awQRZp2euNE+B0SXmM47E=
Subject key identifier:   B0:B9:3C:81:73:6D:F6:AA:6A:72:A2:8C:B2:19:03:AC:3D:EA:23:99
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer:       /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial:       019C43FE34EBC76699E3920ED0F01921D095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 20:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:59 +0000
Files and hashes:         1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
                          2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: tALunzYWzPywcsWckb97AkskUYa1OpJrgoChy5MNHnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:34:eb:c7:66:99:e3:92:0e:d0:f0:19:21:d0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
        Validity
            Not Before: Feb  9 20:00:59 2026 GMT
            Not After : Feb 10 20:00:59 2026 GMT
        Subject: CN=b0b93c81736df6aa6a72a28cb21903ac3dea2399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:52:a1:c4:37:b1:fc:16:a3:e2:13:77:62:
                    91:34:22:e8:35:5d:88:e0:fa:0d:d0:8a:ed:a8:8f:
                    66:7b:f4:8f:fe:0d:63:7e:49:ce:6d:cb:a3:6a:12:
                    8b:01:00:6a:d0:2a:db:82:99:01:42:60:08:7a:2b:
                    ff:5b:c8:ac:3d:d9:a8:17:de:6a:18:01:87:45:fe:
                    98:71:17:6b:20:26:0e:52:6a:1a:e9:f1:f3:71:02:
                    d0:98:a5:03:5a:86:d2:83:db:d6:c6:1b:d5:d6:e3:
                    4e:d4:b5:a5:0c:78:46:12:39:41:9f:b0:7c:ee:28:
                    5e:57:f5:3e:a1:8f:6c:2f:59:4d:47:94:de:cd:37:
                    a9:bd:cb:3f:1a:ee:c2:b4:13:82:82:37:ec:28:4b:
                    4a:66:85:7f:54:58:bc:2a:b4:dc:f7:c5:49:aa:e7:
                    6e:7c:67:e2:18:61:d0:c0:61:63:d2:1f:81:63:77:
                    a9:ff:41:e6:9f:29:15:ae:ef:de:f1:fd:b4:c5:03:
                    96:9e:89:dc:ee:8c:c3:fa:7d:4a:86:60:4c:27:7b:
                    19:1b:2d:e6:7d:75:ab:b7:08:f6:d0:0c:8b:2b:56:
                    a0:b9:eb:a8:bf:00:33:3a:1b:83:56:97:12:47:6b:
                    a1:69:85:1b:fe:6f:22:8b:3c:7a:84:bd:64:d1:33:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B9:3C:81:73:6D:F6:AA:6A:72:A2:8C:B2:19:03:AC:3D:EA:23:99
            X509v3 Authority Key Identifier:
                keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:18:b4:50:6f:a5:a5:0b:60:31:e5:24:a6:0b:ad:d5:02:58:
         60:dd:68:3e:ec:2d:f9:0e:ab:ce:5c:b3:5d:24:c5:60:fd:cb:
         94:d9:12:bd:d0:4e:d5:51:91:1c:05:6c:05:a1:ed:c0:19:04:
         ba:eb:0f:fe:9f:83:6c:42:74:27:76:60:0b:d9:95:c8:c7:be:
         c6:f6:f5:bd:56:28:35:46:1c:66:d5:df:ee:67:f5:82:2c:47:
         d9:ca:ad:e7:b1:9f:db:78:56:f8:d7:66:19:50:bd:61:0a:6b:
         86:6c:74:22:4c:c2:e1:19:c9:94:d1:b8:68:07:c1:32:0e:53:
         35:20:a7:48:37:f5:6d:14:f8:27:13:9b:83:90:dd:43:9a:84:
         b8:5c:c0:42:87:0c:1b:36:a7:15:02:7a:46:15:01:d6:43:cf:
         88:9b:68:f5:02:5d:3a:54:5d:1f:e7:ea:d3:a7:13:2e:a0:c6:
         df:e7:d2:f8:d8:63:05:ee:6f:08:ad:d7:bb:ee:a3:f4:c4:05:
         97:bf:97:0f:2d:02:55:e9:14:38:00:ed:65:85:8b:e9:85:91:
         14:a0:66:42:54:b1:d1:7a:6d:ed:d2:a0:1d:45:68:33:26:cf:
         02:ca:12:b5:47:c2:9c:cf:63:1a:39:20:58:33:af:0c:85:91:
         9b:99:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:07 2026 by rpki-client